Mgla — Browser extension privacy policy

Mgla for Chrome, Edge and Firefox · effective October 9, 2026

What the extension does

It routes the browser's traffic through the Mgla proxy server so that websites see the server's address instead of yours. Sites you mark as "Direct", and Russian sites while "Russian sites direct" is on, connect without the proxy. Nothing else in your system is affected.

What is stored, and where

In your browser only (extension local storage): your Mgla access key, the proxy login it receives for that key, the server you picked, your site exceptions, and the switches "Russian sites direct" and "WebRTC protection". The exceptions and switches are never sent anywhere. Removing the extension deletes all of this.

What is sent, and to whom

Access key → mgla.app over HTTPS, to receive the proxy login, your subscription status and expiry date, and the server list. This happens when you sign in, when you open the extension window, and every few hours in the background.

Your web traffic → the Mgla proxy server, for sites that are not set to "Direct". The connection to the proxy is encrypted (TLS); traffic to HTTPS sites stays encrypted end to end. The proxy keeps no log of the sites you visit or of what you send or receive.

"My IP" check → Cloudflare: one request to www.mgla.app, made through the proxy, is answered by Cloudflare (the network that serves our website) with the address and country it sees — that is, the server's address. Latency check: a short connection to the proxy server to measure the delay.

On our server, a request with your key adds you to an anonymous daily count of active users; the count is computed with a key that changes every day, keeps no IP address and cannot be linked to you or to another day.

What we do not do

No browsing history, page content, form data, passwords or cookies of the sites you visit are collected. No analytics or advertising code, no remotely loaded code, no third-party trackers. Your data is never sold or transferred to anyone for purposes unrelated to the extension's single purpose of providing the proxy connection.

Permissions

proxy — send traffic through the server; webRequest / webRequestAuthProvider (Chrome, Edge) or webRequest / webRequestBlocking (Firefox) — hand the proxy login to the server and only to it; privacy — WebRTC protection (stops pages from learning your real address through WebRTC while the VPN is on; restored when it is off); storage — the settings above; alarms — periodic status refresh; access to all sites — the proxy has to apply to any site you open.

Your choices

Turn the VPN off with one click, add sites to "Direct", switch WebRTC protection off, sign out, or remove the extension. To get a copy of your account data or delete the account, contact support (below). The general Mgla privacy policy (https://mgla.app/privacy) covers the account and payments.

The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Contact

Telegram: @mgla_vpn_bot, email: support@mgla.app.