⚠ Unprotected Your provider sees every site you open. Encrypt it →
Infrastructure

Every server, listed.

"3,000 servers in 90 countries" usually means IP space registered nowhere near the flag on the button. Here is our actual fleet - small, and honest about it.

LocationData retentionStorage
🇳🇱 NetherlandsAmsterdamNone mandatedEncrypted disk
🇷🇴 RomaniaBucharestNone mandatedEncrypted disk
🇫🇮 FinlandHelsinkiNone mandatedEncrypted disk

Planned next: United States, Germany, Switzerland. We add a location when we can run it properly, not to make the number look bigger.

Want to know if a location is working right now? See the status page.

How the fleet is run

No virtual locations

A server labelled Finland is a machine in Finland. We never register IP space to one country and host it in another.

Our own DNS

Queries resolve on the same machine. Handing DNS to a third party would mean handing them every domain you visit.

Key rotation

Peer addresses are kept indefinitely by default in the tooling this runs on. We rotate keys and drop peer state so that default can't quietly become a log.

Chosen jurisdictions

Iceland, the Netherlands, Romania and Finland have no blanket data-retention mandate for services like ours.

IPv6 stays in the tunnel

The AmneziaWG profile sends IPv6 into the tunnel along with IPv4; VLESS apps need TUN mode to do the same. Some exits also reach sites over IPv6 - a site then sees the server's IPv6 address, not yours.

Close IPv6 leaks →

Warrant canary

As of October 2026, Cypher VPN has not:

  • received any warrant, subpoena or court order for user data;
  • received any national security request or gag order;
  • been compelled to modify our systems to enable surveillance;
  • handed over any user data to any party.

This statement is re-issued each month. If it stops being updated, treat that silence as the signal it is.

Nothing to log, nothing to give

The exact list of what we keep - and the two honest exceptions.

Read the policy →