Privacy Policy

VaneRay is developed and published by TexForge LLC (“TexForge,” “we,” “us,” or “our”), based in Austin, Texas, USA. This policy covers the VaneRay apps for iOS, iPadOS, macOS, and tvOS. Third-party VPN servers, DNS resolvers, websites, apps, and services have their own privacy practices.

VaneRay creates a device-level VPN tunnel at your request. Network packets are processed transiently on your device and sent through the VPN server described by the configuration you import or select. The supported VLESS, REALITY, and Vision transport protects data between your device and that endpoint.

TexForge does not receive, store, sell, or use the contents of your VPN traffic, browsing history, or DNS requests through a TexForge analytics backend.

The operator of your chosen VPN server, your selected DNS resolver, network destinations, and their service providers may process network data. Choose services you trust and review their terms and privacy policies.

VaneRay stores the following locally to provide its features:

• VPN profiles and settings. These can include server details, identifiers, credentials, key material, DNS and routing settings, selected profile, theme, and connection preferences. Imported credentials are stored in the shared Apple Keychain access group used by the app and its tunnel extension.
• Connection state and metrics. VaneRay keeps device-local state such as the active profile, connection session, latency measurements, and byte counters. These do not include traffic contents and are not automatically uploaded to TexForge.
• Diagnostics. VaneRay keeps a bounded, sanitized application log in its shared app container. If you enable debug logging, additional Xray logs can contain technical connection details such as destinations or errors. Logs are not sent automatically.
• QR import data. On supported devices, camera, Photos, or Files access occurs only after you choose a related import action. QR images are decoded locally using Apple system frameworks, and VaneRay stores the imported configuration.

When profile sync is enabled, VaneRay stores profile metadata, per-profile DNS and routing settings, and the imported Xray configuration in your private iCloud CloudKit database. VaneRay writes each profile payload to a CloudKit encrypted field. The service uses your Apple iCloud account; no TexForge account is created.

Profile sync can be turned off in VaneRay Settings on supported platforms. Apple TV uses iCloud as its primary way to receive profiles from your other VaneRay devices. Selected profile, active tunnel configuration, session state, latency, logs, geodata, and general preferences remain device-local and are not included in profile sync.

Apple processes iCloud and CloudKit data under the terms and privacy practices for your Apple account. See the Apple Privacy Policy.

Unless you select or import another DNS configuration, VaneRay uses Cloudflare as its default DNS resolver through the routing engine. When a tunnel starts, VaneRay also sends a small request through the tunnel to Cloudflare's connectivity endpoint to confirm that the connection works. The request contains no VPN credentials or browsing history.

Review the Cloudflare Privacy Policy. If you configure another resolver, that provider's practices apply.

VaneRay creates configuration exports or diagnostic ZIP archives only when you request them. The Apple system sharing or document interface then lets you choose where to save or send the file. VaneRay does not choose a recipient or automatically upload it. A recipient's privacy and retention practices apply after sharing.

Pasting a configuration and selecting an image or file occur only after your action. VaneRay does not monitor the clipboard, camera, photo library, or files in the background.

• VPN access is used only to install and operate the tunnel configuration you control.
• Internet access is required to reach the VPN endpoint, DNS resolver, iCloud when sync is enabled, and network destinations.
• Camera, Photos, and Files are used only for QR or configuration import actions that you initiate on supported devices.
• iCloud and push notifications support CloudKit profile synchronization between your Apple devices.

VaneRay has no advertising SDK, does not create a TexForge user account, does not track you across apps or websites, and does not automatically upload locally generated analytics or logs to TexForge. TexForge does not sell or rent personal information. Apple and third-party network services process information as described elsewhere in this policy.

VaneRay uses Apple Keychain for credentials, app and App Group containers for local data, CloudKit encrypted fields for synced profile payloads, encrypted VPN transport to the configured endpoint, and bounded diagnostic files. No storage or transmission method is completely secure, so protect your device, Apple account, and VPN credentials and use endpoints you trust.

Local profiles and settings remain until you delete them in VaneRay or remove the app and its data under Apple's normal platform behavior. Local logs are size-limited and older entries are removed as limits are reached. When profile sync is enabled, profile changes and deletions are synchronized with the private CloudKit database associated with your iCloud account.

VaneRay does not provide a TexForge account, so there is no server-side TexForge account to delete. Your Apple account and iCloud settings control Apple-hosted data and service access.

VaneRay is a technical VPN client intended for a general adult audience and is not directed to children under 13 or the minimum age required in their jurisdiction. TexForge does not knowingly collect children's personal information through VaneRay.

We may update this policy when VaneRay's features, services, or legal requirements change. The current version and effective date will remain available at this URL. Material changes will be reflected in the app or its store listing when appropriate.