{
  "schema_version": 1,
  "reviewed_on": "2026-11-08",
  "interpretation": "Source-attributed policy breakdown, not observed network behavior, an audit or a privacy score. Unknown is not a no-collection claim. VPN tunnel records are distinct from website, account, payment and optional-product data.",
  "fields": [
    {
      "id": "activity",
      "label": "Browsing & traffic",
      "icon": "eye",
      "meaning": "Websites, destinations and communication content."
    },
    {
      "id": "dns",
      "label": "DNS queries",
      "icon": "network",
      "meaning": "Domain lookups handled by the VPN; custom DNS has separate policies."
    },
    {
      "id": "ip",
      "label": "IP addresses",
      "icon": "fingerprint",
      "meaning": "Source and VPN IP records; account and add-on exceptions are separate."
    },
    {
      "id": "sessions",
      "label": "Session records",
      "icon": "calendar",
      "meaning": "Connection times, duration and coarse connection events."
    },
    {
      "id": "bandwidth",
      "label": "Bandwidth counters",
      "icon": "database",
      "meaning": "Amounts transferred; a counter is different from browsing history."
    },
    {
      "id": "diagnostics",
      "label": "App diagnostics",
      "icon": "telemetry",
      "meaning": "Crash reports, operational metrics and optional analytics."
    },
    {
      "id": "account",
      "label": "Account identity",
      "icon": "key",
      "meaning": "Login identifiers, contact details and security records."
    },
    {
      "id": "payment",
      "label": "Payment records",
      "icon": "receipt",
      "meaning": "Billing and processor records, which can outlast a subscription."
    },
    {
      "id": "retention",
      "label": "Retention & deletion",
      "icon": "document",
      "meaning": "The deletion clock differs for each data category."
    }
  ],
  "sources": [
    {
      "id": "nord-vpn",
      "title": "NordVPN privacy notice",
      "url": "https://my.nordaccount.com/legal/privacy-policy/nordvpn/",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "nord-account",
      "title": "Nord Account privacy policy",
      "url": "https://my.nordaccount.com/legal/privacy-policy/",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "express",
      "title": "ExpressVPN privacy policy",
      "url": "https://www.expressvpn.com/privacy-policy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "pia",
      "title": "PIA privacy policy",
      "url": "https://www.privateinternetaccess.com/privacy-policy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "proton-vpn",
      "title": "Proton VPN privacy policy",
      "url": "https://protonvpn.com/privacy-policy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "proton-logs",
      "title": "Proton VPN logging explanation",
      "url": "https://protonvpn.com/support/no-logs-vpn",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "proton-account",
      "title": "Proton account privacy policy",
      "url": "https://proton.me/legal/privacy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "surf",
      "title": "Surfshark privacy policy",
      "url": "https://surfshark.com/privacy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "cyber",
      "title": "CyberGhost privacy policy",
      "url": "https://www.cyberghostvpn.com/privacypolicy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "hide",
      "title": "hide.me privacy policy",
      "url": "https://hide.me/en/privacy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "pure",
      "title": "PureVPN privacy policy",
      "url": "https://www.purevpn.com/privacy-policy",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "privado",
      "title": "PrivadoVPN privacy policy",
      "url": "https://privadovpn.com/privacy-policy/",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    },
    {
      "id": "private",
      "title": "PrivateVPN privacy policy",
      "url": "https://privatevpn.com/privacy-policy/",
      "kind": "provider_policy",
      "checked_on": "2026-11-08"
    }
  ],
  "providers": [
    {
      "provider": "nordvpn",
      "summary": "Temporary session controls and a 90-day service-use flag sit alongside its no-activity-logs claim.",
      "scope": "Standard consumer VPN; dedicated products have additional identity links.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies recording browsing or traffic.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "General remarks"
        },
        "dns": {
          "status": "unspecified",
          "summary": "DNS-query retention is not separately itemized in this notice.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "General remarks"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies stored VPN IP logs.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "General remarks"
        },
        "sessions": {
          "status": "temporary",
          "summary": "Last-session control data: deleted within 15 minutes of termination; also records use within the last 90 days.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "Additional information processed"
        },
        "bandwidth": {
          "status": "not_stored",
          "summary": "Denies storing used bandwidth.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "General remarks"
        },
        "diagnostics": {
          "status": "mixed",
          "summary": "Essential technical data; optional analytics and advertising data.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "NordVPN applications"
        },
        "account": {
          "status": "collected",
          "summary": "Email and account details.",
          "source_ids": [
            "nord-account"
          ],
          "locator": "Personal data; account creation"
        },
        "payment": {
          "status": "collected",
          "summary": "Billing/payment information: 10 years after the last transaction.",
          "source_ids": [
            "nord-account"
          ],
          "locator": "Data retention and deletion"
        },
        "retention": {
          "status": "mixed",
          "summary": "Account data until deletion; billing has its own 10-year period.",
          "source_ids": [
            "nord-account"
          ],
          "locator": "Data retention and deletion"
        }
      },
      "exceptions": [
        {
          "summary": "Dedicated IP links the assigned address to the account; dedicated-server terms have separate scope.",
          "source_ids": [
            "nord-vpn"
          ],
          "locator": "Other services/features by NordVPN"
        }
      ]
    },
    {
      "provider": "expressvpn",
      "summary": "Collects coarse connection-day/location information and per-user transfer totals, while denying activity and precise connection logs.",
      "scope": "Consumer VPN; MediaStreamer is a separate service.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing, destinations and traffic-content logs.",
          "source_ids": [
            "express"
          ],
          "locator": "Opening logging commitment"
        },
        "dns": {
          "status": "not_stored",
          "summary": "Denies storing DNS queries.",
          "source_ids": [
            "express"
          ],
          "locator": "Opening logging commitment"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies source and outgoing VPN IP logs.",
          "source_ids": [
            "express"
          ],
          "locator": "Opening logging commitment"
        },
        "sessions": {
          "status": "collected",
          "summary": "Connection day, VPN location and origin country/ISP; not precise connection times.",
          "source_ids": [
            "express"
          ],
          "locator": "Successful Connection"
        },
        "bandwidth": {
          "status": "collected",
          "summary": "Total data transferred per user.",
          "source_ids": [
            "express"
          ],
          "locator": "Aggregate Sum of Data Transferred"
        },
        "diagnostics": {
          "status": "mixed",
          "summary": "Usage metrics and app versions; diagnostic reports are opt-in.",
          "source_ids": [
            "express"
          ],
          "locator": "Usage Statistics Data and App Diagnostic Data"
        },
        "account": {
          "status": "collected",
          "summary": "Email and account information; anti-fraud partners may process IPs.",
          "source_ids": [
            "express"
          ],
          "locator": "Personal Data"
        },
        "payment": {
          "status": "collected",
          "summary": "Payment-method-dependent billing details and external processors.",
          "source_ids": [
            "express"
          ],
          "locator": "Personal Data"
        },
        "retention": {
          "status": "mixed",
          "summary": "Transaction-related communications: 10 years; other data follows stated legal/purpose criteria.",
          "source_ids": [
            "express"
          ],
          "locator": "Personal Data; retention"
        }
      },
      "exceptions": [
        {
          "summary": "MediaStreamer registers authorized IP addresses separately from the VPN.",
          "source_ids": [
            "express"
          ],
          "locator": "MediaStreamer Data"
        }
      ]
    },
    {
      "provider": "pia",
      "summary": "Denies browsing, DNS, IP, timestamp and bandwidth logs; account/payment information and optional reports remain separate.",
      "scope": "Consumer VPN; website analytics and support are outside the tunnel claim.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing-history and content logs.",
          "source_ids": [
            "pia"
          ],
          "locator": "Personal information we collect"
        },
        "dns": {
          "status": "not_stored",
          "summary": "Denies DNS-query logs.",
          "source_ids": [
            "pia"
          ],
          "locator": "Personal information we collect"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies user IP logs.",
          "source_ids": [
            "pia"
          ],
          "locator": "Personal information we collect"
        },
        "sessions": {
          "status": "not_stored",
          "summary": "Denies connection timestamp logs.",
          "source_ids": [
            "pia"
          ],
          "locator": "Personal information we collect"
        },
        "bandwidth": {
          "status": "not_stored",
          "summary": "Denies user bandwidth logs; aggregate capacity metrics remain.",
          "source_ids": [
            "pia"
          ],
          "locator": "Personal information; non-personal data"
        },
        "diagnostics": {
          "status": "mixed",
          "summary": "Aggregate operational metrics; optional connection/debug reports.",
          "source_ids": [
            "pia"
          ],
          "locator": "Non-personal data"
        },
        "account": {
          "status": "collected",
          "summary": "Email; US state/ZIP for relevant tax processing.",
          "source_ids": [
            "pia"
          ],
          "locator": "From VPN users"
        },
        "payment": {
          "status": "collected",
          "summary": "Payment records; no full card details held by PIA.",
          "source_ids": [
            "pia"
          ],
          "locator": "From VPN users"
        },
        "retention": {
          "status": "unspecified",
          "summary": "No fixed period; service, legal, dispute and agreement needs govern retention.",
          "source_ids": [
            "pia"
          ],
          "locator": "Data retention"
        }
      },
      "exceptions": []
    },
    {
      "provider": "protonvpn",
      "summary": "VPN-session claims differ from optional Proton Account login-IP logging and anti-abuse checks.",
      "scope": "Free and paid VPN; the Proton Account policy also applies.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies traffic and communication-content logs.",
          "source_ids": [
            "proton-vpn"
          ],
          "locator": "Account activity"
        },
        "dns": {
          "status": "unspecified",
          "summary": "DNS-query retention is not separately itemized in the VPN sub-policy.",
          "source_ids": [
            "proton-vpn"
          ],
          "locator": "Account activity"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies logging VPN IP addresses.",
          "source_ids": [
            "proton-logs"
          ],
          "locator": "No-logs explanation"
        },
        "sessions": {
          "status": "not_stored",
          "summary": "Denies VPN-session logs and session-length logging.",
          "source_ids": [
            "proton-vpn"
          ],
          "locator": "Account activity; no-logs explanation"
        },
        "bandwidth": {
          "status": "unspecified",
          "summary": "No separate account-level bandwidth retention statement captured.",
          "source_ids": [
            "proton-vpn"
          ],
          "locator": "Account activity"
        },
        "diagnostics": {
          "status": "collected",
          "summary": "Technical analytics and crash reporting may be used; defaults vary by app.",
          "source_ids": [
            "proton-account"
          ],
          "locator": "Section 2.10 native applications"
        },
        "account": {
          "status": "mixed",
          "summary": "Account identifiers; optional authentication logs retain login IPs while enabled.",
          "source_ids": [
            "proton-account"
          ],
          "locator": "Sections 2.2 and 2.4"
        },
        "payment": {
          "status": "collected",
          "summary": "Payment processors; name and last four card digits may be retained.",
          "source_ids": [
            "proton-account"
          ],
          "locator": "Section 2.9 payment information"
        },
        "retention": {
          "status": "mixed",
          "summary": "Optional login-IP records deleted on disabling; no general fixed deletion period captured.",
          "source_ids": [
            "proton-account"
          ],
          "locator": "Section 2.4"
        }
      },
      "exceptions": [
        {
          "summary": "Verification may temporarily process IP, email or phone data; this is separate from VPN-session logging.",
          "source_ids": [
            "proton-account"
          ],
          "locator": "Section 2.2 account creation"
        }
      ]
    },
    {
      "provider": "surfshark",
      "summary": "Temporary VPN connection identifiers are distinct from longer-lived account, billing and support records.",
      "scope": "VPN only; other Surfshark tools have additional processing.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies storing websites visited and browsing activity.",
          "source_ids": [
            "surf"
          ],
          "locator": "Sections 1 and 2.2.1"
        },
        "dns": {
          "status": "unspecified",
          "summary": "Separate DNS-query retention is not itemized in the reviewed VPN clauses.",
          "source_ids": [
            "surf"
          ],
          "locator": "Sections 1 and 2.2.1"
        },
        "ip": {
          "status": "temporary",
          "summary": "User ID and/or IP: deleted within 15 minutes after the session ends.",
          "source_ids": [
            "surf"
          ],
          "locator": "Section 2.2.1"
        },
        "sessions": {
          "status": "temporary",
          "summary": "Connection timestamps share the 15-minute post-session deletion period.",
          "source_ids": [
            "surf"
          ],
          "locator": "Section 2.2.1"
        },
        "bandwidth": {
          "status": "not_stored",
          "summary": "Denies collecting used bandwidth.",
          "source_ids": [
            "surf"
          ],
          "locator": "Section 1"
        },
        "diagnostics": {
          "status": "optional",
          "summary": "Consent-based VPN diagnostics: at most 7 days, or earlier withdrawal.",
          "source_ids": [
            "surf"
          ],
          "locator": "Section 2.3.9"
        },
        "account": {
          "status": "collected",
          "summary": "Email, account registration and trusted-device/login details.",
          "source_ids": [
            "surf"
          ],
          "locator": "Sections 2.1.1 and 2.3.1"
        },
        "payment": {
          "status": "collected",
          "summary": "Subscription/payment records; processors may handle payer IP and fuller billing data.",
          "source_ids": [
            "surf"
          ],
          "locator": "Section 2.1.2"
        },
        "retention": {
          "status": "mixed",
          "summary": "Account/billing: active subscription and 2 years after last login; support: up to 6 years.",
          "source_ids": [
            "surf"
          ],
          "locator": "Sections 2.1 and 2.3.2"
        }
      },
      "exceptions": []
    },
    {
      "provider": "cyberghost",
      "summary": "Denies identifiable VPN logs but describes aggregate connection events and optional support diagnostics.",
      "scope": "Consumer VPN; website tracking is a separate data path.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing and traffic-content logs.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Policy introduction"
        },
        "dns": {
          "status": "not_stored",
          "summary": "Denies DNS-query logs.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Service performance data"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies VPN source-IP logs.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Policy introduction; service performance"
        },
        "sessions": {
          "status": "aggregate",
          "summary": "Aggregate connection attempts/successes; denies identifiable timestamps and durations.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Connection Attempt; Connection Successful"
        },
        "bandwidth": {
          "status": "unspecified",
          "summary": "Individual bandwidth-counter retention not established in this policy review.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Non-personal data"
        },
        "diagnostics": {
          "status": "mixed",
          "summary": "Aggregate metrics; optional diagnostics and user-submitted support logs.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Non-personal data"
        },
        "account": {
          "status": "collected",
          "summary": "Contact/account fields and website anti-fraud information.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Information related to your account"
        },
        "payment": {
          "status": "collected",
          "summary": "Transaction/billing records; full card details handled by processors.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Account information; policy introduction"
        },
        "retention": {
          "status": "unspecified",
          "summary": "No fixed duration; service, legal and dispute requirements apply.",
          "source_ids": [
            "cyber"
          ],
          "locator": "Data Retention"
        }
      },
      "exceptions": []
    },
    {
      "provider": "hideme",
      "summary": "Temporary troubleshooting records and monthly traffic counters qualify its broad no-session-logs statement.",
      "scope": "Registered VPN service; website access logs are separate.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing and VPN activity logs.",
          "source_ids": [
            "hide"
          ],
          "locator": "Policy introduction"
        },
        "dns": {
          "status": "unspecified",
          "summary": "Separate DNS-query retention not itemized in the reviewed policy.",
          "source_ids": [
            "hide"
          ],
          "locator": "Policy introduction"
        },
        "ip": {
          "status": "temporary",
          "summary": "Random username and internal, non-public IP in troubleshooting records.",
          "source_ids": [
            "hide"
          ],
          "locator": "Information processed when connecting"
        },
        "sessions": {
          "status": "temporary",
          "summary": "Non-persistent troubleshooting records erased every few hours.",
          "source_ids": [
            "hide"
          ],
          "locator": "Information processed when connecting"
        },
        "bandwidth": {
          "status": "collected",
          "summary": "Session totals update aggregate monthly traffic counters.",
          "source_ids": [
            "hide"
          ],
          "locator": "Information processed when connecting"
        },
        "diagnostics": {
          "status": "optional",
          "summary": "Consented anonymous crash and network reports; controlled in app settings.",
          "source_ids": [
            "hide"
          ],
          "locator": "Anonymous diagnostic and crash reports"
        },
        "account": {
          "status": "collected",
          "summary": "Encrypted account email.",
          "source_ids": [
            "hide"
          ],
          "locator": "Data collected at signup"
        },
        "payment": {
          "status": "third_party",
          "summary": "Policy says payment details stay with processors using an account reference.",
          "source_ids": [
            "hide"
          ],
          "locator": "Payments"
        },
        "retention": {
          "status": "mixed",
          "summary": "Account data deleted on termination; processor retention is separate.",
          "source_ids": [
            "hide"
          ],
          "locator": "Information stored when you stop using the service"
        }
      },
      "exceptions": []
    },
    {
      "provider": "purevpn",
      "summary": "Denies activity logs but describes connection dates, ISP information and bandwidth totals, with add-on exceptions.",
      "scope": "Consumer VPN; dedicated-IP and blocking features have separate conditions.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing and traffic-content logs.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 4"
        },
        "dns": {
          "status": "mixed",
          "summary": "Denies DNS-query logs; optional blocker sees domains during use.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 4 blocker notes"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies original and assigned VPN IP logs for the standard service.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 4"
        },
        "sessions": {
          "status": "collected",
          "summary": "Connection day and ISP/routes; denies precise connection times.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 3"
        },
        "bandwidth": {
          "status": "collected",
          "summary": "Total bandwidth by user; residential add-on also has quota counters.",
          "source_ids": [
            "pure"
          ],
          "locator": "Bandwidth use and consumption"
        },
        "diagnostics": {
          "status": "collected",
          "summary": "Software analytics, statistics and support communications.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 3"
        },
        "account": {
          "status": "collected",
          "summary": "Name, email and password.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 3"
        },
        "payment": {
          "status": "collected",
          "summary": "Payment method and transaction processing.",
          "source_ids": [
            "pure"
          ],
          "locator": "Sections 3 and 5"
        },
        "retention": {
          "status": "mixed",
          "summary": "Email deletion requires an explicit request; legal/business exceptions remain.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 11"
        }
      },
      "exceptions": [
        {
          "summary": "Dedicated-IP records persist 25 days after subscription ends; manually configured extended WireGuard IP records have a separate 24-hour rule.",
          "source_ids": [
            "pure"
          ],
          "locator": "Section 4 add-on notes"
        }
      ]
    },
    {
      "provider": "privadovpn",
      "summary": "Denies VPN traffic, DNS and session-IP logs while retaining account/plan bandwidth counters and other account data.",
      "scope": "Free and paid VPN; Control Tower outside the VPN can register an IP.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing, destinations and traffic-content logs.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention; privacy rights"
        },
        "dns": {
          "status": "not_stored",
          "summary": "Denies VPN DNS-query logs.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention; privacy rights"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies VPN-session IP logs.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention; privacy rights"
        },
        "sessions": {
          "status": "unspecified",
          "summary": "Precise timestamp/session-duration retention not separately itemized.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention"
        },
        "bandwidth": {
          "status": "collected",
          "summary": "Account/plan-level transfer totals for operation and plan limits.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention: bandwidth data"
        },
        "diagnostics": {
          "status": "collected",
          "summary": "App statistics; self-hosted Sentry crash reports retained up to one year.",
          "source_ids": [
            "privado"
          ],
          "locator": "Automatic collection; data retention"
        },
        "account": {
          "status": "collected",
          "summary": "Email, username and hashed password; deletion within 30 days of request, except legal holds.",
          "source_ids": [
            "privado"
          ],
          "locator": "Account creation; data retention"
        },
        "payment": {
          "status": "collected",
          "summary": "Payment affiliates/processors; records kept for the account duration and 7 years after the relevant fiscal year ends.",
          "source_ids": [
            "privado"
          ],
          "locator": "Payment information; data retention"
        },
        "retention": {
          "status": "mixed",
          "summary": "Support up to 2 years after deletion/ticket closure, whichever is later; aggregate app stats indefinite.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention"
        }
      },
      "exceptions": [
        {
          "summary": "Control Tower registered IPs remain while enabled, until de-registration/account deletion, subject to legal exceptions; this is not a VPN-session IP log.",
          "source_ids": [
            "privado"
          ],
          "locator": "Data retention: Control Tower DNS"
        }
      ]
    },
    {
      "provider": "privatevpn",
      "summary": "Denies VPN activity, IP, timestamp and bandwidth logs; billing processors and support still handle identifying data.",
      "scope": "Consumer VPN; account, processor and website records are separate.",
      "evidence_kind": "provider_policy",
      "checked_on": "2026-11-08",
      "fields": {
        "activity": {
          "status": "not_stored",
          "summary": "Denies browsing, destinations and content logs.",
          "source_ids": [
            "private"
          ],
          "locator": "Policy introduction"
        },
        "dns": {
          "status": "not_stored",
          "summary": "Denies DNS-query logs.",
          "source_ids": [
            "private"
          ],
          "locator": "Policy introduction"
        },
        "ip": {
          "status": "not_stored",
          "summary": "Denies source and allocated VPN IP logs.",
          "source_ids": [
            "private"
          ],
          "locator": "Policy introduction"
        },
        "sessions": {
          "status": "not_stored",
          "summary": "Denies connection timestamps.",
          "source_ids": [
            "private"
          ],
          "locator": "Policy introduction"
        },
        "bandwidth": {
          "status": "not_stored",
          "summary": "Denies bandwidth logs.",
          "source_ids": [
            "private"
          ],
          "locator": "Policy introduction"
        },
        "diagnostics": {
          "status": "unspecified",
          "summary": "VPN-app diagnostic collection/defaults not established here; support collects submitted information.",
          "source_ids": [
            "private"
          ],
          "locator": "Information we collect"
        },
        "account": {
          "status": "collected",
          "summary": "Email/password; support may collect further contact information.",
          "source_ids": [
            "private"
          ],
          "locator": "Account information; support"
        },
        "payment": {
          "status": "third_party",
          "summary": "Processors handle billing information, potentially including payer IP.",
          "source_ids": [
            "private"
          ],
          "locator": "Payment information"
        },
        "retention": {
          "status": "mixed",
          "summary": "Generally at most 2 years after last communication, with service, legal and accounting exceptions.",
          "source_ids": [
            "private"
          ],
          "locator": "Storage of information"
        }
      },
      "exceptions": []
    }
  ]
}