Privacy Commitment
We Don't Log.Full Stop.
No browsing history, no connection timestamps, no IP addresses, no DNS queries. Nothing to hand over because there's nothing kept in the first place — verified by an independent third-party audit, not just a promise on this page.
Independently Audited
RAM-only servers
Zero activity logs
Not just a claim
Independently Verified, Not Self-Certified
Anyone can put "no-logs" on a homepage. We had an independent security firm examine our actual server configuration and infrastructure to confirm that no activity logs are technically possible to generate, let alone stored — and we publish the findings rather than asking you to take our word for it.
View the audit report
The policy, plainly
What We Never Log
Not "we don't look at it" — technically not generated or retained in the first place.
Browsing Activity
Which sites you visit, what you download, or what you do while connected — none of it is recorded.
Your Real IP Address
Not stored against your account, not written to any log file, not retained after your session ends.
Connection timestamps
When you connect, when you disconnect, and for how long — none of it is kept.
DNS queries
Every domain lookup runs through our own private DNS resolvers and is discarded immediately, not logged elsewhere.
Per-Session Bandwidth
How much data you used in a given session is never tied back to your account or identity.
Traffic Content
The actual data passing through the tunnel is never inspected, copied, or stored — encrypted end-to-end, seen by no one.
Full transparency
What We Do Collect — and Why
"No-logs" doesn't mean no account at all. Here's the short, honest list of what running a subscription service actually requires.
Account basics
An email address
Needed so you can sign in and recover your account — never linked to what you do once connected.
Billing
Payment, via a processor
Handled by our payment provider, not stored on our own servers, and never connected to your VPN sessions.
Capacity planning
Aggregate, anonymous load
Total traffic per server (not per user) helps us know when to add capacity — no identity attached, ever.
Infrastructure
Every Server Runs on RAM, Not Disk
Our entire network runs on diskless, RAM-only servers. The operating system and configuration load into memory on boot and nothing is ever written to a hard drive — so there's no log file to secure, subpoena, or accidentally leave behind. A reboot wipes a server back to a clean state in minutes.
If a request ever comes
What Happens When Authorities Ask for Data?
We do receive occasional legal requests, and we comply with valid ones just as any company must. The difference is what happens next: because activity logs are never generated, there's nothing to hand over beyond the minimal account details listed above. A request for browsing history or connection logs simply can't be fulfilled — the data doesn't exist to give.
Read the full legal terms →
Proof, not promises
How We Back Up the No-Logs Claim
Independent audits
A third-party security firm reviews our infrastructure and publishes its findings.
RAM-Only Server Fleet
Diskless by design, not just by policy — there's no log file to write in the first place.
Plain-Language Policy
This page says exactly what's collected and what isn't — no vague legal hedging.
Minimal Data by Default
Only what's required to run an account and process billing — nothing tied to your activity.
Private DNS Resolvers
Every DNS lookup stays inside our own infrastructure instead of leaking to a third party.
Regularly Re-Verified
Audits aren't a one-time press release — the infrastructure gets checked again as it evolves.
Read the audit yourself before you take our word for it
The full third-party report covers exactly what was tested and what was found — no summary, no spin.
Frequently Asked Questions About Our No-Logs Policy
No activity logs of any kind — no browsing history, connection timestamps, IP addresses, DNS queries, or bandwidth tied to your identity. The only data we hold is the minimal account and billing information needed to run the service, covered above.
We comply with valid legal requests, but since activity logs are never generated, there's nothing to disclose beyond the minimal account details we hold. A request for your browsing or connection history can't be fulfilled because that data simply doesn't exist.
An independent security firm audits our server configuration and infrastructure directly, rather than relying on our own word. The publishedaudit reportcovers what was tested and what was found.
Yes, an email is required to create and recover your account. It's used only for account access and is never linked to what you do while connected.
No. Billing is handled by our payment processor and kept entirely separate from server-side connection data — there's no shared record linking a payment to a browsing session.
A written policy is only as good as the infrastructure behind it. Running entirely in memory, with nothing written to disk, makes activity logging technically impractical rather than just contractually promised.
Browse With Nothing to Find
An encrypted connection backed by a no-logs policy you can actually verify, not just read.
Download ASTRO VPNIndependently audited · RAM-only servers · 35 locations worldwide