Privacy Policy

VaneRay is developed and published by TexForge LLC (“TexForge,” “we,” “us,” or “our”), based in Austin, Texas, USA. This policy covers the VaneRay Android application. Third-party VPN servers, DNS resolvers, websites, apps, and services have their own privacy practices.

VaneRay creates a device-level VPN tunnel at your request. Network packets from the apps you select are processed transiently on your device and sent through the VPN server described by the configuration that you import or select. The supported VLESS, REALITY, and Vision transport protects data between your device and the configured VPN tunnel endpoint.

TexForge does not receive, store, sell, or use the contents of your VPN traffic or your browsing history through a TexForge analytics backend.

The operator of your chosen VPN server, your configured DNS resolver, network destinations, and their service providers may process network data. You are responsible for choosing services you trust and reviewing their terms and privacy policies.

VaneRay stores the following locally to provide its features:

• VPN profiles and settings. These can include server address and port, protocol and fingerprint settings, identifiers, credentials, key material, DNS configuration, selected profile, app-routing choices, theme, and connection preferences. Sensitive configuration payloads and DNS settings are encrypted using keys protected by the Android Keystore.
• Installed-app information. VaneRay reads the list of launchable apps and their package identifiers, labels, and icons so you can choose which apps use or bypass the VPN. This stays on-device and is not sent to TexForge.
• Connection and traffic metrics. VaneRay keeps local, bounded records such as connection state, session identifiers, protocol settings, timestamps, and uploaded or downloaded byte counts. They do not include traffic contents and are not automatically uploaded to TexForge.
• Diagnostics. VaneRay keeps a bounded, sanitized application log in private app storage. If you enable debug logging, additional Xray logs may include technical connection details such as network destinations or errors. Logs are not sent automatically.
• QR import data. When you scan or select a QR image, VaneRay receives the decoded configuration text and stores the imported profile locally. A selected image is used only for the scan you requested.

VaneRay uses Google ML Kit and the Google Code Scanner to read QR codes. Camera scanning is delegated to Google Play services, and VaneRay receives the decoded result rather than direct camera access.

Google states that these SDKs may collect device and application information, per-installation or device identifiers, performance metrics, API configuration, feature event types, and error codes for diagnostics and usage analytics. Because VaneRay enables scanner auto-zoom, Google may also collect a dynamically generated scanning-session identifier, zoom changes, and predicted barcode bounding-box coordinates. Google states that this diagnostic data is encrypted in transit and is not transferred to third parties by ML Kit.

See Google's ML Kit data disclosure guidance and Google Privacy Policy.

Unless you select or import another DNS configuration, VaneRay uses Cloudflare as its default DNS resolver through the routing engine. DNS queries are sent to the selected resolver as needed to resolve domain names. Review the Cloudflare Privacy Policy. If you configure another resolver, that provider's practices apply.

VaneRay can create a diagnostic ZIP archive when you choose Export logs. Android then asks you to select an app or recipient. VaneRay does not choose the recipient or upload the archive itself. Once shared, the recipient's privacy and retention practices apply.

Pasting a configuration from the system clipboard and selecting a QR image occur only after your action. VaneRay does not monitor the clipboard or photo library in the background.

• VPN access is used only to create the VPN tunnel that you start and configure.
• Internet access is required to reach the VPN endpoint, DNS resolver, and network destinations.
• Foreground service and notifications keep the tunnel running and show its active status.
• App visibility displays launchable apps for per-app routing choices.

VaneRay has no advertising SDK, does not create a TexForge user account, and does not automatically upload locally generated analytics or logs to TexForge. TexForge does not sell or rent personal information. The limited diagnostic collection performed by Google SDKs is described in Section 4.

VaneRay uses Android private app storage, Android Keystore-protected keys for sensitive local configuration, encrypted VPN transport to the configured endpoint, bounded diagnostic files, and disabled Android backup and device transfer for private app data. No storage or transmission method is completely secure, so protect your device and use only VPN configurations and endpoints you trust.

Local profiles and settings remain until you delete them in VaneRay, clear the app's storage, or uninstall the app. Local traffic metrics and logs are size-limited and older records are removed as limits are reached. You can delete all VPN profiles from Settings. Uninstalling VaneRay removes its private app data under Android's normal behavior.

VaneRay does not provide user accounts, so there is no server-side TexForge account data to delete. For questions about Google SDK diagnostic data or a third-party VPN or DNS service, contact that provider.

VaneRay is a technical VPN client intended for a general adult audience and is not directed to children under 13 or the minimum age required in their jurisdiction. TexForge does not knowingly collect children's personal information through VaneRay.

We may update this policy when VaneRay's features, SDKs, or legal requirements change. The current version and effective date will remain available at this URL. Material changes will be reflected in the app or its store listing when appropriate.