Nostr VPN Privacy Policy

Effective July 23, 2026

Nostr VPN creates private FIPS mesh tunnels between devices and services you choose and can route traffic through trusted peers or WireGuard exit nodes you configure. Some non-iOS editions also include a Cashu wallet and can discover user-operated paid exit nodes. The iOS App Store edition does not expose the Cashu wallet or paid VPN access.

Data Used to Operate the VPN

Nostr VPN processes the following data on your device, and sends only the data needed to endpoints you choose, to create and maintain VPN connections:

• your Nostr public key, device name, network membership, and peer list;
• tunnel addresses, FIPS peer endpoints, and routing choices;
• join requests, signed roster metadata, relay choices for FIPS discovery, mesh status, and connection state;
• traffic counters and health information shown in the app.

Private keys and local configuration are stored on your device. On Apple devices, supported secrets are stored in Keychain. Packet traffic inside the VPN tunnel is encrypted. When you use an exit node, FIPS relay or bridge path, Nostr relay, or peer-operated device, that operator receives the data needed to provide the connection you asked to use and handles it under its own privacy policy. These are independently operated endpoints selected or configured by you, not data processors acting for Sirius Business Oy.

While an internet exit is active, public DNS can use the DNS servers in your WireGuard profile, Cloudflare encrypted DNS as the Automatic fallback, Quad9, a custom encrypted DNS service you configure, or DNS servers you configure through the exit. The selected independent DNS operator can receive your DNS queries and ordinary connection metadata, such as your IP address and request time, and handles that data under its own privacy policy. Sirius Business Oy does not operate these resolvers or receive those DNS queries.

Cashu Wallet

On supported non-iOS editions, the optional Cashu wallet is non-custodial software. You choose the Cashu mints you use; Sirius Business Oy does not operate a mint or exchange, choose a mint for you, or hold your funds. The wallet seed and proofs are stored locally in the platform's secure credential store where supported. The iOS App Store edition does not expose the Cashu wallet.

Using the wallet sends the protocol requests, tokens, invoices, and transaction details needed for the action to the mint you selected. That mint can also receive ordinary connection information such as your IP address and request time and handles data under its own terms. On platforms that offer optional fiat conversion, enabling it requests public exchange rates from Coinbase and Kraken, which receive ordinary connection metadata.

How Data Is Used and Shared

Nostr VPN uses VPN data only on your device and in transit to operate the VPN features you configure, including discovery, pairing, routing, peer connectivity, and exit-node operation.

Sirius Business Oy does not collect or retain your browsing traffic, private mesh traffic, VPN connection data, wallet balance, or Cashu tokens. It does not sell, use, or disclose VPN data to third parties for any purpose. The app has no advertising or tracking service and no developer-operated VPN relay, exit, or wallet service.

Data the app sends to peers, relays, bridge paths, exit nodes, mints, and other endpoints is a transmission you direct to provide a feature you selected; Sirius Business Oy does not receive or disclose that data. Sirius Business Oy does not provide VPN data to service providers or partners. If that changes, this policy will identify the provider and require protection equal to or greater than this policy before data is shared.

Analytics and Tracking

The app does not include advertising SDKs, third-party analytics SDKs, or cross-app tracking. TestFlight and Apple platforms may provide crash reports or feedback if you choose to submit them through Apple.

Your Choices

You choose which networks, FIPS discovery and rendezvous relays, peers, routes, exit nodes, and Cashu mints to use. You can remove peers, leave networks, stop the VPN tunnel, or remove mints at any time to stop the corresponding processing and transmissions.

Configuration and identity data remain on your device until you remove them or erase the app's local data. Deleting the app removes its ordinary local files, although platform Keychain or secure-storage records can persist independently. Cashu transfers can be irreversible; on editions with a wallet, move any remaining value before erasing wallet data. Independently operated endpoints may retain data under their own policies. Sirius Business Oy has no server-side copy of VPN or wallet data to delete.

Contact

For privacy questions or help exercising these choices, contact nostrvpn@siriusbusiness.fi.