// legal_001
privacy_policy
privacy
policy.
▸ CHROME EXTENSION & COMPANION APP
// last_updated: 2026-05-19
▸ summary
XomexyVPN routes your browser traffic through a peer-to-peer network of real residential IPs. We collect only the minimum data required to operate the service. We do not log, inspect, or sell your browsing data. Ever.
01 // Who we are
XomexyVPN is operated by Xomexy. Website: xomexy.com. Privacy questions: privacy@xomexy.com.
02 // Single purpose statement
The XomexyVPN Chrome extension has a single purpose: to provide private browsing by routing the user's browser traffic through a peer-to-peer network of residential IP addresses, and to allow users to earn XOMX cryptocurrency by voluntarily sharing their bandwidth as a network node.
03 // Permissions & why we need them
The extension requests only the permissions necessary to function. Here is what each permission does and why it is required:
proxy
why it is needed
Configures Chrome's proxy settings to route browser traffic through the VPN SOCKS5 tunnel when the user enables the VPN.
what we do NOT do
We do not intercept, log, or inspect the content of your traffic.
storage
why it is needed
Saves your authentication token, coin balance, and VPN state locally so you stay logged in across sessions.
what we do NOT do
No data is synced to external servers except the auth token used to identify your account.
tabs
why it is needed
Detects active browsing to update the extension popup with current connection status.
what we do NOT do
We do not read, record, or transmit any tab URLs or page content.
activeTab
why it is needed
Updates the extension icon badge with VPN connection status so the user can see protection state at a glance.
what we do NOT do
No tab content or URLs are accessed or stored.
notifications
why it is needed
Alerts the user when the VPN connects, disconnects unexpectedly, or when XOMX coin rewards are earned.
what we do NOT do
Notifications are local only and contain no personal data.
alarms
why it is needed
Periodically syncs XOMX coin balance and bandwidth statistics with the coordination server in the background.
what we do NOT do
No browsing data is included in these sync requests.
webRequest
why it is needed
Handles automatic proxy authentication for VPN sessions so the user does not need to enter credentials manually.
what we do NOT do
We do not read, modify, or log the content of any web requests.
Host (129.121.62.21)
why it is needed
Communicates with the XomexyVPN coordination server to authenticate, create sessions, and sync rewards.
what we do NOT do
No other hosts or third-party domains are accessed.
04 // Data we collect
account data
- Email address — used to identify your account
- Password — stored as a one-way bcrypt hash, never in plain text
- Authentication token — stored locally in extension storage to keep you logged in
node / bandwidth data (only if you enable sharing)
- Your IP address — used to register your device as a VPN exit node
- Approximate location (country, city) — derived from IP, shown in the node list
- Bandwidth shared (bytes) — used to calculate your XOMX coin rewards
- Session timestamps — used for reward calculation and abuse prevention
what we do NOT collect
- Browsing history, URLs, or page content
- DNS queries
- The content of traffic routed through the VPN
- Any personally identifiable information beyond email
05 // Peer-to-peer network
XomexyVPN is a peer-to-peer service. When you enable the VPN, your traffic exits through another user's device. When you share bandwidth, other users' traffic exits through your device. The content of this traffic is never logged or inspected by Xomexy.
06 // Remote code
The XomexyVPN extension does not load or execute any remote code. All extension logic is contained within the installed package. The extension communicates with the coordination server only through standard API calls — no code is fetched or executed from remote sources.
07 // Data sharing
- We do not sell your data to any third party
- We do not share your data with advertisers
- We do not use your data for any purpose other than operating the VPN service and calculating XOMX rewards
08 // Data retention
- Account data: retained until you delete your account
- Session logs: 90 days for abuse prevention
- IP address logs: 30 days
09 // Security
All communication between the extension and our servers uses HTTPS/TLS encryption. Passwords are hashed with bcrypt. Authentication uses short-lived JWT tokens. Your VPN traffic is encrypted in transit through the tunnel.
10 // Your rights
- Request access to the data we hold about you
- Delete your account and all associated data
- Opt out of bandwidth sharing at any time by toggling the switch in the extension
- Contact us at privacy@xomexy.com for any privacy request
11 // Children
XomexyVPN is not directed at children under 13. We do not knowingly collect data from children under 13.
12 // Changes
We may update this policy. Significant changes will be communicated via the extension or our website. Continued use after changes constitutes acceptance.
13 // Contact
Email: privacy@xomexy.com
Website: xomexy.com