BLOKK: Privacy VPN & Blocker Security & Privacy Scorecard
Android
In-app behavior and usage patterns are collected by multiple analytics services, including Microsoft Clarity and Firebase, even as the app is used to block trackers elsewhere. User activity is shared with four analytics and measurement companies. If a user subscribes, payment data passes through three separate payment processors.
Best for
Users comfortable with analytics in a privacy VPN app
Findings
- 1 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Hardcoded OpenVPN Credentials
- Hardcoded Third-Party API Credentials
- Cleartext HTTP Traffic Permitted for Development Server
Top privacy issues
- Microsoft Clarity Session Recording Without Consent
- Misleading Privacy Disclosure
- Complete Browsing History Stored Unencrypted with Indefinite Retention
Full analysis
BLOKK: Privacy VPN & Blocker
Security Score: 35/100 | Privacy Score: 25/100
What This Means for You
In-app behavior and usage patterns are collected by multiple analytics services, including Microsoft Clarity and Firebase, even as the app is used to block trackers elsewhere. User activity is shared with four analytics and measurement companies. If a user subscribes, payment data passes through three separate payment processors.
Recommendation: Use With Caution
Best For: Users comfortable with analytics in a privacy VPN app
Key Findings
Data Security - 2 findings (1 critical, 1 medium)
Network Security - 1 finding (1 critical)
Code Safety - 0 findings
Privacy - 4 findings (2 critical, 1 high, 1 medium)
Privacy Concerns
What Data is Collected
The app collects behavioral data including in-app interactions, usage patterns, and session activity. Payment and billing information is also processed for subscribing users.
Third-Party Data Sharing
User data is shared with the following services:
- Firebase Analytics - Usage analytics and event tracking
- Microsoft Clarity - Session recording and behavioral analytics
- OneSignal - Push notification delivery
- Countly - Analytics and user behavior tracking
- RevenueCat - Subscription management
- Adyen - Payment processing
- Cash App Pay - Payment processing
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 25/100 |
| Data Security | 40/100 |
| Network Security | 45/100 |
| Code Safety | 50/100 |
| Data Collection | 30/100 |
| Data Sharing | 20/100 |
| User Control | 35/100 |
Positive Security Features
- None identified in this version.
Areas for Improvement
- The volume of behavioral data collected by third-party analytics services is inconsistent with the app's stated privacy-focused purpose.
- User data is shared with multiple external companies, limiting user ability to control how it is used or retained.
- Payment processing relies on three separate external services, each with its own data handling practices.
About This Analysis
This scorecard reflects automated static analysis of the app's code and configuration.
App Details
| Field | Value |
|---|---|
| App Name | BLOKK: Privacy VPN & Blocker |
| Package ID | com.revokevpnapp |
| Version | 1.1.40 |
| Scan Date | 2026-02-06 |
| Developer | (not listed) |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 30/100 |