Version dated 17 October 2026.
Project contact
SLX VPN, Sooliks (SLX). For data and account access requests: https://t.me/slxvpn?direct.
Data used
Telegram sign-in processes your Telegram identifier, display name and username when supplied. Account operation stores login sessions, language preferences, access and device records, order history, payment amount and currency, and payment confirmation identifiers. Administrative change events and the technical state of service nodes support security and customer assistance.
Device binding
Happ sends an X-Hwid device identifier when retrieving a subscription. SLX stores a derived HMAC value and binding time, rather than the original HWID. This rejects ordinary imports of that subscription with a different identifier. It is not hardware attestation. Account owners can transfer their device connection.
Purposes
Data supports sign-in and recovery, paid access, device allowances, refunds, support and protection against repeated or unauthorized actions. Configuration readiness is not evidence that a user is currently connected to the VPN.
External services
Telegram provides sign-in and Stars payments. Website, database and VPN infrastructure require service providers; the current configuration uses Timeweb, MongoDB Atlas and VDSina. Their infrastructure may process necessary network and technical metadata under their own terms. Support messages sent through Telegram are also processed by Telegram. Do not send secrets, passwords or VPN credentials to support.
Cookies and preferences
Cookies support sessions and sign-in protection, language and theme choices. Disabling necessary cookies can prevent sign-in. Bot news messages depend on your news subscription setting.
User requests
Contact support about your data, corrections, ending access or account deletion. Proof of account ownership may be needed to protect against unauthorized requests. Payment, security and unresolved support records may be retained as needed to handle the corresponding operations and meet mandatory requirements. Ask support about the scope and retention applicable to your request. This page does not promise complete anonymity, the absence of all infrastructure logs, or processing in only one country.
Invitations and cookies
Opening a referral link saves a signed cookie with the first valid invitation in your browser for 30 days. It links a later sign-up to the inviter. Opening another link does not replace the invitation while it remains valid.
A random browser identifier is created to check for repeats. The server uses its protected HMAC hash. IP addresses, HWIDs and device fingerprints are not stored in the referral ledger.
To track rewards, the server links the inviter’s and invitee’s accounts to the source order and payment. The reward state and processing, award or reversal dates are recorded.
The inviter’s account shows the number of sign-ups, days awarded and reward states. Friends’ names, email addresses and Telegram IDs are not displayed there. The referral link itself does not contain these details.
News messages
SLX uses linked Telegram accounts or verified email addresses for news; email is sent through Resend. News is enabled by default unless previously disabled. Manage channels in account settings or unsubscribe from any email. Bounce and complaint data is used to stop further news mail. Unsubscribing does not disable sign-in or security messages.