← MugVPN

Privacy policy

Effective 16 October 2026. It covers MugVPN in both of its editions: the one downloaded from this site or Homebrew, and the one from the Mac App Store.

In short

MugVPN's authors collect no data about you. MugVPN has no servers of its own, no analytics, no advertising and no account. Nothing you do in MugVPN is sent to its authors, sold or shared with anyone.

What stays on your Mac

• Connection profiles you import or create (the server's address, certificates and keys in them, your settings for each connection) are files on your Mac.
• Passwords you choose to save are kept in your login Keychain.
• Logs of your connections (as OpenVPN writes them: times, servers, addresses, routes) are kept on your Mac, bounded in size, for you to read in MugVPN. Diagnostics are put together only when you ask for them, with keys and passwords removed, and saved where you choose; MugVPN sends them nowhere.
• Settings of the app.

Uninstalling MugVPN removes them (profiles too, unless you choose to keep them).

What goes over the network, and to whom

• Your VPN servers. MugVPN connects to the servers named in your profiles. Your traffic for them goes through the VPN to the server and its network, which is run by whoever runs that VPN (your company, a provider you chose, yourself), not by MugVPN's authors. Usernames and passwords go to the VPN server (or to the HTTP proxy you set up) that asks for them as you connect, over that VPN's protocol.
• A profile's address, when you import a profile from a URL or an OpenVPN Access Server: MugVPN downloads it from there, over HTTPS, with the username and password you give for it.
• Apple's captive-portal page (http://captive.apple.com): after a network change or a wake, MugVPN asks for it, as macOS itself does, to tell whether the network wants a sign-in first (hotel, airport Wi-Fi). Apple and the network see that request as any web request, your IP address among it; it carries nothing about you or your connections.
• A sign-in page a VPN server asks you to open (web sign-in) opens in your browser.

Nothing else: no update checks of MugVPN's own, no crash reporting of its own, no telemetry. The Mac App Store edition is updated through the App Store; Apple's own handling of App Store data is Apple's.

What MugVPN's authors receive

Nothing, unless you write to them: an issue or a message you send through GitHub is seen by them (and, for an issue, by anyone), under GitHub's terms.

Contact

Questions about privacy, or a request about your data: open an issue at github.com/tanderbold/MugVPN/issues, or, privately, through GitHub's private reporting.

Changes

A change to this policy is published here, with its date, before the version of MugVPN it concerns.