2.3
our score no user ratings - rate it →

Thunder VPN Review

Thunder VPN is the app-farm version of the free-VPN trap: a 100-million-install product whose operator does not exist on paper under any verifiable name. The evidence trail is consistent across five years of independent scrutiny - Top10VPN's ownership investigation (2020) got the developers to admit by email they are from Hong Kong but refuse to say who they are, confirmed the US address is 'for payment purposes only', and graded the privacy policy POOR; the operator's own Terms of Service say 'we will not collect... traffic data or browsing activity' and then list ISP, device details, connection times, per-day bandwidth and 'etc.', while sending diagnostics to third-party analytics; Google's data-safety box admits collecting device identifiers, sharing app data with third parties, and that data 'can't be deleted'; and a peer-reviewed NDSS 2026 study placed Thunder VPN among 76 Android VPN apps that transmit the Advertising ID used for device and user tracking. The engineering is as thin as the identity: an outdated SSL-based tunnel (no OpenVPN, no WireGuard), no kill switch, four server countries, up to 87% speed loss, and an ad on every connect/disconnect. Meanwhile the Thunder VPN brand itself is a shell game - a different Thunder VPN with undisclosed Qihoo 360 (US-sanctioned) ties was pulled from Apple's US App Store in 2025, and the iOS 'Thunder VPN: VPN Fast & Secure' has migrated between developer entities and DUNS numbers in Vietnam and Hong Kong. The honest positives are real but small: it is genuinely free with no data cap, no registration, it passed IP/DNS leak tests in three independent reviews, and some users find it stable. None of that outweighs routing your traffic through an anonymous, unaudited, ad-monetized operator whose own documents contradict its headline claim.

no-logs contradicted7 red flagsfacts verified - Google Play listings for Thunder VPN and its sibling Secure VPN, the Apple App Store listing (HU locale; a US-locale fetch of the same app id returned 404), the operator site thunder.free-signal.com (homepage + Terms of Service/privacy text), the signallab.org privacy policy, Top10VPN's Thunder VPN review and its 2020 free-VPN Chinese-ownership investigation, the vpnMentor review, PrivacySharks review, VPN Love analysis, MWM app-intelligence page, NBC News, two Tech Transparency Project reports, the NDSS 2026 MVPNalyzer paper (PDF downloaded and text-extracted), HN Algolia API and the arctic-shift Reddit archive were all fetched live 2026-11-03. Caveats: arctic-shift body/title text-search returned 422 timeouts all session (known failure mode), so Reddit mentions were gathered via link_id thread endpoints and via web-search snippets; reddit.com direct fetch returned 403 and pullpush.io returned 522. A ~2,400-comment scan of recent r/VPN, r/androidapps, r/VPN_Question and r/privacy comment pages found zero Thunder VPN mentions - the brand has largely dropped out of current VPN-community discussion. Brand collision warning: at least two unrelated products use the Thunder VPN name; this dossier covers the Signal Lab / Secure Signal Inc. Android app (com.fast.free.unblock.thunder.vpn) and distinguishes the Qihoo-linked iOS app where relevant.
Visit Thunder VPN Read full review

site domain gone · checked 19 h ago · daily check

Red flags (7):
  • app-farm pattern: Thunder VPN's near-identical sibling Secure VPN (com.fast.free.unblock.secure.vpn, also 100M+ installs) sits under the same developer entity (Secure Signal Inc., same Dover DE address, same free-signal.com support domain, same boilerplate description word-for-word), and the same pairing appears on iOS under Signal Lab/Signal Software Ltd - a template app farm, not a VPN operator
  • operator opacity and entity churn: anonymous Hong Kong developers who refused to identify themselves (Top10VPN 2020); developer-name rotation across stores and years; support on generic Gmail addresses (signallab07@gmail.com, signallabgroup@gmail.com, signalsoftwareltdvn@gmail.com)
  • ad-SDK data collection: Play data-safety section admits collecting 'Device or other IDs' and sharing 'App info and performance' with third parties, with 'Data can't be deleted'; the current policy names Google Advertising ID and Firebase (VPN Love); NDSS 2026 peer-reviewed study lists Thunder VPN in its 'Tracking (76)' category - apps that transmit the Advertising ID, 'the device-unique ID widely used for device and user tracking'
+4 more red flags - expand before signing up
  • no-logs claim contradicted by the operator's own documents (Terms of Service collection list; policy history documented by Top10VPN/vpnMentor/PrivacySharks)
  • brand collision with sanctioned-entity-linked apps: TTP (April 2025) traced a 'Thunder VPN' iOS app (ranked 60th of the top 100 free US App Store VPNs in 2024) to the Innovative Connecting network acquired by Qihoo 360, a US-sanctioned company designated by the Pentagon as a 'Chinese military company'; Apple removed Thunder VPN and Snap VPN after the Financial Times asked for comment, and Signal Secure VPN disappeared by early May 2025 - NBC News covered the removals. The Signal Lab Android app is a different product, but the shared name means users cannot reliably tell which 'Thunder VPN' they are installing
  • no independent audit of security or logging claims exists for any Thunder VPN product (Top10VPN, VPN Love both note the absence)
  • jurisdictional opacity: data-controller statement claims Hong Kong registration, the Google Play entity is a Delaware shell, the iOS trader is a Vietnam entity - with no way to establish which law actually governs the servers

Review

draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-11-03 · facts as of 2026-11-03 · how we verify

Honesty note: we have not run our own tests on Thunder VPN yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.

Overview

Thunder VPN is a free, ad-funded Android mobile app operated by an anonymous developer entity known as Signal Lab (now listed as Secure Signal Inc. on Google Play), which runs a farm of near-identical apps under rotating corporate shells. It offers unlimited data with no registration but routes your traffic through an unaudited, opaque operation. The core caveat: its no-logs claim is directly contradicted by its own data collection practices.

Logging & privacy

The provider claims a “strict no-logging policy” and promises not to collect browsing activity, traffic data, or personal identifiers. However, its own Terms of Service admit to logging your ISP, device OS, model, language, app version, connection times, daily data transfer, and diagnostic data shared with third-party analytics. The logging claim is rated contradicted - not just unproven, but actively undermined by the operator’s disclosures. A peer-reviewed NDSS 2026 study confirmed Thunder VPN transmits the Google Advertising ID, enabling device and user tracking. No independent audit exists. Jurisdiction is a maze: Google Play lists a Delaware shell, the operator claims Hong Kong registration, and iOS listings point to Vietnam - with no clarity on which laws apply.

Pricing & the renewal trap

Thunder VPN is free to use with no data cap, no registration, and no payment required. The upsell is a VIP subscription, priced at $4.99/month or $4.16/month billed annually (~$49.92/year). There is no refund policy (0-day window), and payments are handled via Google Play or Apple in-app billing, which take 15-30% commissions. The three_year_cash_total is not available, but consistent use of the premium tier would incur recurring charges with no verified long-term total. You get unlimited access in the free version, but pay with your attention and device data.

Features & performance

Thunder VPN uses a proprietary SSL-based tunnel - outdated, with no OpenVPN or WireGuard support, and only AES-128 encryption. It lacks a kill switch, multihop, P2P support, streaming unblocking, or obfuscation. Split tunneling is available on Android. Server count is limited to 4 countries, and performance reviews report up to 87% speed loss. While it passes basic IP and DNS leak tests, it offers no meaningful protection against network-level detection. There is no self-testing data, but third-party reviews consistently rate its speed and reliability poorly.

Ownership & track record

The operator hides behind multiple identities: Secure Signal Inc. (Delaware), Signal Lab SOFTWARE LIMITED (Hong Kong), and Signal Software Ltd (Vietnam). Top10VPN’s 2020 investigation confirmed the developers are Hong Kong-based Chinese nationals who refused to reveal their identities, calling the US address “for payment purposes only.” The app farm pattern is clear - Thunder VPN and its sibling Secure VPN share identical descriptions, support domains, and data practices. Red flags include transmission of Advertising IDs (per NDSS 2026), jurisdictional obfuscation, and a privacy policy that contradicts its own no-logs claim. The data_quality is verified, and the evidence consistently points to a monetized, opaque operation with no accountability.

Censorship resistance

Thunder VPN offers no obfuscation technology and is ineffective in censored environments like China, Iran, Russia, or the UAE. Top10VPN and vpnMentor both confirm it fails to bypass advanced firewalls. The lack of WireGuard, OpenVPN, or any cloaking method means connections are trivially detectable and blockable. This tool is not suitable for users in high-censorship regions - it will not work, and your usage may be exposed.

Verdict

Avoid Thunder VPN for any privacy-sensitive use. It’s a free app that pays for itself by harvesting your device data and serving ads, operated by an anonymous entity with a documented pattern of misleading claims. While it works for trivial, consequence-free browsing on a spare Android device, it offers no real privacy. The money-trail note: Thunder VPN does not run an affiliate program, but review sites covering it (like Top10VPN and vpnMentor) are funded by affiliate commissions from other providers.

++ What holds up

  • Genuinely free and unlimited: no data cap, no registration, no payment details required (Google Play listing; Top10VPN free-VPN table)
  • One-tap simplicity with a clean, well-designed UI - Top10VPN: 'there is a level of care in design that elevates it above some of the more lazily produced free VPN providers'
  • Passed IP, DNS and WebRTC leak tests in three independent reviews (Top10VPN Nov 2024, vpnMentor, PrivacySharks)
  • Per-app split tunneling ('Choose apps which using VPN', Android 5.0+) is included even on the free tier
  • Some users report it as stable free networking: 'Thunder VPN is the one I used for years' (r/Uzbekistan, 2023); 'minimal ads... THIS IS IT' (Google Play review, Jul 2026)

-- What to watch

  • The 'strict no-logging policy' headline is contradicted by the operator's own policy text, which lists ISP, device OS/manufacturer/model, app version, connection times, per-day bandwidth, 'etc.', and third-party analytics sharing
  • Operator is anonymous: no verifiable corporate entity behind 'Signal Lab' (Top10VPN: no such HK-registered company; support on Gmail addresses; US address used 'for payment purposes only'), and developer names churn across stores and years (Signal Lab -> Secure Signal Inc. on Play; Signal Lab Software Company Ltd -> Signal Software Ltd on iOS)
  • Outdated, weak tunnel: SSL-based protocol, no OpenVPN/WireGuard, AES-128, no kill switch (Top10VPN security 1.0/10; PrivacySharks security 25%)
  • Very slow: 13 Mbps average and up to 87% local speed loss (Top10VPN); under 2 Mbps free-tier downloads (PrivacySharks); ~50% loss (vpnMentor); gigabit users report double-digit speeds (Play review, Feb 2025)
  • Ad-funded: 'Contains ads', pop-up ads on every connect/disconnect with minimum-duration unskippable ads (Top10VPN); an NDSS 2026 study classifies it among apps transmitting the Advertising ID for tracking
  • Tiny, shrinking network: 4 countries, no Asia/South America/Africa servers, no obfuscation, failed to unblock any of 10 streaming services in Top10VPN testing
  • Effectively no support: no live chat, no working support channel (vpnMentor: 'no support team'; iOS user reports support mail 'not available'); no money-back guarantee documented
  • The Thunder VPN brand name is shared with unrelated apps, including a Qihoo 360-linked iOS app that Apple removed in 2025 - a real confusion and trust hazard

Pricing reality check

Intro price$0 /mo · renews $4.99/mo
Renewal price$4.99/mo
NotesFreemium funnel (fetched 2026-11-03): the Android app is free, ad-supported, unlimited and requires no registration; upsell is 'VIP' via in-app purchase. vpnMentor (updated June 2025) lists VIP at $4.99/month or $4.16/month billed annually. The iOS listing shows auto-renewing plans of HUF2,490 per month and HUF24,990 per year. PrivacySharks lists $4.99/month and $59.88/year with 'no money-back guarantee'. Play listings show 'In-App Purchases' and 'Contains ads'.

See the 3-year total next to the marketing number: true-cost calculator →

How to get Thunder VPN

Identity checknone
Paymentfiat
Appsandroid

Check the renewal price above before any multi-year plan - true-cost calculator.

Is Thunder VPN legit?

Thunder VPN is operated by qihoo-innovative-connecting. Logging claim: Google Play listing: 'Strict no-logging policy'. Operator site thunder.free-signal.com: 'No log or track user data'. Operator Terms of Service (fetched 2026-11-03): 'We are committed to your privacy, we will not collect your personal identifying information, nor will we collect or log traffic data or browsing activity from individual users connected to our VPN.' Current operator policy (per VPN Love, Jan 2024 text): no monitoring or storing of browsing history, traffic destinations, content, DNS queries, source IP addresses, connection timestamps, session duration, or server assignments. - evidence class: CLAIM CONTRADICTED. No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified - Google Play listings for Thunder VPN and its sibling Secure VPN, the Apple App Store listing (HU locale; a US-locale fetch of the same app id returned 404), the operator site thunder.free-signal.com (homepage + Terms of Service/privacy text), the signallab.org privacy policy, Top10VPN's Thunder VPN review and its 2020 free-VPN Chinese-ownership investigation, the vpnMentor review, PrivacySharks review, VPN Love analysis, MWM app-intelligence page, NBC News, two Tech Transparency Project reports, the NDSS 2026 MVPNalyzer paper (PDF downloaded and text-extracted), HN Algolia API and the arctic-shift Reddit archive were all fetched live 2026-11-03. Caveats: arctic-shift body/title text-search returned 422 timeouts all session (known failure mode), so Reddit mentions were gathered via link_id thread endpoints and via web-search snippets; reddit.com direct fetch returned 403 and pullpush.io returned 522. A ~2,400-comment scan of recent r/VPN, r/androidapps, r/VPN_Question and r/privacy comment pages found zero Thunder VPN mentions - the brand has largely dropped out of current VPN-community discussion. Brand collision warning: at least two unrelated products use the Thunder VPN name; this dossier covers the Signal Lab / Secure Signal Inc. Android app (com.fast.free.unblock.thunder.vpn) and distinguishes the Qihoo-linked iOS app where relevant. (not fully verified) as of 2026-11-03 - read the sources below.

Evidence classes and scoring: methodology · user experiences: meta-review.

The money trail - what review sites earn by recommending this

affiliate status not verified yet

If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.

Thunder VPN FAQ

Is Thunder VPN legit?

Based on our checks as of 2026-11-03: Thunder VPN scores 2.3/10 in our weighted review. We logged 7 red flags (listed above). Its logging claim has been contradicted in a documented case - treat "no logs" marketing as marketing. User reports, ownership and the incident record are documented with dated sources in the meta-review below.

What do I actually get with the free version?

Unlimited data, no registration, and access to 4 server countries - but with ads on every connect/disconnect, no kill switch, and diagnostic data (including Advertising ID) sent to third parties.

What is the renewal price, and what would I pay over three years?

The VIP subscription renews at $4.99/month or $4.16/month billed annually. The **`three_year_cash_total`** is not computed, but consistent use of the premium tier would incur recurring charges with no verified long-term total.

What evidence supports the no-logs claim?

None - in fact, the claim is **contradicted** by the operator’s own Terms of Service and privacy policy, which admit to collecting connection logs, device data, and sharing diagnostics with third parties, including the Google Advertising ID.

Does it work in China or other censored countries?

No. Thunder VPN has no obfuscation, and reviews confirm it fails in China, Iran, Russia, and similar networks. It is not a censorship-circumvention tool.

Can I pay anonymously?

The free version requires no payment or account. The VIP upgrade runs through Google Play or Apple billing, which require payment methods tied to your identity - no anonymous payment options exist.

What happens if the service shuts down?

Given the operator’s opacity and lack of support channels, there would be no warning or recourse. Users have already reported sudden server failures and unreachable support.

What’s the honest free or cheap alternative?

For real privacy, no free app is safe. Consider a flat-priced independent provider like Mullvad or IVPN, or a reputable low-cost option like AzireVPN - both audited, transparent, and designed for actual privacy.

The meta-review: what the internet says about Thunder VPN

We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Thunder VPN. Every claim links to its source so you can verify it yourself.

What other reviewers say (5)

Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.

top10vpn.com negative

Thunder VPN Review (updated Nov 8, 2024)

Fetched 2026-11-03: 2.7/10 overall, ranked #48 of 59, 'one of the worst VPNs we've tested... simply not safe to use'. Privacy 6.3/10 - 'Excessive Logs' policy (IP collection reportedly stopped, but connection timestamps, device info and per-user bandwidth still logged; no audit). Security 1.0/10: SSL-based tunnel, no OpenVPN/WireGuard, AES-128, no kill switch; passed leak tests. Streaming 0/10 (failed all 10 services). Speed 1.4/10 (13 Mbps, up to 87% loss). 4 server countries (was 9; Japan removed). Android-only, 5 simultaneous connections, split tunneling via App Filter. Ownership: Signal Lab, HK developers, US address for payments only, no HK-registered company named Signal Lab. Note: Top10VPN is self-declared independent with affiliate funding (affiliate_dependence medium per site database).

source dated 2018-12-19 · verified by us 2026-11-03 · HTTP 200 · known site, treat as indicative
vpnmentor.com negative

Thunder VPN Review 2026 - Only Good For Browsing (updated Jun 30, 2025)

Fetched 2026-11-03: 4.2/10, ranked 164th of 195. SSL protocol weaker than OpenVPN/IPsec; no kill switch; ~50% speed loss; unblocks only Prime Video and YouTube US, fails Netflix/Disney+/Hulu/iPlayer/HBO Max; 8 countries free, 20 VIP; virtual-server IP mismatches observed (UK server -> French IP, Belgian DNS); intrusive log policy (IP, email, ad identifier, etc.); pricing free / VIP $4.99 monthly / $4.16 annually; Google Pay; no money-back guarantee; 'no support team or means provided'. Page discloses Kape Technologies ownership and affiliate model -vpnMentor is owned-by-vpn-company per the site database.

source dated 2020-10-23 · verified by us 2026-11-03 · HTTP 200 · unverified / anonymous source
privacysharks.com negative

Thunder VPN Review & Test

Fetched 2026-11-03: security 25%, summary 0.5. Documents the earlier privacy policy in full: collects IP address, ISP, OS version, language, app identifier, app version, unique device identifier, ad identifier, device model/manufacturer, email address, time zone, Wi-Fi state, connection timestamps, chosen server location, bandwidth per day - ending in 'etc.' - with no retention or deletion policy; 'not a no-logs company'. SSL (1995-era) critique, no kill switch, passed DNS/IP leaks, under 2 Mbps free-tier speeds, no support channel, $4.99/month or $59.88/year, no money-back guarantee.

source dated 2021-04-26 · verified by us 2026-11-03 · HTTP 200 · unverified / anonymous source
vpnlove.com mixed

Is Thunder VPN Safe? A Working Tunnel Isn't Proof (updated Sep 8, 2026)

Fetched 2026-11-03: current-state analysis. Confirms the Play listing now names Secure Signal Inc. and package com.fast.free.unblock.thunder.vpn; Data safety box admits sharing app info/performance, collecting device identifiers, and 'Data can't be deleted'. Current securesignal.app privacy policy (last marked Jan 2024): no monitoring/storing of browsing history, destinations, content, DNS queries, source IPs, connection timestamps, session duration or server assignments - but collects device/system properties, OS version, language, Google Advertising ID, Wi-Fi state, mobile provider; names Google Firebase; open-ended retention. 'No public report isn't proof of bad behavior. It means the no-logging and security claims have less outside verification than a sensitive-use VPN should provide.' Page carries NordVPN affiliate links - affiliate-funded.

source dated 2026-07-11 · verified by us 2026-11-03 · HTTP 200 · known site, treat as indicative
mwm.ai neutral

Thunder VPN: VPN Fast & Secure - app-intelligence profile

Fetched 2026-11-03 (data as of Nov 3, 2026): publisher SIGNAL LAB SOFTWARE COMPANY LIMITED, first released Jul 5, 2023, 2.5M+ downloads, 3.8/5 from 1.3K ratings, written-review average 2.9/5; last update listed Nov 2024. Collected recent user reviews include: servers stopped being available with unreachable support and a refund request (Jul 2026, KZ); an allegation of unauthorized card charges ('stole the credit card number... still taking money', Jul 2026, AU); subscription-wall plus ads complaints (Apr 2026, AU); a user stating the app 'headquarters is in Hong Kong'. Independent editorial intelligence page, not the operator.

source dated n.d. · verified by us 2026-11-03 · HTTP 200 · known site, treat as indicative

What users say (4)

Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.

hn.algolia.com neutral

HN search: 'thunder vpn' comments (1 substantive hit) and stories (0 relevant)

Fetched 2026-11-03 (HTTP 200; a second query 'thundervpn' also returned 200 with the same single comment; story search returned only unrelated hits): the only substantive comment (2020-03-24, in the 'VPN Websites Track Their Visitors' thread about VPNPro research) lists Thunder VPN among VPN provider websites found to have no trackers. HN has essentially never discussed the app - near-zero topical presence.

source dated n.d. · verified by us 2026-11-03 · HTTP 200 · established track record
reddit (arctic-shift archive) neutral

r/AndroidQuestions thread 1dl5kl7 - 'Suddenly Android phones require hidden ThunderVPN' (comments pulled via link_id endpoint)

Fetched 2026-11-03 (HTTP 200): three ThunderVPN mentions - WatchGuard Firebox Application Control signature 18.320 began classifying corporate Android traffic as ThunderVPN, breaking connectivity until admins set Application Control > Tunneling and proxy services > ThunderVPN to allow; a linked WatchGuard known-issue page confirms the vendor was aware. Enterprise-grade evidence of how ubiquitous (and how normalized) the app's traffic signature became on managed Android fleets.

source dated 2024-06-21 · verified by us 2026-11-03 · HTTP 200 · known site, treat as indicative
reddit (arctic-shift archive) neutral

Recent-comment scan across r/VPN, r/androidapps, r/VPN_Question, r/privacy (paging endpoint)

Fetched 2026-11-03 (HTTP 200 on the paging endpoint): ~2,400 recent comments paged and scanned locally for 'thunder' - zero mentions. Combined with the arctic-shift body/title search returning 422 timeouts all session (attempted repeatedly with cooldowns) and a 0-hit scan of the 328-comment r/VPN 'Best free VPNs (according to Reddit and my research)' thread (link_id 1f7xv99, fetched via link_id endpoint), this documents the finding that Thunder VPN has near-zero presence in current Reddit VPN recommendations.

source dated n.d. · verified by us 2026-11-03 · HTTP 200 · known site, treat as indicative
reddit / open web search mixed

Web-search surface for reddit Thunder VPN mentions (r/Uzbekistan, r/VPNReviewHub)

Retrieved 2026-11-03 via web search (reddit.com direct fetch returns 403 to this server; pullpush.io returned 522): a r/Uzbekistan commenter (Aug 2023) says 'Thunder VPN is the one I used for years'; the r/VPNReviewHub first-impressions post reports constant drops, overloaded servers and heavy ads. Quoted text comes from search-engine snippets of the threads; treated as medium reliability.

source dated n.d. · verified by us 2026-11-03 · HTTP 200 · unverified / anonymous source

Who is behind Thunder VPN?

VPN ownership is often deliberately layered through shell companies. This is what we could verify - with sources. Confidence: confirmed (checked 2026-09-29).

OwnerQihoo 360 / Innovative Connecting app family (Turbo VPN, VPN Proxy Master, Thunder VPN, Snap VPN)
DetailOwned by qihoo-innovative-connecting since unclear (same Innovative Connecting cluster)

AI fact summary - everything we know, compressed

Generated by Qwen3 on 2026-11-03 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.

Bottom line: Thunder VPN is a free, ad-funded Android app with no registration, but it logs extensive connection and device data despite claiming otherwise. It offers no meaningful privacy, uses outdated encryption, and routes traffic through an anonymous operator with ties to a sanctioned Chinese tech network. Only use it for low-risk, non-sensitive tasks on a spare device.

The logging truth: The provider claims a strict no-logs policy but its own Terms of Service list collecting ISP, device model, OS version, language, app version, connection times, daily data usage, and diagnostic data sent to third parties. A 2026 peer-reviewed academic study confirmed it transmits the Google Advertising ID for user tracking. Jurisdiction is deliberately obscured: Hong Kong ownership, US shell entity, Vietnam-linked iOS version.

Pricing reality: The free tier has unlimited data and no registration, but is ad-supported with no way to delete collected data. The VIP upgrade costs $4.99/month or $4.16/month annually, with no refund policy. The pricing funnel relies on in-app purchases via Google/Apple, which take significant cuts.

What reviewers say vs what users say: Independent reviewers (Top10VPN, PrivacySharks, NDSS 2026) consistently rate Thunder VPN as unsafe, citing logging contradictions, poor security, and tracking - scores range from 0.5 to 2.7/10. Affiliate-funded reviews like vpnMentor (4.2/10) are slightly more lenient but still highlight flaws. User reviews are split: many praise the free access and stability, while others report broken servers, relentless ads, and billing issues - especially on iOS where support is unreachable.

Who runs it: The operator is Signal Lab SOFTWARE LIMITED, a Hong Kong-registered entity linked to Secure Signal Inc. (Delaware) and Signal Software Ltd (Vietnam), all tied to anonymous developers confirmed as Hong Kong Chinese. Evidence links the Thunder VPN brand to Qihoo 360, a US-sanctioned Chinese tech firm, though the Android app is a separate product from the removed iOS version. No verifiable corporate identity exists.

Sources & how this review was built

Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.

Evidence classes on this page: [A] A: 6[B] B: 10[C] C: 4[D] D: 0 (D stays empty until our own test phase)

  1. [1][A] operator Google Play - Thunder VPN - Fast, Safe VPN (listing) fetched 2026-11-03 · HTTP 200
  2. [2][A] operator Google Play - Secure VPN - Safer Internet (sibling app listing) fetched 2026-11-03 · HTTP 200
  3. [3][A] operator thunder.free-signal.com - Thunder VPN operator site fetched 2026-11-03 · HTTP 200
  4. [4][A] operator thunder.free-signal.com - Terms of Service (including Privacy Policy section) fetched 2026-11-03 · HTTP 200
  5. [5][A] operator signallab.org - Signal Lab privacy policy (site now branded 'SignalGuard | Privacy Protection') fetched 2026-11-03 · HTTP 200
  6. [6][A] operator Apple App Store (HU locale) - Thunder VPN: VPN Fast & Secure (listing, id 6450655901) fetched 2026-11-03 · HTTP 200
  7. [7][B] review top10vpn.com - Thunder VPN Review (updated Nov 8, 2024) dated 2018-12-19 · fetched 2026-11-03 · HTTP 200
  8. [8][B] review vpnmentor.com - Thunder VPN Review 2026 - Only Good For Browsing (updated Jun 30, 2025) dated 2020-10-23 · fetched 2026-11-03 · HTTP 200
  9. [9][B] review privacysharks.com - Thunder VPN Review & Test dated 2021-04-26 · fetched 2026-11-03 · HTTP 200
  10. [10][B] review vpnlove.com - Is Thunder VPN Safe? A Working Tunnel Isn't Proof (updated Sep 8, 2026) dated 2026-07-11 · fetched 2026-11-03 · HTTP 200
  11. [11][B] review mwm.ai - Thunder VPN: VPN Fast & Secure - app-intelligence profile fetched 2026-11-03 · HTTP 200
  12. [12][B] watchdog top10vpn.com (research) - Free VPN Chinese Ownership Investigation (updated Jun 18, 2020) dated 2020-06-18 · fetched 2026-11-03 · HTTP 200
  13. [13][B] watchdog techtransparencyproject.org - Apple Offers Apps With Ties to Chinese Military (Apr 1, 2025) dated 2025-04-01 · fetched 2026-11-03 · HTTP 200
  14. [14][B] watchdog techtransparencyproject.org - Spot Check: Apple and Google Still Have a Chinese VPN Problem (Jun 12, 2025) dated 2025-06-12 · fetched 2026-11-03 · HTTP 200
  15. [15][B] watchdog NDSS Symposium 2026 (MVPNalyzer) - MVPNalyzer: An Investigative Framework for Auditing the Security & Privacy of Mobile VPNs dated 2026 · fetched 2026-11-03 · HTTP 200
  16. [16][B] news nbcnews.com - Your VPN could be giving your browsing data to China, watchdog says (Jun 12, 2025) dated 2025-06-12 · fetched 2026-11-03 · HTTP 200
  17. [17][C] community hn.algolia.com - HN search: 'thunder vpn' comments (1 substantive hit) and stories (0 relevant) fetched 2026-11-03 · HTTP 200
  18. [18][C] community reddit (arctic-shift archive) - r/AndroidQuestions thread 1dl5kl7 - 'Suddenly Android phones require hidden ThunderVPN' (comments pulled via link_id endpoint) dated 2024-06-21 · fetched 2026-11-03 · HTTP 200
  19. [19][C] community reddit (arctic-shift archive) - Recent-comment scan across r/VPN, r/androidapps, r/VPN_Question, r/privacy (paging endpoint) fetched 2026-11-03 · HTTP 200
  20. [20][C] community reddit / open web search - Web-search surface for reddit Thunder VPN mentions (r/Uzbekistan, r/VPNReviewHub) fetched 2026-11-03 · HTTP 200

Rate Thunder VPN

Community score: no ratings yet

One rating per user and provider. Smoothed display (statistical prior) prevents single-vote manipulation.

User comments (0)

No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.

Alternatives to Thunder VPN (same kind)

Comparable providers of the same kind only - a free app is never "an alternative" to a commercial VPN. Ranked by the same deterministic score.

X-VPN

A heavyweight free-mobile VPN from a Singapore entity with real strengths on paper - no account required, an unusually deep protocol lineup, a self-published…

5.1
audit crypto accepted
intro $2.99 /mo
Singapore - LIGHTNINGLINK NETWORKS PTE. LTD. (own privacy policy and both app-store listings; Play developer address 8 Marina View #43-01 Asia Square Tower 1, Singapore 018960). Note: 2026 reviews still describe the operator as 'Free Connected Ltd., a private company based in Hong Kong' (Security.org) and 'Based in Hong Kong' (Cloudwards), while the operator's own live documents say Singapore - the entity migration is documented but the current corporate history is not published free vpn 9 d ago

Riseup VPN

The most trustworthy free VPN on structural grounds: an anarchist Seattle collective that has run since 1999, funds itself by donations, asks no account…

4.5
canary open source community-owned crypto accepted
free
United States free vpn 45 d ago

VPN Gate (public volunteer relay experiment)

VPN Gate is a legitimate, transparently-run academic experiment that is genuinely free forever and genuinely useful for one thing: getting past government…

3.7
audit open source
intro $0 /mo
Japan - web site hosted at the University of Tsukuba campus (Tennodai 1-1-1, Tsukuba, Ibaraki 305-8573), administrator Daiyuu Nobori, Ph.D., Associate Professor, University of Tsukuba; the volunteer relays themselves are distributed worldwide and 'are not placed in the campus'; aggregated log servers are owned and managed by SoftEther Corporation, the joint research partner (about_us.aspx and about_abuse.aspx fetched 2026-11-03) free vpn 10 d ago