Thunder VPN

134 of 158 criteria sourced · 15 % unsourcedProvider websiteView in the matrixJSON export

vpn-matrix.com earns nothing from this entry. The link to the provider website is a source, not a recommendation.

Who owns this

We have no sourced parent company for Thunder VPN. That does not mean there is none.

Audits and incidents

Sourced facts with dates only, no judgements. Ongoing proceedings are marked as such.

Tested in court or by authorities

trust.court_tested

noneprovider claim

Security incidents and data leaks

trust.breach_history

none documentedprovider claim

No-logs audit details

trust.nolog_audit_details

No public no-log audit; vague privacy claimsprovider claim

App and client audits

trust.app_audits

noneprovider claim

Infrastructure and server audits

trust.infra_audit

noneprovider claim

Transparency report

trust.transparency_report

noneprovider claim

Warrant canary

trust.warrant_canary

noneprovider claim

Acquisition history / former name

company.acquisition_history

none documentedprovider claim

Documented misleading advertising claims

company.misleading_claims

Play Store VPN category; developer Secure Signal Inc.provider claim

User base migrated to

company.user_base_migrated_to

noneprovider claim

All criteria

Empty cells mean we lack the source.

Company and ownership

20/21 sourced

Legal company name

company.legal_name

Secure Signal Incprovider claim

Trademark holder, if different

company.brand_owner

Thunder VPN (Play listing)provider claim

Year founded

company.founded

2016provider claim

Headquarters (country)

company.hq_country

USprovider claim

Other relevant jurisdictions

company.jurisdictions

United States (Delaware registered address on Play Store/site)provider claim

Intelligence alliance of the home country

company.eyes_alliance

Five Eyesconfirmed

Parent group / holding

company.parent

Secure Signal Inc. (Play developer)provider claim

Beneficial owners publicly known

company.ubo_public

not knownprovider claim

Ownership structure

company.ownership_type

owners undisclosedprovider claim

Leadership team publicly named

company.team_public

noprovider claim

Verifiable postal address for legal service

company.address_verifiable

yesprovider claim

Sister VPN brands in the group

company.sister_vpn_brands

Secure VPN-Safer Internet (same developer Secure Signal Inc. on Play Store / site)provider claim

Group owns VPN review and comparison sites

company.owns_review_sites

noneprovider claim

Runs an affiliate programme

company.affiliate_program

noprovider claim

Typical commission rate

company.affiliate_commission

noneprovider claim

YouTube and influencer sponsoring

company.influencer_sponsoring

occasionalprovider claim

Documented misleading advertising claims

company.misleading_claims

Play Store VPN category; developer Secure Signal Inc.provider claim

Acquisition history / former name

company.acquisition_history

none documentedprovider claim

Operating status

company.status

activeprovider claim

Discontinuation date

company.discontinued_date

We have no source for this criterion.

User base migrated to

company.user_base_migrated_to

noneprovider claim

Logging and data collection

15/16 sourced

Core statement of the logging policy

logging.policy_summary

Secure Signal Privacy Policy claims no traffic/browsing logs and no connection logs tied to IP/timestamp/session duration, while collecting aggregate non-personal device/analytics data and Firebase. Thunder Terms page separately lists collection of ISP, device details, connection times and daily data transferred — policies conflict on connection metadata.provider claim

Activity and traffic logs

logging.activity_logs

noneprovider claim

Connection logs

logging.connection_logs

unclearprovider claim

Storage of the real IP address

logging.source_ip_stored

not storedprovider claim

Storage of the assigned VPN IP

logging.assigned_ip_stored

unclearprovider claim

Precision of stored timestamps

logging.timestamps_stored

unclearprovider claim

Recording of transferred data volume

logging.bandwidth_logged

aggregate onlyprovider claim

Enforcement of the device limit

logging.concurrent_conn_enforcement

Single device free tier typicalprovider claim

Minimum account data required

logging.account_data_minimum

Anonymous use; registration/personal information not requiredprovider claim

Telemetry in the apps

logging.app_telemetry

cannot be disabledprovider claim

Trackers and SDKs in the Android app

logging.thirdparty_sdks_android

AdMob and analytics SDKs (ad-supported)confirmed

Trackers in the iOS app

logging.thirdparty_sdks_ios

N/A — Android primary platformprovider claim

Trackers and cookies on the website

logging.website_trackers

none — mobile app onlyprovider claim

Data shared with third parties

logging.data_shared_with

Google Firebase and other third-party libraries/analytics as describedprovider claim

Retention periods stated in the policy

logging.retention_period

Not disclosed in Play Store listingprovider claim

EU representative named under GDPR

logging.gdpr_representative

We have no source for this criterion.

Evidence, audits and track record

16/17 sourced

Independent no-logs audit

trust.nolog_audit

noprovider claim

No-logs audit details

trust.nolog_audit_details

No public no-log audit; vague privacy claimsprovider claim

Audit report published

trust.audit_report_public

not publishedprovider claim

App and client audits

trust.app_audits

noneprovider claim

Infrastructure and server audits

trust.infra_audit

noneprovider claim

Audit frequency

trust.audit_cadence

never auditedprovider claim

Tested in court or by authorities

trust.court_tested

noneprovider claim

Transparency report

trust.transparency_report

noneprovider claim

Warrant canary

trust.warrant_canary

noneprovider claim

Security incidents and data leaks

trust.breach_history

none documentedprovider claim

Bug bounty programme

trust.bug_bounty

noneprovider claim

Handling of reported vulnerabilities

trust.cve_handling

unknownprovider claim

Open source clients

trust.opensource_clients

noneprovider claim

Open source server side

trust.opensource_server

We have no source for this criterion.

Reproducible builds

trust.reproducible_builds

noprovider claim

Available on F-Droid

trust.fdroid_available

noprovider claim

Listings by independent bodies

trust.independent_recommendations

noneprovider claim

Protocols and cryptography

16/17 sourced

WireGuard

crypto.wireguard

noprovider claim

OpenVPN over UDP

crypto.openvpn_udp

noprovider claim

OpenVPN over TCP

crypto.openvpn_tcp

noprovider claim

IKEv2/IPsec

crypto.ikev2

noprovider claim

Proprietary protocol

crypto.proprietary_protocol

unclearprovider claim

Legacy protocols still offered

crypto.legacy_protocols

none documentedprovider claim

Default data cipher

crypto.data_cipher_default

not disclosedprovider claim

Weakest accepted cipher

crypto.data_cipher_weakest

not disclosedprovider claim

Key exchange and authentication

crypto.handshake

not disclosedprovider claim

Perfect forward secrecy

crypto.pfs

noprovider claim

Post-quantum key exchange

crypto.post_quantum

not availableprovider claim

Own DNS resolvers

crypto.own_dns

noprovider claim

DNS leak protection

crypto.dns_leak_protection

We have no source for this criterion.

IPv6 handling

crypto.ipv6_handling

unclearprovider claim

WebRTC protection or guidance

crypto.webrtc_guidance

noprovider claim

Obfuscation methods

crypto.obfuscation

noprovider claim

Usability behind the Great Firewall

crypto.works_in_china

unclearprovider claim

Features

15/20 sourced

Kill switch

features.killswitch

per applicationprovider claim

Permanent lockdown

features.killswitch_permanent

noprovider claim

Split tunneling

features.split_tunneling

Trueprovider claim

Multihop

features.multihop

not availableprovider claim

Tor integration (Onion over VPN)

features.tor_integration

noprovider claim

Port forwarding

features.port_forwarding

not availableprovider claim

Surcharge for a dedicated IP

features.dedicated_ip

€0.00provider claim

SOCKS5 proxy

features.socks5

noprovider claim

HTTP proxy

features.http_proxy

noprovider claim

Smart DNS

features.smart_dns

noprovider claim

Ad and tracker filtering in DNS

features.adblock_dns

not availableprovider claim

Malware and phishing filter

features.malware_filter

noprovider claim

Custom DNS servers allowed

features.custom_dns_allowed

noprovider claim

Local network access toggle

features.lan_access_toggle

noprovider claim

Auto connect rules

features.autoconnect_rules

noprovider claim

Private device network (mesh)

features.mesh_private_net

We have no source for this criterion.

GPS location override (Android)

features.gps_spoofing

We have no source for this criterion.

Traffic analysis defence

features.traffic_analysis_defense

We have no source for this criterion.

IPv6 inside the tunnel

features.ipv6_tunnel

We have no source for this criterion.

Obfuscation without configuration

features.stealth_default

We have no source for this criterion.

Servers and network

11/12 sourced

Number of servers

network.server_count

0 Serverprovider claim

Number of countries

network.country_count

0 Laenderprovider claim

Number of cities

network.city_count

0 Staedteprovider claim

Virtual locations

network.virtual_locations

not labelledprovider claim

RAM-only servers (diskless)

network.ram_only

noprovider claim

Hardware ownership

network.ownership

rentedprovider claim

Own AS (autonomous system)

network.own_asn

noprovider claim

10 Gbps ports

network.10g_servers

noprovider claim

P2P and file sharing

network.p2p_servers

not permittedprovider claim

Public server list

network.server_list_public

noprovider claim

Public status page

network.status_page

noprovider claim

Known upstream hosting providers

network.hosting_providers

We have no source for this criterion.

Apps and platforms

16/16 sourced

Windows app

apps.windows

not availableprovider claim

macOS app

apps.macos

not availableprovider claim

Linux app with GUI

apps.linux_gui

not availableprovider claim

Linux command line

apps.linux_cli

not availableprovider claim

Android app

apps.android

native appprovider claim

iOS app

apps.ios

not availableprovider claim

Android TV app

apps.androidtv

not availableprovider claim

Apple TV app

apps.appletv

not availableprovider claim

Fire TV app

apps.firetv

not availableprovider claim

Browser extension

apps.browser_ext

not availableprovider claim

Type of browser extension

apps.browser_ext_type

no extensionprovider claim

Router support

apps.router_support

noprovider claim

Native build for Apple Silicon

apps.macos_arm_native

noprovider claim

Command line documented

apps.cli_documented

noprovider claim

Simultaneous devices

apps.simultaneous_devices

1provider claim

Usable without an account

apps.no_account_needed

yesprovider claim

Account, pricing and payment

17/17 sourced

Data required at signup

pricing.signup_email_required

nothing requiredprovider claim

Account model

pricing.account_model

email as loginprovider claim

Cash by mail

pricing.cash_by_mail

noprovider claim

Monero

pricing.monero

noprovider claim

Bitcoin

pricing.bitcoin

noprovider claim

Lightning

pricing.lightning

noprovider claim

Retail gift cards

pricing.retail_giftcards

noprovider claim

PayPal

pricing.paypal

noprovider claim

Credit and debit card

pricing.credit_card

yesprovider claim

SEPA payment

pricing.sepa

noprovider claim

Monthly price

pricing.monthly_price

€0.00provider claim

Effective price on the longest term

pricing.effective_price_longest

€0.00provider claim

Price change at renewal

pricing.renewal_price_hike

same priceprovider claim

Flat pricing without permanent discounts

pricing.flat_pricing

yesprovider claim

Free tier and its limits

pricing.free_tier

Free with ads and in-app purchases; 100M+ installs on Play Storeconfirmed

Money-back window

pricing.moneyback_days

0 Tageprovider claim

Cancellation path

pricing.cancellation_ease

cancel in accountprovider claim

Usage and performance

1/10 sourced

P2P policy in the terms of service

usage.p2p_policy

We have no source for this criterion.

Streaming unblocking officially advertised

usage.streaming_officially

We have no source for this criterion.

Netflix regions reported

usage.netflix_regions_reported

We have no source for this criterion.

Other streaming services

usage.other_streaming_services

We have no source for this criterion.

Bandwidth cap

usage.bandwidth_cap

no limitprovider claim

Data cap

usage.data_cap

We have no source for this criterion.

Speed measurement references

usage.speed_references

We have no source for this criterion.

Latency and gaming suitability

usage.latency_gaming

We have no source for this criterion.

SMTP and port 25 handling

usage.smtp_policy

We have no source for this criterion.

Official support in restrictive countries

usage.restrictive_countries_support

We have no source for this criterion.

Support and documentation

5/7 sourced

24/7 live chat

support.livechat_247

noprovider claim

Email or ticket support

support.email

yesprovider claim

Telephone support

support.phone

noprovider claim

German-language support

support.german_language

noprovider claim

Documentation assessment

support.docs_quality

thin or outdatedprovider claim

Self-hosted chat widget

support.selfhosted_chat

We have no source for this criterion.

Self-service account deletion

support.account_deletion_easy

We have no source for this criterion.

Provider website hygiene

2/5 sourced

SSL Labs grade of the website

site.ssl_grade

We have no source for this criterion.

Tracker load of the website

site.cookie_privacy_impact

We have no source for this criterion.

URL of the warrant canary

site.canary_page

noneprovider claim

Length and readability of the legal documents

site.tos_readability

poorprovider claim

Marketing claims contradicting the provider's own terms

site.claims_vs_reality

We have no source for this criterion.

Something wrong here?

If a value is wrong or outdated, report it with evidence. Every change is reviewed and then appears publicly in the changelog.