यह पेज अंग्रेज़ी में उपलब्ध है। अंग्रेज़ी संस्करण ही आधिकारिक और कानूनी रूप से बाध्यकारी संस्करण है।

Privacy Policy

Last updated: October 11, 2026

ShadowVPN is sold and operated by Lennox Digital Labs, a Florida company, under a license from Lennox Group, Inc. (“we”, “us”). This policy explains what we collect when you use the ShadowVPN website and apps, and — just as important — what we don’t.

What we never collect

• The websites you visit or the content of your traffic.
• Your DNS lookups.
• Connection logs: when you connected, for how long, or how much data you used.
• The IP address you connect from, in any stored log.

While you are connected, our VPN servers hold the minimum needed to route your traffic (such as your device’s current network address and the time of the last encrypted handshake) in memory only. It is not written to logs and is gone when the connection ends or the server restarts.

What we do collect

• Account: your email address and a securely hashed password, an optional display name, your referral code, and your notification choices.
• Subscription: your plan, its status and when it ends. Payments are handled by our payment providers (Stripe, Apple or Google); we never see your full card details.
• Devices: for each device you add, a name (for example, your phone model), its platform, its WireGuard® public key, the server it uses, and the private tunnel address we assign it. Your private key is created on your device and never leaves it.
• ShadowShift™: when you ask for a fresh address, we record which of the server’s addresses your device currently uses so the server can route it — only the current one, never a history, and it is cleared when you change location or Vanish Mode replaces your key. The request never includes the site you were visiting.
• Dedicated IP (optional add-on): if you buy one, we record which address belongs to your account. Because nobody else uses it, websites you visit with it can tell repeat visits come from the same customer — that’s what makes it reliable, and it’s the trade-off of a dedicated address. We still don’t log what you do with it.
• Notifications: if you allow notifications, a push token so we can send plan-expiry reminders and, only if you opt in, news and offers.
• Referrals: if you sign up with a partner’s or friend’s code, we record who referred you so they can be credited. Partners only ever see totals (clicks, sign-ups, paying customers) — never who you are. Partner-link clicks are counted per day with no IP address or other visitor data.
• Partners: if you join our partner program, we keep your partner name, code, channel link, payout email and commission records.
• Support: whatever you choose to send us when you email for help.

Your last-used location and app settings are stored only on your device. ShadowSense™ Wi-Fi checks and Shadow Seal™ connection checks run on your device; their results are never sent to us. Shadow Seal asks Cloudflare’s public endpoint which IP address it sees, through the VPN, to confirm traffic leaves from our server. Your favorite locations, the ping to each location and the live speed graph are measured and kept on your device only. Server load shown in the app is a count of active connections per server, never who.

ShadowVPN for Chrome: the extension signs in like the app and gets one-hour passes for our browser proxy. A pass doesn’t say who you are, so the proxy can’t tell which customer is browsing, and it keeps no record of the sites you visit. While it’s on, Chrome’s video-call feature (WebRTC) is limited to the proxy so it can’t reveal your real IP address.

With Vanish Mode™ on, your device’s WireGuard public key and tunnel address are replaced after every session, and the old ones are deleted from our systems.

ShadowVault: if you buy ShadowVault Premium or Pro on this website, we keep the tier you bought, its status and end date, and the payment references from Stripe, linked to your ShadowVPN account. ShadowVault itself is unlocked with an anonymous pass: the ShadowVPN app asks our server for a pass that contains only the tier, an expiry date and a random value made by your ShadowVault installation. It contains no name, email, account or device ID, and we don’t record which passes we issue, so we can’t link your vault to your ShadowVPN account. Your vault’s contents are encrypted on your phone and never reach us.

How we use it

To create and secure your account, provide the VPN service, enforce your plan’s device limit, send service messages (such as expiry reminders), and respond to you. We do not sell your data, and we do not use advertising or tracking SDKs in our apps or website.

Service providers

• Supabase — hosts our account database and sign-in.
• Vercel — hosts this website.
• Lennox Global Technologies, our affiliated infrastructure company in the Bahamas, and its hosting providers — run and secure the VPN servers on our behalf, under a written data processing agreement. The servers handle only what’s needed to connect your device (its public key and tunnel address); they keep no activity logs. Because these servers and companies are outside your country, your data may be processed internationally with the same protections described here.
• DNS resolvers — when connected, your DNS lookups are resolved through the server we configure (currently Cloudflare 1.1.1.1). They arrive from our server, not from you.
• Stripe (website purchases), Apple and Google (in-app purchases, when available) — process payments.

Cookies

This website uses no advertising or tracking cookies and no analytics. It sets:

• Sign-in cookies (essential) — keep you signed in to your account.
• NEXT_LOCALE (essential) — remembers the language you picked.
• sv_consent (essential) — remembers your cookie choice for one year.
• sv_ref (optional) — if you arrive through a partner’s link and choose “Accept all”, remembers their code for 30 days so they’re credited if you sign up. With “Essential only” it isn’t set.

Stripe sets its own cookies on its checkout pages to process payments and prevent fraud. You can change your choice at any time with “Cookie settings” at the bottom of every page.

Keeping and deleting your data

We keep your account data while your account is open. You can remove devices at any time from your account page or the app. You can delete your account and its data at any time from your account page on this website or in the app; deletion is immediate. If you can’t sign in, email support@shadowvpnnow.com from your account’s email address. We keep only what the law requires (for example, payment records for tax).

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how we use it. Contact us and we’ll help.

Children

ShadowVPN is not intended for children under 13, and we don’t knowingly collect their data.

Changes

If we change this policy, we’ll update the date above and, for significant changes, let you know by email or in the app.

Contact

Lennox Digital Labs — support@shadowvpnnow.com