Security Features

Enterprise-grade security protecting every connection

Military-Grade Encryption

Your data is protected with AES-256 encryption, the same standard used by governments and militaries worldwide.

  • AES-256-GCM encryption for data protection
  • Perfect Forward Secrecy (PFS) for session keys

Secure VPN Protocols

We support secure, modern VPN protocols suited to different use cases.

  • IKEv2/IPsec - built into virtually every OS, so no app install is required to connect
  • VLESS (Xray-core) - modern, low-overhead protocol built for restrictive networks
  • Regular security updates and patches

No Activity Logs

We never track, collect, or store what you do online while connected - the sites you visit, your DNS queries, or your traffic content.

  • No browsing history or visited sites logged
  • No DNS query logs
  • No traffic content inspected or stored
  • Limited connection/security metadata (e.g. IP address, login times) is retained for account security and abuse prevention, per our Privacy Policy

Kill Switch Protection

Automatic protection that blocks internet access if your VPN connection drops unexpectedly.

  • Instant traffic blocking on disconnect
  • Prevents IP address exposure
  • Works at the system level
  • Automatic reconnection attempts

DNS Leak Protection

Your DNS queries are encrypted and routed through our secure servers.

  • Encrypted DNS queries
  • No third-party DNS exposure
  • Protection against DNS hijacking
  • Custom DNS server options

Secure Infrastructure

Our infrastructure is built on enterprise-grade cloud infrastructure with multiple security layers.

  • Enterprise-grade data centres worldwide
  • SOC 2 Type II compliant data centres
  • Regular security audits
  • DDoS protection

Privacy Questions

Understanding how we protect your privacy

We collect the minimum data necessary to provide our service: your email address for account management, payment information for billing (processed by Stripe), and connection/security metadata such as IP address and login times, used for account security and abuse prevention. We never log the websites you visit, your DNS queries, or your traffic content. See our Privacy Policy for full retention periods.

We don't log your VPN activity - the sites you visit, your DNS queries, and your traffic content all remain private. We do retain limited connection/security metadata, such as IP address and login times, for account security and abuse prevention, as set out in our Privacy Policy.

In the VPN industry, "no logs" refers specifically to activity logs: the websites you visit, your DNS queries, and the content of your traffic. We don't log any of that, and we can't hand over what we don't have. It doesn't mean we retain zero data of any kind - like most services, we keep limited account and connection metadata (such as IP address and login times) for account security and abuse prevention, retained for a defined period as set out in our Privacy Policy. We think it's more useful to be specific about that distinction than to make a blanket claim.

We don't log your browsing activity, so we have no record of what you did online to hand over. We do retain limited account and connection metadata as described in our Privacy Policy, and would only disclose it if legally compelled to do so. We're transparent about any requests we receive and push back on overbroad ones within legal boundaries.

Yes. All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. We never store your full credit card details on our servers. Only a tokenized reference is kept for invoice and billing management.

Your ISP can see that you're connected to a VPN server, but they cannot see what you're doing while connected. All your traffic is encrypted, so your ISP only sees encrypted data flowing to and from the VPN server.

Account data is stored in secure, enterprise-grade data centres. For dedicated VPN customers, your VPN infrastructure is deployed in the region you choose, giving you control over data residency.

You can request complete deletion of your account and all associated data at any time through your account settings or by contacting support. We will permanently delete all your personal information within 30 days of the request.

Security Best Practices

Tips to maximize your online security

Use Strong Passwords

Create unique, complex passwords with at least 12 characters including uppercase, lowercase, numbers, and symbols.

Enable Two-Factor Authentication

Add an extra layer of security by enabling 2FA on your PrivyNet account.

Keep Software Updated

Always run the latest version of your VPN client and operating system to get security patches.

Use Kill Switch

Enable the kill switch feature to prevent accidental exposure if your VPN connection drops.

Verify Connections

Regularly check that your VPN is connected and your real IP address is not exposed using leak tests.

Secure Your Devices

Use device encryption, screen locks, and keep your antivirus software up to date.

Ready to Secure Your Privacy?

Join thousands of users who trust PrivyNet to protect their online privacy.

AES-256 Encryption
No Activity Logs
Security-Reviewed