Xunjie Connect encrypts your connection and forwards your traffic without recording where you go. This page explains what the VPN service processes, why, and where the data is stored. Our Privacy Policy and Terms of Service contain the full details.
Sur cette page
At a glance
What VPN data we process: Your traffic travels encrypted between your device and our VPN server, which forwards it without recording it. We never log the sites you visit, your DNS queries, the content of your traffic or the addresses you connect to. Our servers count only how many bytes each account uses.
How and why it's used: To run the encrypted tunnel, keep you on a healthy server, apply your plan's time, data and device limits, verify purchases, prevent abuse and fix connection problems. Never for advertising, profiling or tracking.
Storage and third parties: We never sell your data or share your VPN activity. Account and service records are stored on our servers in Tokyo, Japan, hosted by Amazon Web Services. Providers such as Apple process only what their part of the service requires.
What we never record
While you are connected, your traffic is encrypted between your device and one of our VPN servers (exits), which passes it on to its destination in memory. Neither the app nor our servers record:
the websites, domains or IP addresses you visit;
your DNS queries;
any part of the content you send or receive;
any link between your account or IP address and the destinations you reach.
Our VPN servers keep no connection logs.
What we process to provide the VPN
Data
When
What and why
Usage counters
Reported by our VPN servers every few minutes, and by the app while connected
Upload and download bytes per account per time window and the number of active connections, with no destinations. Used for data allowances, plan limits and billing
VPN credential and server list
When the app downloads its connection configuration
A random credential lets our servers accept your connection. With each download we record the IP address used to reach our servers, the country derived from it, the app and system version, and the servers delivered, so we can deliver the right configuration, enforce device limits and stop abuse
Device details
When you sign in and while the app runs
Device code (a one-way hash of the system device identifier), device name and model, system and app version, language, and whether the VPN is connected. Used for the online-device limit and compatibility
Account
When you sign in
Email address, Apple or Google sign-in identifier and the name they share, purchase records, and push token (if notifications are on). There are no passwords
Security and activity records
Each sign-in attempt and request to our servers, and each app open on Android and desktop
Time, method and result of sign-ins; IP address, country or region, user agent, app version and the device involved. Used to protect accounts, troubleshoot and prevent abuse
What stays on your device
Site rules, the per-site activity list, exit measurements and check-up history stay on your device and are never uploaded. Feedback you send can include a short diagnostic summary: app and system version, device model, the exit in use, the last connection error and your latest check-up result. It never contains logs or browsing information.
Why we process it
Run the encrypted tunnel and keep you connected to a healthy server.
Apply your plan: service time, data allowance and the number of devices online.
Verify purchases and keep billing records.
Protect your account and the service from fraud, spam and attacks.
Troubleshoot connection and configuration problems, and answer your feedback.
Measure overall activity in aggregate, such as how often the app is opened.
We never use this data for advertising, profiling or cross-app tracking. The app contains no advertising or analytics SDKs.
Third parties and storage
We never sell your information and never share your VPN activity or usage data with anyone for their own purposes. These providers process data on our behalf, only as far as their part of the service requires:
Apple: App Store purchases, Sign in with Apple and push notifications.
Google: Sign in with Google, only if you choose it.
Payment platforms: process purchases; we receive order and transaction identifiers, never card details.
Email delivery service: sends sign-in codes and account notices.
Amazon Web Services: hosts our servers and database in Tokyo, Japan.
Cloudflare: protects and delivers the traffic to our website and API (not your VPN traffic).
Server hosting providers: host our VPN servers in each region; those servers keep no user logs.
Your account and service records, including backups, are stored in our database on servers in Tokyo, Japan. Connections to our servers use TLS, keys and third-party credentials are encrypted with AES-256-GCM, and staff access is limited to what their work requires. Our VPN servers hold only the credentials needed to accept connections and the byte counters they report to us.
We disclose information only when the law requires it. Because we do not record browsing activity, DNS queries or traffic content, we have none to disclose.
How long we keep it
Data
Kept for
Usage reports from our VPN servers
400 days
Usage reports from the app
90 days
Configuration downloads
180 days
Sign-in security logs
12 months
Server request records
Until no longer needed for troubleshooting, referral settlement and abuse prevention
Purchase records
As long as accounting and tax law requires
Account details
Until you delete your account
Your choices
You can delete your account in the app at any time; your account details are then erased as described in our Privacy Policy. Questions about your data go to support@xunjie.dev.
