Logging policy

What we keep, and for how long

This page is the whole policy, not a summary of it. If something here is unclear, that is our failure and we want to hear about it.

We never record any of this

The websites and services you connect to: Not the domain, not the address, not the time.
Anything you do once connected: Requests, uploads, downloads, messages, none of it.
Your DNS lookups: Resolved inside the tunnel and not written to disk.
The contents of your traffic: Encrypted between your device and our server, and none of it is written down.

We keep this for seven days

Connection start and end time: To detect one account being resold to strangers.
The IP address you connected from: To stop credential stuffing and abuse of the network.
Total bytes transferred: To enforce the data allowance on your plan.

How the deletion actually works

A scheduled job runs weekly and removes every record older than seven days from the production database. It is not a manual process, it does not wait for a request, and it does not archive to somewhere else first.

That matters more than it sounds like it does. A request for records about last month has nothing to arrive at. We cannot produce what we did not keep, and the deletion is what makes that sentence true rather than aspirational.

Your account, separately

The account site holds your email address, your plan, and your payment history, because a business cannot bill you otherwise. That's held for as long as you have an account and for the period tax law requires afterwards. It is stored separately from anything to do with connections, and the two are never joined.

If this policy changes

Any change that widens what we record will be announced before it takes effect, not after, and the date on this page will change with it. If you don't like the new version, cancel and ask for the unused part of your term back.

On audits

We have not had this audited by a third party. Plenty of VPNs advertise an audit; some of those audits examine a snapshot of a configuration for a few days. When we commission one we will publish it in full, including anything it finds. Until then, treat this page as a promise from a company you do not yet have reason to trust, and size your trust accordingly.

Still have a question about this?

Ask it before you pay. We answer policy questions from people who aren't customers yet.