Creating a device tunnel
The app generates a WireGuard key pair. It sends the public key over HTTPS to tunnel.northcovevpn.com; it does not send the private key. The Singapore node stores the public key and its assigned IPv4 tunnel address in the peer registry. Those records are the minimum routing information needed to recognize the peer.
What the node sees at sea
While the VPN is connected, the node necessarily processes the source IP address, DNS questions, destination IP addresses, packet sizes, and packet content in transit. Those operations deliver the VPN; they are not used for advertising or profiling. The endpoint and its local DNS resolver are configured not to retain websites visited, DNS-query history, connection timestamps, or per-user bandwidth history.
This passage supports IPv4. NorthCove supplies no IPv6 address, route, or DNS server to Android's VPN interface. Android consequently blocks IPv6 during the passage, keeping it from sailing outside the IPv4 tunnel.
Returning and releasing
Return and disconnect stops network forwarding but keeps the peer so that the same installation can reconnect. To remove the record, disconnect and choose Release and delete device tunnel. The server deletes the public key and assigned addresses, and the app erases the protected private key. Connecting again creates a different key pair.
Who supports the passage
The VPN node is hosted on cloud infrastructure purchased through BitLaunch and is located in Singapore. Cloudflare is used for authoritative DNS, this policy website, and forwarding mail addressed to NorthCove's privacy and support aliases. VPN packets travel directly to the node and are not proxied by Cloudflare; a website visit or mail delivery can create ordinary Cloudflare metadata. The operator's Google-hosted destination mailbox processes correspondence only when someone chooses to write to us. Google separately processes app-store information when distributing the Android package.
We do not share data for another company's marketing. We may comply with a binding legal demand or act on a security incident. The service cannot produce browsing or DNS logs it was not configured to keep.
Security and practical limits
Provisioning is protected by TLS and the tunnel by WireGuard. Server administration is key-only behind a firewall. A VPN protects traffic to its exit node; it does not hide information you voluntarily give a website, and it does not replace end-to-end protections such as HTTPS.
Age, region, and updates
NorthCove is a general-audience utility and is not directed to children under 13. The technical data above is processed in Singapore. If practices materially change, this page will show a new effective date before or when the change takes effect.
Contact the operator
Privacy and deletion: [email protected]
General support: [email protected]
Plain-text fallback: privacy [at] northcovevpn.com.
We use a voluntarily supplied sender address and message to answer and administer the inquiry. A sender can ask us to delete the correspondence, except for narrow records needed for law, security, or confirmation that a deletion request was fulfilled.