We do not log
TrafficNo record of what you open, download or send.
DNS queriesResolved on our own servers, never written down.
Connection timestampsNot when you connect, disconnect, or for how long.
IP addressesNeither the one you came from nor the one you were given.
Bandwidth per userBeyond the plan counter described below.
IdentityNo name, email, phone or document - we never ask.
Where data does exist
Two honest exceptions. A policy that claims zero is a policy that hasn't been read carefully.
1. Plan counters, in memory
To enforce "300 GB" or "21 days left", a server has to know how much of a plan is used. That counter is tied to your access key, held in RAM, and never written to disk. It records volume - never destination, never DNS, never timestamps.
2. Payment confirmations
A crypto payment exists on its own blockchain, which we don't control. On our side we keep the transaction reference only long enough to credit your key, then delete it. We never learn a name, card or bank behind it.
This website
- No third-party analytics. No Google Analytics, no pixels, no session recorders, no A/B tools. We count pages ourselves, on our own server, and the counting keeps nothing that points back to you: your address and browser are turned into one hash under a key that is thrown away and replaced every day, so yesterday's visit cannot be tied to today's. No cookie, no stored id, and Do Not Track is honoured - switch it on and nothing is sent at all.
- No third-party requests. Fonts are served from our own domain - a font CDN would hand your IP to another company on every page load. The one exception is the optional IPv6 test on the leak check: it asks ipify for your address, and only after you press its button.
- No cookies for tracking. Your cabinet keeps its session in your own browser storage. If you arrived from a campaign link, the campaign name - never anything about you - is remembered there too, so we know which advert paid for itself.
- Web server logs are kept for a maximum of 24 hours for abuse defence, then rotated out.
- Free test. To give out one free test per connection per day, the server keeps a salted hash of your address in memory for 24 hours. The salt is random and lost on every restart, and nothing about the address is written to disk or to the database.
If someone asks us for data
We answer honestly: there is nothing to hand over. That isn't a promise about our courage - it's a property of the architecture. A file that was never written cannot be produced, subpoenaed or leaked.
What this does not protect you from
A VPN moves trust, it doesn't erase it. It hides your traffic from your provider and your IP from the sites you visit. It does not make you anonymous if you log into an account with your real name, and it does not defend against malware or a compromised device. Anyone promising "100% anonymity" is selling something.
Read the servers page too
Which machines, in which countries, owned or rented - listed openly.
See the fleet →
Cypher VPN