What we record, and what we don't
Vague promises aren't enough. Here is precisely what our systems store.
Last updated 5 November 2026
We never record
- The websites, apps or services you use
- DNS requests
- The contents of your traffic
We store
- Your email address and a one-way hash of your password
- Your plan, its dates and limits, and payment records
- Your devices: name, type and public key
- A one-way scrambled code from your Android phone, so that reinstalling the app keeps your device and its limits
- Hourly totals of data used per device and location
- Connection records: your account or free device, the IP address you connected from, its approximate city and country, the server, and the connection times
How our servers handle your connection
Our VPN servers have access logging switched off, so the sites you visit are not recorded. Every few seconds, each server reports to our control system:
- which devices are connected and the IP address each one connects from,
- for each device, a running total of bytes sent and received, and
- the time of its last successful connection.
We use this for data allowances, your usage chart, abuse prevention and running the network. We work out an approximate city and country from your IP address on our own servers; your address isn't sent to any outside service for this.
Connection quality
The Android app occasionally tests how quickly each of our servers answers from your network and reports the result. We keep only daily totals for each country and server, such as "from this country, this server answered 90% of tests in 80 ms". These totals aren't linked to your account, device or IP address, and they're deleted after 120 days.
Connection records
Connection records link your account, or your free device, to an IP address, an approximate location and connection times. IP addresses are encrypted when stored, only our administrators can view them, and records are deleted automatically after 90 days by default. If you use the free tier, you have no account, but your device's connection records are kept the same way.
Why we keep data totals
Some plans include a data allowance, and you can see your own usage over time. To make that work we keep hourly totals, such as "device A used 1.2 GB in Germany between 14:00 and 15:00". Totals are kept for a limited time (currently up to 400 days) and then deleted automatically.
Our websites
Our web server doesn't keep access logs. Cloudflare carries traffic to our websites. We use no analytics, advertising or tracking scripts. The only cookie we set is the session cookie that keeps you signed in to the hub.
Requests from authorities
We can only provide what we have, but that includes the connection records above. If we receive a valid legal request, those records could show that an account connected from an IP address at a given time. We don't hold records of the sites you visited or what you did online.
Questions
Write to support@padvpn.com. See also our full privacy policy.