Our No-Log Policy
We keep as little as we can to run the service. Here is exactly what we store about you — and what we never collect.
The Short Version
We never record which websites you visit, what you download, or your DNS lookups. Our connection records do not contain your IP address. To run the service we keep a short connection record — when you connected, which server, which protocol and how much data — for up to 180 days, then delete it. If we were ever forced by law to hand something over, that record and your account details are all we would have.
What We Never Collect
Websites you visit, DNS lookups, or the content of your traffic
Messages, files or any data sent through the VPN tunnel
Your real IP address and the VPN address given to you are not stored with your connections. At sign-up and on failed logins we keep only a one-way hash of the address.
No advertising identifiers, no GPS or Wi-Fi location
What We Do Collect
Your email (needed to sign in and for support), an optional name, and your Apple or Google sign-in ID. Kept while your account exists, plus 30 days.
When you connected and disconnected, which server, which protocol, and how much data you used — 180 days, for your data allowance and fixing problems. A random app ID and the app version — 30 days, for the 3-device limit.
App Store purchases are handled by Apple; website orders are paid in crypto through NOWPayments. We never see card numbers. We keep the receipt or order record for 7 years for tax.
A one-way hash of your IP address at sign-up, failed logins and the country you logged in from — 30 to 180 days, to stop account theft and abuse.
When the iPhone or iPad app crashes it sends a technical report to our own server (device model, app version, the error and a picture of the app’s own screen). Kept 90 days.
Kept 2 years after the ticket closes.
Why Our Jurisdiction Matters
CasperVPN is run by App Link s.a.l., a company registered in Lebanon, which is not part of the 5, 9 or 14 Eyes intelligence-sharing groups. We are not aware of any Lebanese law that requires VPN providers to keep activity logs.
Our VPN servers are standard servers with normal disk storage; they do not record the websites you visit or your DNS lookups.
Technical Architecture
How this works in practice:
- → No activity logging: the websites you visit, your DNS lookups and your traffic are not recorded
- → Connection records hold no IP address
- → Data use is counted per account in hourly totals (no IP address), kept 180 days for your data allowance
- → Old records are deleted automatically when their time is up
- → No independent audit has been done yet; when one is, we will publish it here
Questions About Our Privacy Practices?
Read our full Privacy Policy or contact our privacy team directly.
Contact Privacy Team