Short and clear summary
After your explicit permission, Shark VPN may share limited technical information required to operate and improve the app. It is kept confidential, reviewed only through authorized administration access and never used for commercial data sales.
Which technical information may be used?
With permission, the app may send a Shark VPN-generated HWID, app version, device model, Android version, language, request time and the IP address seen by the server during the connection.
The HWID helps identify the same app installation and separate repeated technical records. This system does not collect your contacts, messages, photos, microphone, camera or personal files.
Why is the subscription URL used?
A subscription URL may be used for technical analysis to improve API and server compatibility, responses from different providers, configuration formats, protocols and backup-domain flows.
A subscription URL can contain an access key. Do not share it in screenshots, public groups, social media or with people you do not know. The Shark VPN team handles it only within necessary technical work and with limited access.
Purpose of use
- Improve config parsing and protocol compatibility.
- Understand connection problems on different Android devices.
- Improve subscription updates, backup domains and fallback flows.
- Protect the service against abuse and excessive automated requests.
- Deliver the image and target link when an active sponsor exists.
Technical information is not used to build personal advertising profiles, read messages or inspect the content of your internet traffic.
How is information protected?
Transfers between the app and central service use HTTPS. Subscription URLs are encrypted with AES-256-GCM before being written to the database. Admin sessions are protected with a password, signed secure cookie, request limits and CSRF protection.
The server data directory and encryption keys are protected together and cannot be reached from public pages. URLs are masked by default in the authorized panel and revealed one record at a time only when needed.
Retention and deletion
Technical records are automatically deleted 30 days after they were last seen by default. An administrator can delete one record or all analysis records earlier.
To request removal of your record, send your in-app HWID to @XrayLord. The related record is removed after the request is verified.
Your permission and choice
Technical sharing with the central service begins only after an explanation and explicit acceptance inside the app. If you decline, no central analysis request is sent. New requests stop after you withdraw permission in settings.
Sponsor content
When a sponsor is active, the app receives only the image address, target link and expiration time. If you open that link, the third-party site’s own privacy and usage terms apply.
Subscription providers
When a subscription updates, the app connects to that provider’s server. Its service, security and retention rules are independent of Shark VPN. Use subscription URLs only from sources you trust.
How can you protect yourself?
- Do not publish your subscription URL or HWID.
- Download the APK only from our official page or Telegram account.
- Do not add configs or QR codes from people you do not know.
- Keep Android and Shark VPN updated.
- Report suspicious behavior to us with a screenshot.
Policy changes
If app features or the technical information we use changes, this document’s date and consent version will be updated. The app may ask for approval again after significant changes.
Contact
Contact the project developer on Telegram for privacy questions, deletion requests, bug reports or questions about the project.
Contact @XrayLord