What we never record, and what we do
Vague promises aren't enough. Here is precisely what our systems store.
Last updated 3 November 2026
We never record
- The websites, apps or services you use
- DNS requests
- The contents of your traffic
- The IP address you connect from
- A history of your connections and disconnections
- Which VPN IP address you used at a given time, linked to sites you visited
We store, to run your account
- Your email address and a one-way hash of your password
- Your plan, its dates and limits, and payment records
- Your devices: name, type and public key
- Hourly totals of data used per device and location
- The time each device last connected to each location
How our servers handle your connection
Our VPN servers run AmneziaWG. To deliver your traffic, a server must hold the address your device is currently connecting from in memory while you're connected. This is how the protocol works. Our servers never write that address to disk and never send it to our central systems.
Every few seconds, each server reports to our control system only:
- which devices are allowed to connect,
- for each device, a running total of bytes sent and received, and
- the time of its last successful connection.
We use the byte totals for data allowances and the usage chart in your hub, and the last-connection time to show whether a device is online. Neither reveals what you did or where you went.
Why we keep data totals
Some plans include a data allowance, and you can see your own usage over time. To make that work we keep hourly totals, such as "device A used 1.2 GB in Germany between 14:00 and 15:00". Totals are kept for a limited time (currently up to 400 days) and then deleted automatically.
Our websites
Our web server doesn't keep access logs. We use no analytics, advertising or tracking scripts. The only cookie we set is the session cookie that keeps you signed in to the hub.
Requests from authorities
We can only provide what we have. Because we don't record activity or connection IP addresses, we can't say who used a particular VPN IP address at a particular time, or what any customer did online.
Questions
Write to [email protected]. See also our full privacy policy.