Privacy policy

The app has no accounts, keeps no browsing log and shows no ads.

Only the subscription link and the app settings stay on your device. They are erased together with the app.

When you link a device to your subscription or take the free guest hours, the app or the key page tells us an identifier of the device, its name and the app version: otherwise there is nowhere to send the key, and the guest hours could be taken over and over. The address the guest hours were issued from is kept while the «one guest pass per device» rule stands.

Our Telegram bot knows your Telegram id, your chosen language and the date your subscription ends: enough to grant access and remind you to renew. Payments are handled by the payment service: card numbers never reach us.

The server relays an encrypted stream and stores no browsing history.

To keep a subscription from being shared with strangers we count how many networks it runs from at the same time. The network address of a connection and its timestamp are kept for two days and then erased. What you open is neither seen nor recorded.

If you messaged us on WhatsApp, we keep your phone number, the device you chose, the key issued and its expiry date, payment records and who invited you if you came by a friend’s link: otherwise there is nowhere to send the key after payment. We do not store the conversation.

If you sign in to the shtil.vip website, we keep how you signed in, the device type and browser, when you signed in and last visited, and the device and server country you picked on the site. The sign-in is held by a cookie in your browser; the «Sign out on this device» button closes it.

Questions you send to support from the website are kept together with how you signed in, so the answer comes back the same way. This is not the WhatsApp conversation: we still do not store its text.

If you ask the assistant («Ask the assistant»), the question goes to the OpenRouter AI service together with your device, the setup step and the days and traffic left, without your name or contact details. The owner of the service sees the question and the assistant's answer in Telegram, to help in person if the assistant got it wrong. The text is not kept in the database: the conversation is remembered for 30 minutes, and only the number of questions per day stays. If you press «Call a person», the question goes to support and is kept as a support question.

If you subscribed in the app from Google Play, Google processes the payment: your card number and Google account never reach us. Google gives us the purchase number, its state and expiry date; we keep them with the issued key and a fingerprint of the app installation number, so the key renews and ends together with the subscription.

If you bought access on the website, we keep your email, the key issued, its expiry date and payment records: the email receives a copy of the key and the link to your page. The emails are sent by the Resend mail service, which sees the address and the text of the email. The email is erased with a button on your page, and the key keeps working until the paid term ends. If, on a page you opened with your email, you confirmed a WhatsApp number, we keep the link between the email and that number: that way the email opens the same key.

If you sign in to the website with Google, Google tells us only your email address: we do not receive your name, photo or contacts.

Browser extension. For the extension we keep only the link: a device number, the term and whose subscription it is. We do not record or keep your browsing history.

Data is kept while you use the service. Message the bot and we delete the account and the access.

Nothing is passed to third parties, except where the law demands it.