LOOK INSIDE THE NO-LOGS CLAIM
What does your VPN keep?
Browsing history, connection records and account identity are different kinds of data. Compare the policy for each field.
Compare the actual categories.
Every entry below is a provider policy statement. “Claims no storage” is not a finding that we verified the system. Retention periods apply only to the named records; processor and add-on policies can differ.
10 providers · alphabetical order · all data categories
Scroll horizontally for more fields. Provider names stay visible. Open a provider for policy sections, feature exceptions and the separate audit and event record.
| Provider | Browsing & traffic | DNS queries | IP addresses | Session records | Bandwidth counters | App diagnostics | Account identity | Payment records | Retention & deletion |
|---|---|---|---|---|---|---|---|---|---|
| CyberGhostPolicy sections & exceptions | Claims no storage Denies browsing and traffic-content logs. | Claims no storage Denies DNS-query logs. | Claims no storage Denies VPN source-IP logs. | Aggregate records Aggregate connection attempts/successes; denies identifiable timestamps and durations. | Not established Individual bandwidth-counter retention not established in this policy review. | Conditions apply Aggregate metrics; optional diagnostics and user-submitted support logs. | Collected Contact/account fields and website anti-fraud information. | Collected Transaction/billing records; full card details handled by processors. | Not established No fixed duration; service, legal and dispute requirements apply. |
| ExpressVPNPolicy sections & exceptions | Claims no storage Denies browsing, destinations and traffic-content logs. | Claims no storage Denies storing DNS queries. | Claims no storage Denies source and outgoing VPN IP logs. | Collected Connection day, VPN location and origin country/ISP; not precise connection times. | Collected Total data transferred per user. | Conditions apply Usage metrics and app versions; diagnostic reports are opt-in. | Collected Email and account information; anti-fraud partners may process IPs. | Collected Payment-method-dependent billing details and external processors. | Conditions apply Transaction-related communications: 10 years; other data follows stated legal/purpose criteria. |
| hide.mePolicy sections & exceptions | Claims no storage Denies browsing and VPN activity logs. | Not established Separate DNS-query retention not itemized in the reviewed policy. | Temporary records Random username and internal, non-public IP in troubleshooting records. | Temporary records Non-persistent troubleshooting records erased every few hours. | Collected Session totals update aggregate monthly traffic counters. | Optional collection Consented anonymous crash and network reports; controlled in app settings. | Collected Encrypted account email. | Processor records Policy says payment details stay with processors using an account reference. | Conditions apply Account data deleted on termination; processor retention is separate. |
| NordVPNPolicy sections & exceptions | Claims no storage Denies recording browsing or traffic. | Not established DNS-query retention is not separately itemized in this notice. | Claims no storage Denies stored VPN IP logs. | Temporary records Last-session control data: deleted within 15 minutes of termination; also records use within the last 90 days. | Claims no storage Denies storing used bandwidth. | Conditions apply Essential technical data; optional analytics and advertising data. | Collected Email and account details. | Collected Billing/payment information: 10 years after the last transaction. | Conditions apply Account data until deletion; billing has its own 10-year period. |
| PrivadoVPNPolicy sections & exceptions | Claims no storage Denies browsing, destinations and traffic-content logs. | Claims no storage Denies VPN DNS-query logs. | Claims no storage Denies VPN-session IP logs. | Not established Precise timestamp/session-duration retention not separately itemized. | Collected Account/plan-level transfer totals for operation and plan limits. | Collected App statistics; self-hosted Sentry crash reports retained up to one year. | Collected Email, username and hashed password; deletion within 30 days of request, except legal holds. | Collected Payment affiliates/processors; records kept for the account duration and 7 years after the relevant fiscal year ends. | Conditions apply Support up to 2 years after deletion/ticket closure, whichever is later; aggregate app stats indefinite. |
| Private Internet AccessPolicy sections & exceptions | Claims no storage Denies browsing-history and content logs. | Claims no storage Denies DNS-query logs. | Claims no storage Denies user IP logs. | Claims no storage Denies connection timestamp logs. | Claims no storage Denies user bandwidth logs; aggregate capacity metrics remain. | Conditions apply Aggregate operational metrics; optional connection/debug reports. | Collected Email; US state/ZIP for relevant tax processing. | Collected Payment records; no full card details held by PIA. | Not established No fixed period; service, legal, dispute and agreement needs govern retention. |
| PrivateVPNPolicy sections & exceptions | Claims no storage Denies browsing, destinations and content logs. | Claims no storage Denies DNS-query logs. | Claims no storage Denies source and allocated VPN IP logs. | Claims no storage Denies connection timestamps. | Claims no storage Denies bandwidth logs. | Not established VPN-app diagnostic collection/defaults not established here; support collects submitted information. | Collected Email/password; support may collect further contact information. | Processor records Processors handle billing information, potentially including payer IP. | Conditions apply Generally at most 2 years after last communication, with service, legal and accounting exceptions. |
| Proton VPNPolicy sections & exceptions | Claims no storage Denies traffic and communication-content logs. | Not established DNS-query retention is not separately itemized in the VPN sub-policy. | Claims no storage Denies logging VPN IP addresses. | Claims no storage Denies VPN-session logs and session-length logging. | Not established No separate account-level bandwidth retention statement captured. | Collected Technical analytics and crash reporting may be used; defaults vary by app. | Conditions apply Account identifiers; optional authentication logs retain login IPs while enabled. | Collected Payment processors; name and last four card digits may be retained. | Conditions apply Optional login-IP records deleted on disabling; no general fixed deletion period captured. |
| PureVPNPolicy sections & exceptions | Claims no storage Denies browsing and traffic-content logs. | Conditions apply Denies DNS-query logs; optional blocker sees domains during use. | Claims no storage Denies original and assigned VPN IP logs for the standard service. | Collected Connection day and ISP/routes; denies precise connection times. | Collected Total bandwidth by user; residential add-on also has quota counters. | Collected Software analytics, statistics and support communications. | Collected Name, email and password. | Collected Payment method and transaction processing. | Conditions apply Email deletion requires an explicit request; legal/business exceptions remain. |
| SurfsharkPolicy sections & exceptions | Claims no storage Denies storing websites visited and browsing activity. | Not established Separate DNS-query retention is not itemized in the reviewed VPN clauses. | Temporary records User ID and/or IP: deleted within 15 minutes after the session ends. | Temporary records Connection timestamps share the 15-minute post-session deletion period. | Claims no storage Denies collecting used bandwidth. | Optional collection Consent-based VPN diagnostics: at most 7 days, or earlier withdrawal. | Collected Email, account registration and trusted-device/login details. | Collected Subscription/payment records; processors may handle payer IP and fuller billing data. | Conditions apply Account/billing: active subscription and 2 years after last login; support: up to 6 years. |
No provider names match. Clear the search or reset the view.
Not established means unresolved in our source review, not “collects nothing.” Volume counters do not, on their own, identify websites visited. Download the logging fields and source locators.
Know what each field means.
- Browsing & traffic
- Websites, destinations and communication content.
- DNS queries
- Domain lookups handled by the VPN; custom DNS has separate policies.
- IP addresses
- Source and VPN IP records; account and add-on exceptions are separate.
- Session records
- Connection times, duration and coarse connection events.
- Bandwidth counters
- Amounts transferred; a counter is different from browsing history.
- App diagnostics
- Crash reports, operational metrics and optional analytics.
- Account identity
- Login identifiers, contact details and security records.
- Payment records
- Billing and processor records, which can outlast a subscription.
- Retention & deletion
- The deletion clock differs for each data category.
Temporary does not mean never processed.
A short deletion period still describes data that exists for a time. A support message, account login or payment may also identify you even when the VPN says it retains no browsing history. These paths should be considered separately.
Inspect assessments and their boundaries · Read documented disclosures and incidents