VLESSBOX PRIVACY POLICY

Last updated: July 7, 2026

VlessBox is a VPN client that connects to servers you configure yourself. We respect your privacy. This policy describes what information the app processes and how it is used.

1. We do not collect your data

VlessBox does not collect, store, or transmit any personal data to our servers or to third parties. We have no servers of our own that receive data from your device.

We do not collect:

  • Personal identifiers (name, email, phone number, device ID)
  • Your browsing history or the contents of your VPN traffic
  • Geolocation
  • Contacts, photos, or files from your device
  • Advertising identifiers
  • Usage analytics or crash reports

2. Data stored locally on your device

The following information is stored only on your device and never leaves it:

  • Server configurations — addresses of VLESS servers, ports, UUIDs, transport parameters, and other connection settings you enter or import. This data is stored in encrypted local storage using AndroidX Security (EncryptedSharedPreferences with AES-256 encryption).
  • Subscription URL — if you have set up a subscription URL, it is stored locally so you can update your server list.
  • App preferences — auto-connect, selected language, last selected server.
  • Connection logs — sing-box may write technical logs to the app's private storage. These logs remain on the device and are used only for diagnostics.

3. Permissions and their use

  • INTERNET, ACCESS_NETWORK_STATE, CHANGE_NETWORK_STATE — required to establish a VPN connection to the servers you configured and to download the server list from the subscription URL you provided. Traffic is routed to your chosen VPN server, not to us.
  • FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE — required by Android to run the VPN tunnel as a foreground service so the connection stays active while the app is in the background.
  • POST_NOTIFICATIONS — used to show notifications about the VPN connection status.
  • CAMERA — used only to scan QR codes containing VLESS links. The camera image is processed locally in memory. We do not store, upload, or transmit any images.
  • BIND_VPN_SERVICE — a system permission that lets the app establish a VPN tunnel. This is an Android requirement for any VPN client.

4. Third-party services

VlessBox does not integrate analytics, advertising, or crash-reporting SDKs. We do not use Google Analytics, Firebase, Crashlytics, or similar services.

The app uses the following open-source libraries:

  • sing-box — the VPN core that establishes the tunnel to your server
  • hev-socks5-tunnel — routes the device's traffic through the VPN
  • ZXing — QR code scanning

These libraries run locally on your device and do not send data anywhere on their own.

5. Data you transmit through the VPN

When the VPN is active, your device's network traffic is routed to the VPN server you configured. We do not operate these servers. Whether your server keeps logs or inspects traffic is entirely up to that server's operator. Please review the privacy policy of your VPN provider.

6. Children's privacy

VlessBox is not intended for children under 13. We do not knowingly collect information from children.

7. Data storage and deletion

All data saved by the app remains on your device until:

  • You delete individual servers (long press → Delete)
  • You use the "Clear all" option in the main menu
  • You clear the app's data in Android system settings
  • You uninstall the app

When you uninstall the app, all locally stored data is erased.

8. Security

Server configurations are stored using EncryptedSharedPreferences from AndroidX Security with AES-256 encryption, whose keys are protected by the Android Keystore system. Encryption keys never leave the device.

9. Changes to this policy

We may update this policy from time to time. The current version is always available in the app under Settings → Privacy Policy, as well as on this page. The date at the top of the document shows when the policy was last changed.

10. Contact

If you have questions about this policy, contact us:

Website: https://vlessvpn.cc