SPACEBLAST VPN
Spaceblast VPN

Spaceblast VPN Privacy Policy

Effective date: September 7, 2026

This Privacy Policy describes how data is processed in the Spaceblast VPN mobile application with the package identifier ferocious.apps.spaceblast (the “App”).

The operator of the App is MWFDSERVICES LIMITED, a company registered in the United Kingdom (“we”, “us”, or “our”). For privacy-related inquiries, contact us at contact@mwfdservices.site.

1. Data We Process

1.1. Account, Authentication, and Payments

The App can be used with an anonymous account, or you may link a sign-in method. Depending on the features you use, we process:

  • your internal user ID and UUID, account creation date, and account status;
  • your phone number, one-time verification code, and data associated with linked Google and Telegram accounts;
  • session access and refresh tokens. They are stored in encrypted storage on your device and transmitted to our backend to authorize requests;
  • your selected plan, subscription status, purchase ID, purchase token, expiration date, traffic allowance, and traffic used.

We do not receive passwords for third-party services or full payment card details. Payment details are processed by Google Play or another payment provider selected by you.

1.2. Device and App Usage

To operate the service, maintain security, diagnose issues, and perform analytics, we process:

  • the system Android ID, Firebase Installation ID, Crashlytics identifiers, and Firebase Cloud Messaging identifiers;
  • your IP address, device model, Android and App versions, language, time zone, and network connection parameters;
  • information about App launches, screens opened, permissions, settings, subscriptions, advertising, VPN connection attempts and results, the selected server, and connection duration;
  • information about crashes and errors, including the time, stack trace, App state, and technical characteristics of the device.

The Android ID is used as a stable installation identifier to create and restore the installation account, preserve the traffic allowance after reinstallation, and verify the session. It is transmitted to our backend in the X-Installation-ID header with every request. We do not use the Android ID as an advertising identifier or share it with third-party partners.

Firebase is used for crash diagnostics, push notifications, remote configuration, and per-installation identifiers required by those services. Firebase Analytics is not included in the App. Product analytics are sent directly to our backend and are not routed through Firebase Analytics. Push notifications may contain service, marketing, or advertising content.

1.3. Support and App List

When you contact support, we process your messages, images, selected issue type, the resource specified by you, the date of the request, and the conversation history. A diagnostic snapshot containing technical information about your device, network, VPN, server, settings, subscription, and DNS/TCP test results may be attached to the first message. It does not contain session tokens, the raw VPN configuration, SSID, VPN traffic content, or the full list of installed apps.

For the app exclusion feature, the App obtains a list of apps with launcher activities locally on the device. Package names and the exclusion list are not transmitted to our backend; diagnostics may include only the number of excluded apps.

1.4. Advertising

The App includes Appodeal Mediation and the enabled BidMachine, Mintegral, and Unity Ads advertising SDKs. Appodeal also includes consent-management and ad measurement components. To load and display interstitial ads, limit their frequency, measure performance, and prevent ad fraud, these SDKs may process the Android Advertising ID and similar identifiers, your IP address, device and app information, network and mobile carrier information, ad impressions, clicks, dismissals, diagnostics, and performance data.

The App asks for optional approximate location access to select VPN servers that are expected to work well in the user's region. This permission is not requested solely for advertising. If you grant it, Appodeal or an enabled advertising partner may also access and process the approximate location supplied by Android for ad delivery, measurement, or fraud prevention. If you skip or deny the permission, advertising may instead be targeted using an approximate region derived from your IP address.

We do not intentionally pass Appodeal or its advertising partners the system Android ID used by our backend, VPN traffic content, browsing history, support messages, your phone number, sign-in data, or Google Play purchase token. The App does not set an Appodeal user ID or submit in-app purchase records to Appodeal. Appodeal selects among the enabled advertising partners automatically.

Where required by applicable law, platform rules, or regional settings, Appodeal's consent-management interface asks for or records your advertising privacy choices and communicates them to the enabled advertising partners. If you decline personalized advertising, you may receive non-personalized or contextual ads. You can also reset or restrict the Advertising ID in Android settings. To withdraw consent or exercise an applicable advertising privacy right, contact us using the details in Section 6.

2. VPN Traffic Processing

The App creates a system VPN tunnel and encrypts data between your device and the selected VPN server. To route traffic, VPN servers and their infrastructure providers technically process your IP address, destination addresses, traffic volume, transmission time, and the content of transmitted data.

Technical VPN server logs contain the source IP address, date, time, and duration of the connection, as well as the amount of data sent and received, and are retained for up to one year. Destination addresses, visited domains, DNS queries, and traffic content are not logged.

A server may be located in Russia or another country. The country in which data is processed depends on the server and infrastructure provider you select.

For DNS queries, you may select Google Public DNS, Cloudflare 1.1.1.1, or AdGuard DNS. The selected provider receives the domain name, query type, and technical connection data and processes them under its own privacy policy.

Traffic from apps that you exclude from the VPN passes directly through your regular internet connection. We do not use VPN traffic for advertising or provide it to Appodeal or Firebase.

Before the first connection, the App separately explains the processing of VPN data and requests your consent. The connection does not begin until you select “Agree and continue.” The version of the notice and the time of acceptance are stored locally.

3. Data Recipients

Depending on the feature you use, data is provided to:

  • our backend, VPN servers, and the infrastructure providers described above;
  • Google for optional Google authentication, Google Play Billing, in-app updates, Firebase Crashlytics, Remote Config, Cloud Messaging, and Firebase Installations;
  • Appodeal, BidMachine, Mintegral, and Unity Ads for advertising operations;
  • Telegram when you choose to sign in or link an account through Telegram;
  • your selected DNS or payment provider;
  • competent authorities where disclosure is legally required.

Third-party recipients process data under their own policies and may be located in different countries.

Their privacy information is available at:

4. Retention Periods

  • account and subscription data and the associated Android ID are retained for as long as the account exists;
  • backend and VPN server technical logs, product analytics, support requests, diagnostic data, and purchase data are retained for up to one year;
  • backups are retained for up to one year;
  • local data is retained until you clear the App data or uninstall the App.

Firebase, Appodeal, Google Play, and other third-party services apply their own retention periods.

5. Account and Data Deletion

You can submit a deletion request to contact@mwfdservices.site. In the App, selecting “Profile” → “Delete account” opens a pre-addressed email. To verify account ownership, we may request an identifier or information about your sign-in method. Public instructions are available at https://vpn.spaceblast.ru/legal/policy-mobile.

Deleting your account does not cancel a Google Play subscription. To avoid future charges, you must cancel the subscription separately in Google Play. Deleting an account or cancelling a subscription does not automatically result in a refund of amounts previously paid.

After a request is confirmed, the account and associated data are deleted or irreversibly anonymized in our production systems within one month. Purchase records, security data, and technical logs may be retained for up to one year to resolve disputes and prevent fraud. Backups are deleted during scheduled rotation within one year. Uninstalling the App does not delete the server-side account.

6. Your Rights and Data Security

You may request access to, correction of, a copy of, or deletion of your data, restriction of processing, or withdrawal of consent by contacting contact@mwfdservices.site. To protect the account, we may ask you to verify account ownership.

We use secure connections, restrict access to data, and store session tokens on the device in encrypted storage.

7. Age Restrictions

The App is not intended for children under 13, and we do not knowingly collect personal data from children under 13.

If the user's country sets a higher minimum age for independently consenting to personal data processing, a user below that age may use the App only with the consent of a parent or legal guardian.

If you believe that a child provided personal data without the required consent, contact us at contact@mwfdservices.site. We will review the request and delete the relevant data where appropriate.

8. Changes to This Policy

When this Privacy Policy is updated, we change the effective date at the top of the document. We may also provide notice of material changes in the App.