Last updated: February 28, 2026
1. Summary
Our mobile VPN application can be used entirely without creating an account or providing personal login details. We collect limited information necessary to operate the HTTP Tweak ecosystem. For users who choose to register on our website panel, we collect specific data to maintain panel security, facilitate configuration management, and help users discover communities. The platform acts as an intermediary for user-provided configurations and does not own or control third-party VPN servers referenced in those configurations.
2. Information we collect
- Website Panel Account Information: When you register on the web panel, we collect your username, a securely hashed password, and last activity timestamps. This information is used strictly for authentication, account management, and security.
- Configuration Management (Web Panel Only): The mobile application does not collect, access, or store your configuration data. Configurations are stored only when you voluntarily create, modify, or upload them within the web panel.
- Storage, Encryption, and Limited Analytics: Configuration data saved on the web panel is stored securely in our database. Exported configurations are encrypted. We do not monitor, profile, or repurpose the actual content of your configurations. We may process limited metadata and aggregate usage statistics (such as total users, import counts, and download counts) to provide, secure, and improve the service.
- Community Submissions: We collect the country, group name, description, and join link for any communities you explicitly choose to submit to our directory.
- Technical Data (Web Panel Only): When you access the website panel, we may log your IP address, device and browser information, and access logs solely for security monitoring, performance optimization, and abuse prevention.
3. Information We Do Not Collect
Our mobile application does not collect personal browsing activity, traffic destinations, DNS queries, or connection logs. We do not monitor or record users’ online activity through the VPN connection.
4. Country detection
We may use Cloudflare's localized headers to preselect your country on the Communities page. This data is utilized solely for your convenience during browsing and is never saved to your profile.
5. How we use information
We use the collected information to:
- Operate the panel, tutorials, and community directory.
- Secure the service, prevent abuse, and investigate reports of unauthorized or copyrighted content.
- Enforce our Terms of Service, which includes reviewing potentially violating material.
- Improve platform features, stability, and performance.
- Generate aggregate analytics (for example, user, import, and download totals) to measure usage and guide product improvements.
- Respond effectively to user support requests.
6. Sharing information
We do not sell your personal data. We may share information with trusted service providers who assist us in operating the service, or when legally required by law enforcement. Please note that any community links you choose to submit are made public.
7. Cookies
We rely on strictly necessary cookies for authentication and saving basic preferences. We do not use tracking cookies or advertising cookies.
8. Data retention
We retain data only as long as necessary to provide the service or comply with legal obligations. Current automated cleanup rules for website panel data and cloud-sharing data include:
- Accounts remaining inactive for 1 year (based on the last activity timestamp) may be automatically deleted.
- Cloud-export shared keys used for simple file sharing are removed after 3 months of inactivity.
- Panel configurations are automatically removed after 3 months only if they contain no servers and no tweaks.
9. Security
We implement reasonable safeguards to protect your information against unauthorized access, alteration, or destruction. However, no online system or electronic storage can be guaranteed as 100% secure.
10. Your choices
You may update your account details directly within the panel. You can also request the removal of specific community submissions or account data by contacting us. Furthermore, you have the ability to delete your account entirely from your profile page, which will initiate data removal in accordance with this policy.
11. Contact and Abuse Reporting
If you have any questions regarding your privacy, or if you need to report suspicious activity or unauthorized content on our platform, please contact us at [email protected].