Privacy Policy

Last updated: April 2026

1. General

This Privacy Policy describes how VPN Shurik (the "Service") handles information about its users. The Service is available through:

• the ShurikVPN Android application (package ch.shurik.vpn), distributed via Google Play;
• the Telegram bot @shurik_vpn_support_bot;
• the website vpn-admin.shurik.ch.

By using the Service you agree to this Privacy Policy in full. If you do not agree with any of its terms, please discontinue use of the Service.

2. Definitions

• Personal data — any information relating to an identified or identifiable individual.
• Processing — any operation performed on personal data: collection, storage, modification, use, transfer, or deletion.
• User — any individual who uses the Service.
• Technical identifiers — Device ID, Telegram ID, Google Account ID (when using Google Sign-In), OS type and version, device model.

3. Data We Collect

We do not collect names, email addresses, phone numbers, physical addresses, or payment card details directly.

Depending on how you sign in, we may process the following technical identifiers:

• Device ID — generated by the app to associate a VPN configuration with your device;
• Google Account ID — transmitted only when you use Google Sign-In; your email address is not stored;
• Telegram ID — when using the Telegram bot;
• Play Integrity token — a one-time token issued by Google to verify that the app and device are genuine; it is discarded immediately after verification and never stored;
• Google Play purchase token — received when you subscribe via Google Play Billing and used to verify the payment on our server;
• Timestamps — subscription activation and expiry dates.

The Service follows a strict no-logs policy — we do not log user activity, browsing history, or network traffic.

4. How We Use Your Data

Technical identifiers are used solely for:

• authenticating users in the Service;
• generating unique VPN keys and configurations;
• managing subscriptions (activation, renewal, expiry notifications);
• verifying purchases made through Google Play;
• fraud prevention via Play Integrity;
• providing technical support;
• compiling aggregated, anonymised usage statistics.

5. Data Retention and Transfer

Technical identifiers are retained for the duration of an active subscription and deleted within 30 days after the subscription ends.

Play Integrity tokens are never stored — they are used once and immediately discarded.

Google Play purchase tokens are retained for possible re-verification and deleted after subscription expiry.

We do not share technical identifiers with third parties except as required by applicable law.

6. Third-Party Services

The app integrates the following third-party services, each governed by its own privacy policy:

• Google Play Billing — payment processing;
• Google Sign-In — authentication via Google account;
• Google Play Integrity API — device authenticity verification.

7. Security

We protect stored information through:

• encryption in transit and at rest (TLS/HTTPS);
• restricted access controls on server infrastructure;
• regular security reviews;
• data backups.

8. Your Rights

You have the right to:

• request information about the technical identifiers we hold about you;
• request correction or deletion of your data;
• withdraw consent to data processing and request that processing cease.

To exercise these rights, contact us via the Telegram bot @shurik_vpn_support_bot or the email address listed on our Google Play page.

9. Sharing with Third Parties

Data may be shared with third parties only:

• with your explicit consent;
• to deliver the Service (payment providers — limited to what is necessary for the transaction);
• when required by competent authorities under applicable law.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Continued use of the Service after an update constitutes acceptance of the revised Policy. The current version is always available at vpn-admin.shurik.ch/privacy-policy/en.

11. Contact

For privacy-related inquiries, please contact us via the Telegram bot @shurik_vpn_support_bot.