Falorax Shield Privacy Policy

Shield uses Android's VPN interface, but only to receive your phone's DNS queries: the requests that turn a name such as example.com into an address. It routes a single local address through the tunnel, so the content of your traffic (pages, video, calls, downloads) never enters it. Shield reads the domain name in each query and checks it against its blocklist, your whitelist and your per-app rules. A blocked name gets a "does not exist" answer. An allowed query is forwarded to the DNS resolver you have chosen.

• Your settings, whitelist, per-app rules and (only if you turn it on) the history of DNS queries with the app that made each one. History is off by default, is kept for 30 days unless you change that, and can be deleted at any time. The kill switch deletes all of it.
• Camera and microphone activity events recorded by the Guardian feature.
• The app turns off Android's automatic cloud backup, so none of this is copied to your Google account by the app.

Uninstalling the app or clearing its storage removes this data. We do not receive it.

• Allowed DNS queries go to the resolver you configured (default 1.1.1.1, Cloudflare). This is the same information your internet provider's DNS would have received without Shield. That resolver's own privacy policy applies.
• Blocklist updates are downloaded from StevenBlack/hosts on GitHub over HTTPS. GitHub can see your IP address and request time. You can turn automatic updates off in Settings.
• The app shows no ads.
• It has no analytics or crash-reporting service.
• It has no account or sign-in.
• Falorax runs no server for this app and receives no personal data from it. We do not sell or share personal data.

This describes version 1.0.0, checked against the app on 2026-10-22. If a future version changes any of this, we update this policy first.

• VPN connection (Android consent dialog). The only way an Android app can see DNS queries. Shield routes a single address (192.0.2.3) through the tunnel, i.e. DNS only. Video, calls and downloads never enter it.
• Internet. To download the blocklist from GitHub and to forward allowed DNS queries to the resolver you chose. Android never prompts for this permission, which is why we list it here.
• Notifications. The ongoing 'firewall is on' notification, Guardian alerts, new-app nudges and the daily summary.
• Foreground service (special use). Keeps the firewall and Guardian running. Android always shows a notification for this.
• Run at startup. Restarts the firewall after a reboot, unless you turned auto-start off.
• Installed apps list (QUERY_ALL_PACKAGES). To show each app's permissions in App Monitor and to name the app behind a DNS query.
• Usage access (optional, granted by you in Settings). To show the most recent foreground app as the 'possible' app when the camera turns on. Without it the alert says 'unknown app'.
• Ignore battery optimisations (optional). Some phones stop background services. Android's own dialog lets you allow or deny.
• Vibrate, wake lock, network state. Alert vibration and background work (the WorkManager library adds these automatically). They give no extra data access.

Shield is not an antivirus and does not read encrypted content. It cannot filter apps that connect by IP address without a DNS lookup, and it is bypassed when Android's Private DNS is set to a specific hostname. Camera and microphone alerts name only a possible app, not a confirmed one. The full list is on the Shield page and inside the app.

The blocklist comes from the StevenBlack/hosts project (MIT licence), which itself combines several upstream lists that have their own terms.

Shield is free. The app contains no payment, premium or advertising code in this version. If that ever changes, we will update this policy before the change ships.

Shield is not directed at children under 13, and we do not knowingly collect their personal data. It is not a parental-control tool and has no PIN or lock.

If this policy changes, we will update the date above and, for significant changes, tell you in the app.