Legal

Deleting your Wombat VPN data

Last updated 30 July 2026 · Applies to the Wombat VPN apps for Android and iOS

1. Delete it yourself, from the app

This is the fastest route and needs nothing from us:

1. Open Wombat VPN.
2. Tap the gear icon in the top right to open Settings.
3. Under Your data, tap Revoke this device.
4. Confirm when asked.

The app disconnects, asks our servers to drop your device's public key, and generates a fresh key pair on the device. The old key is gone from our side within seconds. You can keep using the app straight afterwards — it simply appears as a new device.

2. Or ask us

Write to privacy@wombatvpn.com from any address. Because we hold nothing that identifies you, we cannot look you up by name or email — so tell us which of the following you want:

• Your device's public key removed. You can copy it from the app; if you no longer have the app installed, see section 4.
• Your subscription record removed. Quote the anonymous identifier shown in the app, or tell us the store and approximate purchase date and we will locate it.

We answer within 30 days, and normally within a few days.

3. What is deleted, and what is kept

Deleted

• Your device's WireGuard public key and its tunnel IP address. Removed immediately when you revoke, and in any case removed automatically when the entitlement that justified it runs out.
• Your subscription record — the random identifier and the entitlement attached to it — on request.

Kept, and why

• Traffic totals per server.A figure such as “this server moved 4.1 TB this month” is an aggregate over everyone. It contains no per-device figure, so there is nothing in it to delete, and it cannot be traced back to you. Retained indefinitely.
• Payment records held by the app stores. Google Play and Apple keep their own record of purchases, and their retention is governed by their policies and by tax law, not by ours. We never see your card details, name or address.

Never held in the first place

There is nothing to delete here because it was never collected: no browsing history, no DNS queries, no per-user connection records, no stored IP addresses, no name, email, phone number or advertising identifier. The privacy policy lists every stored field.

4. If you have already uninstalled the app

Uninstalling destroys the private key, which existed only on your device. A public key we still hold without it is inert: it cannot be used to establish a tunnel by us or by anyone else, and it identifies a key pair that no longer exists. If you would still like the record removed, write to privacy@wombatvpn.com and we will remove it — mention roughly when you last used the app so we can find it.

5. Your rights

We operate from the European Union and the GDPR applies. You have the right to erasure, to access, and to complain to a supervisory authority. In practice most requests are already satisfied by design: we hold no data linked to an identity, so there is no profile to hand over or correct. Details in the privacy policy.