Modern encryption on every connection
Your traffic is sealed before it leaves your device and opened only at the server you chose. Nobody along the way — the café router, your broadband provider, the network at the airport — can read it. We use current encryption only, and retire old protocols rather than keeping them around for compatibility.