LUMENROUTE VPN · PRIVACY NOTICE

A private route, explained clearly.

Effective October 25, 2026. LumenRoute is a free VPN with no account, advertising, analytics SDK, or subscription.

The key used to open a route

The app creates a WireGuard key pair on the Android device. Its private key is encrypted using Android Keystore-backed protection and stays on the phone. When you connect, LumenRoute sends the corresponding public key over HTTPS to relay.lumenroutevpn.com. The relay derives a tunnel address and places the public key in the running WireGuard peer table.

The London relay does not write the public key, source IP, or tunnel address to a persistent user-profile database. The live peer remains in volatile system memory until you choose Erase VPN key from this phone or the node restarts. Erasing also removes the local private key; a future connection creates a new key.

What crosses the relay

During an active VPN session, the node necessarily handles your source IP, DNS requests, destination IP addresses, packet sizes, and traffic content in transit. This is the work of forwarding a VPN connection. LumenRoute does not use it to build a profile. The relay and its local DNS resolver are configured not to retain browsing history, DNS-query history, connection timestamps, or per-user bandwidth totals.

The current London route carries IPv4 only. LumenRoute does not add an IPv6 address, route, or DNS resolver to the Android VPN interface, so Android blocks IPv6 for the duration of the connection instead of letting it fall through outside the relay.

What we do not request

LumenRoute does not request a name, email address, phone number, contacts, account password, payment data, advertising ID, or precise device location. It contains no ad, analytics, attribution, or third-party crash-reporting SDK.

Infrastructure and disclosure

The VPN node is a server obtained through BitLaunch in London, United Kingdom. Cloudflare provides domain-name service, hosts this policy website, and forwards messages addressed to LumenRoute's privacy and support aliases. The WireGuard UDP tunnel connects directly to the node rather than passing through Cloudflare. Cloudflare may process standard website and email-delivery metadata. The operator's Google-hosted destination mailbox processes correspondence only when a person chooses to contact us. Google separately handles Play Store distribution information under Google's policies.

We do not sell data or disclose it for behavioral advertising. We may respond to a valid legal requirement or a genuine security incident, but the no-history configuration means we cannot supply traffic logs that do not exist.

Protection, limits, and audience

Provisioning uses HTTPS and the device-to-node tunnel uses WireGuard. Server access is key-only and restricted by a firewall. A VPN protects the segment to the relay; it cannot make you anonymous to services where you sign in, and ordinary Internet traffic after the relay should still use HTTPS.

The app is not directed to children under 13. Technical processing occurs in the United Kingdom because that is where the relay is located.

Questions and revisions

We will change the date above if this notice changes materially. Privacy inquiries: privacy@lumenroutevpn.com. Product help: support@lumenroutevpn.com. Text-only fallback: privacy [at] lumenroutevpn.com. Voluntary email content and the sender address are used to respond and manage the inquiry. A sender may request deletion, except for limited records needed for legal, security, or deletion-confirmation purposes.