Unprotected Your provider sees every site you open. Encrypt it →
Infrastructure

Every server, listed.

"3,000 servers in 90 countries" usually means IP space registered nowhere near the flag on the button. Here is our actual fleet - small, and honest about it.

LocationData retentionStorage
🇳🇱 NetherlandsAmsterdamNone mandatedEncrypted disk
🇷🇴 RomaniaBucharestNone mandatedEncrypted disk
🇫🇮 FinlandHelsinkiNone mandatedEncrypted disk

Planned next: United States, Germany, Switzerland. We add a location when we can run it properly, not to make the number look bigger.

How the fleet is run

No virtual locations

A server labelled Finland is a machine in Finland. We never register IP space to one country and host it in another.

Our own DNS

Queries resolve on the same machine. Handing DNS to a third party would mean handing them every domain you visit.

Key rotation

Peer addresses are kept indefinitely by default in the tooling this runs on. We rotate keys and drop peer state so that default can't quietly become a log.

Chosen jurisdictions

Iceland, the Netherlands, Romania and Finland have no blanket data-retention mandate for services like ours.

Warrant canary

As of August 2026, Cypher VPN has not:

  • received any warrant, subpoena or court order for user data;
  • received any national security request or gag order;
  • been compelled to modify our systems to enable surveillance;
  • handed over any user data to any party.

This statement is re-signed each month. If it stops being updated, treat that silence as the signal it is.

Nothing to log, nothing to give

The exact list of what we keep - and the two honest exceptions.

Read the policy