Privacy Policy — MantaRay VPN
Last updated: February 11, 2026
MantaRay VPN ("the app", "we") is a VPN client application for Android and Android TV. The app does not provide VPN servers — it connects to servers that the user configures independently. We are not a VPN service provider.
1. What MantaRay VPN Is
MantaRay VPN is a client application based on the open-source Xray-core engine. It allows users to connect to their own VPN/proxy servers (VLESS, VMess, Trojan, Shadowsocks, etc.), import server configurations via subscription URLs or manual setup, and route traffic through user-configured servers.
We do not operate any VPN servers. Users are fully responsible for the servers they connect to.
2. No Account Required
The app does not require registration, login, or any personal information. There are no user accounts.
3. Data We Collect
3.1 We Do NOT Collect User Data on Our Servers
We do not operate backend servers that collect, store, or process user data. The app works entirely on the user's device.
3.2 Data Stored Locally on Your Device
The following data is stored only on your device and is never sent to us:
- Server profiles — VPN server addresses, ports, and encryption settings (stored in encrypted storage)
- Subscription URLs — links to third-party servers that provide server lists
- App preferences — DNS settings, routing rules, selected profiles
- Connection statistics — session duration, data transferred (stored locally, never transmitted)
- Device identifier — a randomly generated UUID used for subscription authentication
3.3 Data Sent to Third-Party Subscription Providers
When you add a subscription URL and the app fetches server configurations, the following technical data is sent to the subscription provider you configured (not to us):
- Device identifier (UUID)
- Device model and OS version
- App version
- FCM token (if notifications are enabled)
This data is sent solely to authenticate your device with the subscription provider. We have no access to this data.
3.4 Push Notifications (Optional)
If you enable notifications, the app uses Firebase Cloud Messaging (FCM) to receive updates. The FCM token is stored locally on your device, sent to your subscription provider (if configured), and processed by Google Firebase for message delivery. You can disable notifications at any time in your device settings.
4. Data We Do NOT Collect
- We do not log, monitor, or analyze your internet traffic — the app is a client tool, not a VPN service
- We do not have VPN servers — we cannot see your traffic even in theory
- We do not collect browsing history, DNS queries, or visited websites
- We do not use analytics (no Google Analytics, Firebase Analytics, Crashlytics)
- We do not display ads and use no advertising or tracking SDKs
- We do not sell or share any data with anyone
5. Third-Party Services
5.1 Firebase Cloud Messaging (Google)
Used solely for push notification delivery. See Google's Privacy Policy (https://policies.google.com/privacy) and Firebase Privacy (https://firebase.google.com/support/privacy).
5.2 Subscription Providers (Configured by User)
The app connects to subscription URLs that the user adds. These are third-party servers not operated or controlled by us. Users should review the privacy practices of their subscription providers.
5.3 VPN Servers (Configured by User)
All VPN traffic passes through servers chosen and configured by the user. We have no control over, access to, or responsibility for these servers.
6. Data Security
Server profiles and sensitive identifiers are stored in encrypted storage on the device. Subscription responses can be protected with RSA-4096 + AES-256-GCM hybrid encryption. The app includes runtime integrity checks to protect against tampering.
7. Permissions
- Internet — VPN connection and subscription updates
- VPN Service — creating a VPN tunnel on the device
- Foreground Service — keeping the VPN active in the background
- Notifications — optional, service status updates
- Boot Completed — optional, restore VPN after device restart
8. Your Rights
You can delete all data by clearing app storage in device settings or uninstalling the app. You can revoke permissions in your device settings at any time. You can remove subscriptions and profiles from within the app. Since we do not store any user data on our servers, there is nothing to request deletion of from our side.
9. Children's Privacy
The app is not directed at children under 13. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy from time to time. Changes will be indicated by the "Last updated" date.
11. Contact
If you have questions about this Privacy Policy:
Email: nezmetdinovdinar@gmail.com
MantaRay VPN is a client application. It does not provide VPN services, does not operate servers, and does not process user traffic.