Our records, and the logs we skip

First comes every item of account data VPNPass holds, each with its reason. Then the activity that is never recorded in the first place. Further down: tunnel encryption, legal requests, and a few habits that keep your login out of other hands.

What sits on your account

Login detailsFor an email account: the address and a one-way hash of the password. For a token account: a hash of the token and its last 4 characters, which is how we tell token accounts apart. At sign-in, the two hashes are matched. Your password is not kept as written anywhere. For tokens we also keep one encrypted copy, used only to match top-ups to your account.
Hashed sign-up IPOne IP may open at most 3 accounts. Holding the sign-up address as a hash is all it takes to enforce that.
Balance, top-ups and ordersA dated line for each top-up, purchase and refund, showing the amount. Without it your balance could drift, and a stuck payment could not be traced.
VPN passes and end datesWhether you hold Basic, Plus or Pro, and the day it expires. Buy another pass while one is running and it queues behind the current one.
Connected device markerEach live device fills a slot, and that is how the limit of 6, 10 or 12 works. The marker carries no IP and vanishes on disconnect.
Proxy loginGenerated once you have a proxy order and open My passes: a username beginning with vp, a password, and any allowed IPs you enter. The gateway checks them on each connection.
Messages to usAnything you send through My info > Contact us, plus our answers, so a conversation does not start from zero each time.

Things we never write down

The IP your provider gave you
Which sites you open or apps you run
DNS lookups
Anything inside the packets you send
Timestamps for going online or offline
Session length

Read the privacy policy

Which ciphers protect the tunnel

From the moment you connect, the device hands all of its traffic to an encrypted tunnel that ends at a VPNPass server. A provider or hotspot owner can tell a VPN is running and nothing more. The ciphers are ChaCha20 for WireGuard and AES-256-GCM for OpenVPN and IKEv2, identical across passes.

Switching protocols changes speed and resilience. It never changes what is recorded. WireGuard is where to start, OpenVPN TCP is for UDP-hostile networks, and IKEv2 suits a phone that keeps hopping between Wi-Fi and LTE.

DNS stays in the tunnel

Opening a site starts with a question: where does this name live? Answered outside the tunnel, those questions hand your provider a neat list of destinations, encryption or not.

So while you are connected, the questions ride the tunnel to our own resolvers, which keep no query log, and anything aimed at another resolver is dropped. You do not have to set this up.

Kill switch for drops

Tunnels break for dull reasons: a weak signal, a laptop waking up, a phone trading Wi-Fi for LTE. In that gap, apps without a kill switch carry on over the bare line and expose your real IP.

Switch the kill switch on and the device waits offline until VPNPass is back. If public Wi-Fi is part of your week, turn it on once and forget about it.

Computers, iPhone and iPad: Settings > Connection > Kill switch
Android: the in-app toggle, plus Always-on VPN and Block connections without VPN in system settings

Paying with crypto

Payment runs in two steps. First, crypto sent through the PayGate checkout turns into a dollar balance. Second, your cart is paid out of that balance. Cards and PayPal are not accepted, so we never see a card number or bank account.

What we log is the sum, the coin, the date and the item bought. Bear in mind that most blockchains are open ledgers, and a wallet address can be looked up by anyone who has it.

If authorities ask

Laws that apply to us are followed. Still, a lawful request can only reach records that exist, meaning the account and payment items at the top of this page.

Browsing history, lookups, real IPs and session times were never written, so no request can produce them.

Looking after your login

Because we do not send email, nothing can reset a forgotten password or reissue a lost token. Whoever holds your login can spend your balance.

What we suggest:

Store the token or password in a password manager during sign-up, or keep the token's .txt file
Keep a backup copy off your main device
Sign out of My info on any shared computer
Keep your token and password out of chats, screenshots and messages to us

Common questions

Does VPNPass watch my browsing?

Traffic crosses our servers, yet nothing about it is written down: no sites, no content, no lookups, no session times.

Is there tracking on the site or in the apps?

There are no ad cookies, tracking pixels or outside analytics. We never sell data or share it with advertisers, and account data goes out only under legal obligation.

I lost my token or forgot my password.

Then the account is gone. We have no email to send a reset to and no other proof of ownership, so a new account is the only way forward.

Found a security bug? Here is where to send it

Sign in and use My info > Contact us. You can write to us without buying anything. Tell us what you saw and how to make it happen again, and the reply will appear in that same thread.

Add only the time you need

You can fill the cart before you sign up. Create the account when you check out.

Choose a pass See proxies