Privacy Policy — ZenXNet VPN (Browser Extension)

Summary: The extension does not collect personal data and does not share information with third parties. Settings (subscription link, subscription expiration date, selected server, manual proxy parameters, auto-connect and WebRTC flags) are stored locally in the browser storage (storage.sync for synchronization across devices and storage.local for local data).

1. What Data We Collect
   We do not collect user data. The only data the extension works with are your local settings. They remain on your device and are not sent to our servers.
2. Network Requests and Scope
3. ZenXNet Subscription: requests are made to https://on.zenxnet.com/ (subscription link) and https://api.zenxnet.com/ (Bridge API) to retrieve the server list, credentials, and to check the subscription expiration date. Checks are performed every 2 hours, with a local check of the cached expiration date every minute.
4. Device Limit Control: to enforce device limits, the extension generates an anonymous device identifier (HWID) and sends it with requests to the Bridge API. The HWID does not contain personal data and is linked only to a specific subscription link. Requests may also be sent to a backup server https://v1.read-base.org/ if the primary API is unavailable.
5. Proxy Authentication: the extension handles onAuthRequired events (HTTP 407) and sends your credentials to the selected proxy server. The content of visited pages is not read, analyzed, or stored by the extension.
6. WebRTC: policy settings (anti-leak) are applied locally to prevent real IP leaks.
7. Extension Permissions and Their Purpose
8. proxy: Enables/disables the system proxy to route browser traffic through the selected server.
9. webRequest, webRequestAuthProvider, <all_urls>: Handles Proxy Authentication (HTTP 407) on all websites. Page content is not read or stored.
10. privacy: Sets WebRTC policy (anti-leak) to prevent IP leakage.
11. declarativeNetRequest: Secure rules for requests to on.zenxnet.com and api.zenxnet.com (retrieving subscription and data via Bridge API, setting the ZenXNet User-Agent). Not used for tracking.
12. storage: Local storage of settings: subscription link, subscription expiration date, server list, selected server, manual proxy parameters, auto-connect and WebRTC flags. An anonymous device identifier (HWID) is also stored for enforcing the limit of connected devices. Standard browser storage APIs are used (for syncing settings and storing local data).
13. Sharing Data with Third Parties
    No data is shared. The extension does not send your data to third-party services and does not use third-party analytics.
14. Children
    The product is not intended for individuals under the age of 13 and does not collect information about children.
15. Security
    We design the extension following the privacy-by-design principle: minimal permissions, local storage of settings, and no data collection. Updates are released to fix bugs and improve security.
16. Policy Updates
    We may update this policy from time to time. The current version is always available on our website.
17. Contact
    For privacy or support inquiries, please contact: support@zenxnet.com.