How we collect, use, and protect your personal information.
ProtonVPN maintains a strict no-logs policy. We do not record, store, or sell: your real IP address, the websites or services you visit, timestamps of your connections, the duration of your sessions, the amount of data you transfer, or any other information that could be used to identify you.
To provide our service, we collect limited account information: your email address (required for account recovery and important service notifications), payment information for paid subscribers (processed securely through payment processors — we never store full card details), and limited anonymized usage statistics used to improve service reliability.
Our server infrastructure uses full-disk encryption and server RAM is wiped on every reboot. This means even if someone physically accessed one of our servers, they would be unable to extract any user data from it. Physical access to hardware would yield no useful information about any user's activity.
Under Swiss law, we are not subject to international surveillance agreements such as the US National Security Letters or EU Data Retention Directives. If we receive a lawful data request from law enforcement, we notify affected users when legally permitted, and can only provide information that we actually possess — which, given our no-logs policy, is minimal.