WanXPrivacy Policy
This policy explains what data the WanX mobile app (the “App”) and the WanX sealed-subscription service at wanx.dev (the “Service”) handle, why, and what choices you have. WanX is developed and operated by RayCentral LLC, a limited liability company organized under the laws of the State of New Mexico, United States (“we”, “us”).
In short
- WanX has no accounts, no ads, no analytics and no tracking SDKs.
- We do not operate VPN servers. Your internet traffic goes to the server you choose and never passes through us. We do not see, log or inspect it.
- Your servers, subscriptions and settings are stored only on your device.
- By default the App sends a device ID (HWID), OS and device model to the subscription providers you add, so they can limit devices. You can turn this off in Settings (section 3.1).
- We do not sell personal data, share it for advertising, or use it to track you across apps or websites.
1. Data stored on your device
The App stores the servers, subscription links and settings you add, using your device’s local storage. This data is not sent to us. Deleting the App deletes it.
2. How the VPN works
The App uses the VPN interfaces provided by the operating system (Network Extension on iOS, VpnService on Android) to route your device’s traffic, encrypted, to a server you select. Those servers are run by third parties — the VPN provider you obtained them from, or yourself. Their operators can see the traffic that reaches their servers and are responsible for it under their own privacy policies. We have no access to it.
3. Data the App sends, and to whom
3.1 Device ID (HWID) sent to your subscription provider
Many VPN providers limit how many devices may use one subscription. To support this, when the App downloads or refreshes a subscription link you added, it sends that link’s server, by default, a hardware ID (“HWID”) and basic device information in HTTP request headers:
| Header | Contents | Example |
|---|---|---|
x-hwid | Device ID: 16 hexadecimal characters | 3f9a1c07b2e45d68 |
x-device-os | Operating system | iOS |
x-ver-os | Operating-system version | 18.1 |
x-device-model | Device model | iPhone17,1 |
How the HWID is made: on iOS it is derived from the identifier Apple gives each app vendor (identifierForVendor) and saved in the device Keychain, so it stays the same if you reinstall the App and it is never synced to other devices; on Android it is the Android ID, which is unique per app signing key, user and device and is reset by a factory reset. The HWID is not your name, phone number, advertising ID, IMEI or serial number, and the App does not combine it with any of these.
You can see your HWID in Settings, and you can stop sending it — and the other headers above — at any time with Settings › Send device ID (HWID). Some providers may then refuse the subscription or count your device differently. The App also identifies itself to subscription servers as WanX/0.1 sing-box (User-Agent), so they return a compatible format.
The provider that runs the subscription server receives this data and handles it under its own privacy policy. We do not receive it, unless the link is a sealed link hosted by us (3.2).
3.2 To the WanX Service (premium links only)
Some providers distribute encrypted wanx:// links. Only if you add such a link, the App asks the Service whether the link is valid: whether it was revoked or expired, whether the provider’s premium plan is active, and whether the link’s import limit (the number of devices it may be added to) still allows your device. For this the App sends the Service:
- a public key generated on your device (the private key never leaves the device), which identifies the device to the import limit;
- if Send device ID (HWID) is on: the HWID, operating system and device model described in 3.1.
If the check passes, the Service returns the provider’s subscription address, encrypted for your device. The App then downloads the servers directly from the provider, as described in 3.1; the Service never downloads, sees or stores your servers. The App repeats the check about once a day.
We store, per link: a fingerprint of your device’s public key, the OS and model (if sent), and when the device was first and last seen. The provider that issued the link can see this device list for its own links and can remove devices. With respect to these records we process data on behalf of that provider.
3.3 Connectivity and latency checks
To check whether a connection works and to measure latency, the App makes a small request to www.gstatic.com/generate_204 (operated by Google) and opens test connections to your servers. These requests carry no personal data beyond what any internet request does (such as your IP address), and Google’s privacy policy applies to its server.
3.4 DNS
While connected, the App resolves domain names using the DNS resolver you select in Settings (Cloudflare, Google, Quad9 or AdGuard). That resolver receives the domain names your device looks up, under its own privacy policy.
4. Server logs and IP addresses
When the App or a browser contacts wanx.dev, our servers necessarily receive its IP address. We use it only briefly in memory to limit abuse (rate limiting) and do not write it to logs. Our logs record the time, the request type and path (with link tokens removed), the response status and its duration. Link tokens and provider API keys are stored only as one-way hashes.
5. Device permissions
- VPN configuration — required to create the VPN connection.
- Camera — only when you choose to scan a QR code. Images are processed on the device and never stored or sent.
- Notifications (Android) — to show the connection status while the VPN is running.
6. What we do not do
- We do not collect your name, email, phone number, contacts, location, photos or browsing history.
- We do not use advertising identifiers, push-notification tokens, analytics, crash-reporting or tracking services (no Firebase, Sentry or similar SDKs).
- We do not sell, rent or share personal data with data brokers or advertisers.
7. Legal bases (EEA, UK and similar laws)
We process the data in section 3.2 to provide the sealed-subscription feature you requested by adding the link (performance of a contract) and, for abuse prevention and security logs, on the basis of our legitimate interest in keeping the Service secure.
8. Retention
| Data | Kept |
|---|---|
| Device records of a sealed subscription | Until the provider removes the device or revokes the subscription, or until we close the provider’s account; database backups for up to 14 more days |
| IP addresses | Only in memory, for minutes, for rate limiting |
| Service logs | Up to 30 days |
| Data on your device | Until you delete it or the App |
9. Your rights and choices
- Turn off sending the HWID in Settings › Send device ID (HWID).
- Delete servers and subscriptions in the App, or delete the App to remove all local data.
- Ask the provider of a sealed link to remove your device, or contact us.
- Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to complain to your data-protection authority. Email us to exercise these rights; we will answer within 30 days. Because WanX has no accounts, we may ask for the HWID shown in the App’s Settings so we can find the records.
10. Security and location
Data in transit to the Service is protected with TLS. Sealed subscriptions are signed and encrypted for one device. The Service is hosted on servers in Germany (EU). If you access it from elsewhere, your data is transferred there.
11. Children
The App is not directed at children under 13 (or under 16 where local law requires), and we do not knowingly collect their personal data.
12. Changes
We will post any change to this policy on this page and update its effective date. If a change materially affects how we use data, we will make it noticeable in the App or on this site before it takes effect.
13. Contact
RayCentral LLC
1209 Mountain Road Pl NE, Albuquerque, NM 87110, United States
Email: support@raycentral.net