Effective date: May 1, 2025

Last updated: November 5, 2026

OneXray is a client for servers and configurations chosen by you. This policy explains local processing and the difference between app telemetry and the network requests needed for the client to work.

1. No app-data collection by the developer

OneXray requires no account and includes no advertising, analytics, tracking, telemetry, or crash-reporting service. We do not operate an app-data collection backend or collect your VPN traffic, browsing history, configurations, subscriptions, credentials, installed-app list, or connection logs through the app.

2. Data processed on your device

The app stores configuration, subscription URLs, optional age keys, per-subscription random identifiers when enabled, routing data, and preferences locally. It also processes VPN status, current-connection traffic counters, and the generated runtime configuration. Historical/device-wide traffic totals are not stored.

Optional Xray access/error logs remain local. Logs may contain network addresses and other sensitive information. The macOS System Extension edition does not expose file-log recording/viewing.

Android reads installed-app names, package names, and icons for per-app VPN selection. Selected apps are stored locally. Windows/Linux read adapter information for outbound-interface selection. QR scanning processes the camera image to read the code; the scan is not uploaded to us.

3. Necessary network requests

The absence of analytics does not mean the app makes no network requests.

• VPN and DNS traffic goes to the servers and resolvers selected by the active configuration. Smart Routing and ordinary Custom Routing default both proxy and direct DNS to 8.8.8.8; both are editable. Tunnel DNS is separately configurable. Advanced Custom Routing and Raw JSON can specify their own DNS servers.
• Subscription and routing-data updates connect to configured sources, including default GeoData release hosts.
• Latency tests contact the selected test URL.
• During Setup, a direct HTTPS request to ip-check-perf.radar.cloudflare.com can suggest Smart Routing’s direct region. The App sends no App identifier, does not save the lookup IP or full response and does not use GPS; you confirm or change the suggested region.
• App update checks contact GitHub. Opening documentation, stores, community links, or support pages contacts those services.
• Automatic updates and node tests may run after import or while the app is running, according to the relevant settings and workflow.

Those services necessarily receive connection information such as the source IP and request details, and apply their own privacy policies. We cannot control third-party handling. A subscription server receives the configured age public key when used, not the private key. User-authorized backups can copy the private key to the selected storage provider, as explained below. The download User-Agent can identify OneXray and its version/platform.

Optional subscription HWID

Send device identifier (HWID) is off by default for each subscription. If you explicitly enable it, OneXray generates a random identifier for that subscription, stores it locally, and sends it in the x-hwid header to the configured subscription source. It is not a hardware, advertising, or operating-system identifier. It is not sent to the developer as telemetry.

The identifier stays the same when you edit the subscription or turn the switch off and on. Changing the URL’s scheme, host, or port turns sending off until you opt in again, without changing the identifier. Redirects to another origin do not carry the header. The provider may use it to register a device or enforce a device limit under its own policy. Disabling the switch stops sending it; deleting the subscription or clearing app data removes the local identifier, not the provider’s existing record.

4. Sharing and external copies

The app does not automatically upload configurations or logs to us. If you export, copy, or share them, the selected destination may receive credentials, server addresses, or access tokens. Review content before sharing. age subscription links omit existing keys. Subscription exports omit HWID and its enabled flag.

Configuration backup writes one replaceable file to the OneXray iCloud Documents container or a user-selected file on Apple, a system-selected document on Android, or a user-selected OneDrive-synced folder on Windows. Cloud synchronization is handled by the storage provider, not by a OneXray backend. There is no backup entry on Linux.

Backups are not encrypted and may include node credentials, subscription URLs, Age private keys, and subscription HWID with its enabled state. The private key is never sent to the subscription source, but is included in your backup. Files, logs and the app’s final-exit selection are not backed up. Migratable VPN settings are included under the current platform key and restored only on a matching platform; Android sections can include selected application package names. Review access to the destination and its provider’s privacy policy.

The backup page warns that the file contains sensitive data. Binding an empty file writes the first backup even when automatic backup is off. A file with content offers restore or overwrite; cancelling preserves the previous destination and file. Later automatic writes are on by default, with an independent 1/3/7-day interval, defaulting to 3 days, checked while the app runs. You can disable automatic backup or unbind the destination. See Backup & restore.

5. Retention, deletion, and support

You can manage individual items, clear connection resources or clear all app data in Settings. Both cleanup actions stop VPN first; the confirmation explains which assets, preferences and authorizations are removed. Exported files and external/cloud backups are not deleted by that operation. Delete those copies through their storage provider when needed. OS uninstall and system backup behavior is controlled by the platform.

Because we do not collect app usage data, we have no app-telemetry record to retrieve or delete for you. If you contact us by email or a third-party platform, we use the information you voluntarily provide to respond to your request; the service also processes it under its policies.

6. Children

OneXray does not knowingly collect personal information from anyone, including children. It is not directed at children below the applicable minimum age.

7. Changes

We may update this policy when app behavior or requirements change. The current policy is hosted on this HTTPS page and linked from the app; the revision date appears above.

8. Contact

[email protected]