SuperSoftTech app; 2022 leak exposed ~235M records incl. plaintext emails/passwords; also the 2023 breach. Top-10 Play Store traffic for years despite this.
by the vpncomparison editorial desk · review version 4 · prose updated 2026-09-28 · facts as of 2026-09-28 · how we verify
Super VPN is a free, ad-supported mobile service developed by SuperSoftTech, linked to China through its Hong Kong registration and developer ties. Despite years of top Play Store rankings, it has a documented history of severe data breaches and security failures. This provider offers no verifiable privacy protections, and user data has been repeatedly exposed in plaintext.
Super VPN makes no public logging claim, and there is no evidence - audit, policy, or technical - supporting any no-logs stance. On the contrary, multiple breaches confirm it collected and failed to protect emails, plaintext passwords, payment details, and device IDs. It operates under Chinese jurisdiction via Hong Kong registration, a high-risk environment for data privacy. No warrant canary exists, and no independent audits have ever been published.
Super VPN offers only an ad-supported free tier with no paid upgrade path disclosed. There is no available data on subscription pricing, renewal costs, or contract terms. Given its history of harvesting and leaking user data - including payment information - its "free" model clearly trades user privacy for access. No anonymous signup or refund policy details are provided.
No protocols, obfuscation methods, or security features like a kill switch, multihop, or split tunneling are documented. Support for P2P, streaming, or dedicated IPs is not listed. Server count, country coverage, and device support are unknown. Independent research (MVPNalyzer NDSS 2026) identified Super VPN variants leaking unencrypted traffic, confirming active network risks. No performance testing has been conducted by us.
Ownership is unverified, but SuperSoftTech is tied to Hong Kong and Chinese developers. The provider has a catastrophic track record: a 2020 breach exposed 10 million records, and a 2021 dark web sale included data from SuperVPN, GeckoVPN, and ChatVPN. These incidents revealed logging of credentials and payment data - directly contradicting any implied privacy promise. Google removed it from Play Store in 2020 for unpatched critical flaws.
Super VPN offers no known obfuscation methods. Research confirms it leaks unencrypted traffic, making it detectable and unsafe for use in censored environments. This tool is NOT suitable for users in China, Iran, Russia, or similar networks where stealth and reliability are essential. Safer, audited alternatives with obfuscation exist.
Avoid Super VPN. It has repeatedly leaked user data, including passwords and payment information, proving it logs what it shouldn’t. Free doesn’t mean safe - here, it means exploited. This provider pays no review sites, but it profits from your data. Use a reputable, audited free tier like Cloudflare WARP instead.
| Intro price | see provider site |
|---|
See the 3-year total next to the marketing number: true-cost calculator →
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and this box stays. Until then our links are plain redirects with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
Based on our checks as of 2026-09-28: Super VPN scores 3.8/10 in our weighted review. We logged 3 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
An ad-supported mobile app with no verified privacy protections. It has leaked user data multiple times, including emails and passwords in plaintext. No secure protocols or features are documented.
No pricing data is available - only a free tier is confirmed. However, the cost is your data: payment info and credentials were sold in 2021.
Evidence contradicts any no-logs claim: breaches in 2020 and 2021 exposed emails, plaintext passwords, and device IDs. No audits or policies mitigate this.
No. It lacks obfuscation and leaks unencrypted traffic. Research confirms it’s detectable and unsafe for use in high-censorship regions.
Unknown. No payment or signup details are published. But past breaches show it collected payment data and device IDs - so anonymity is unlikely.
It’s already been hacked multiple times. User data was sold on the dark web. There’s no transparency on incident response or user notification.
Use Cloudflare WARP (free, audited, no logs) or consider Mullvad (flat fee, proven no-logs, accepts cash). Avoid free apps with breach histories like Super VPN.
Structurally the most trustworthy free VPN: a Seattle activist collective running RiseupVPN as a donation-funded experiment - no account, no IP logging, open-so
1M+ (TTP: ranked #82-99 US App Store 2024) installs. Not independently audited in this dossier Included as second instance of the multi-brand farm pattern.
Nonprofit privacy institute; VPN is a member perk, not a product. (Specific VPN subpage 404'd at crawl 2026-09-27 - site restructured.)
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.