This notice supplements the Fubble VPN Privacy Policy for visitors of fubblevpn.com and its language prefixes. The VPN apps themselves are no-logs; this page is only about the marketing website and web tools.
Controller: LUNEXLAB OÜ, registry code 17218832, Tornimäe tn 5, 10145 Tallinn, Estonia — [email protected].
You can read the site without creating an account. Our web server may process the IP address of the request, time, requested URL, user-agent, and referrer for security, abuse prevention, and to deliver the page. We do not use raw logs to profile you. Aggregated counts may be kept longer.
Legal basis: legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
Strictly necessary cookies (consent storage, language) do not require opt-in. Google Analytics and Ahrefs Analytics run only if you accept analytics in the cookie banner. Details: Cookies Policy.
Legal basis for analytics: consent (Art. 6(1)(a)). You can withdraw by rejecting analytics and clearing cookies.
If you send a message, we process your name (if provided), email, message, and the site you came from (fubblevpn.com or lunexlab.com). We use that to reply. We may notify support via email and internally via Telegram. We do not use contact-form data for unrelated marketing unless you ask us to.
Legal basis: Art. 6(1)(b) and (f).
The tools page can show your connection IP and whether
it is a Fubble VPN exit (boolean only). We use the
request IP — never a client-supplied ?ip=
— and we do not return a list of servers. Geo lookup,
WebRTC, IPv6 echo, speed-test math, and the DNS leak
probe may run in your browser. The DNS check talks
directly to bash.ws so that service — not our origin —
can see which resolvers answered. We do not proxy that
traffic through Fubble servers.
If you open the Telegram login helper, we process the device identifier and device type needed to complete the link you started in the app. Telegram’s own privacy policy applies to your Telegram account.
App-store and AppsFlyer banners help you install Fubble VPN. Those third parties may process device data under their policies if the banner script runs.
The same GDPR rights as in the main Privacy Policy apply. Supervisory authority: Estonian Data Protection Inspectorate (aki.ee). Requests: [email protected].