No-Logs Policy
When you use CyberCat, your activity is your business — not ours. We've built our infrastructure so that we technically cannot keep logs, even if compelled to.
What we never collect
The following data is never recorded, stored, or accessible — by us, or anyone else.
The websites you visit, the URLs you load, and the searches you perform are never recorded. We have no idea where you go online.
Every domain name your device looks up passes through our encrypted DNS resolver. None of these lookups are stored or logged.
IP addresses kept for security are deleted after 30 days. They are not tied to your browsing activity.
We don't record when you connect, how long your session lasts, or when you disconnect. There are no session logs.
The content of your data packets is never inspected or stored. We don't track how much data you transfer per session.
We don't maintain a record of which server location you connected to or at what time.
What we do collect — and why
Running an account-based service requires a small amount of data. Here's exactly what it is and why it's necessary.
Used to create your account, send you a receipt, and let you log in. We need this to deliver the service.
Our payment processor (Stripe) handles your card details. We store only a transaction reference — not your card number, expiry, or CVV.
That's it. We are not in the business of selling your data. Our only revenue comes from subscriptions. For the full legal detail, see our Privacy Policy.
Why "no logs" matters
A VPN that logs your activity provides only partial protection. If a provider stores your connection records — even for 24 hours — those records can be subpoenaed by courts, seized by authorities, or exposed in a data breach.
CyberCat's no-logs architecture means there is nothing stored to hand over. If we received a legal order for your VPN activity records, our honest answer would be: those records don't exist.
This is by design. Our servers use RAM-only disk configurations where possible, and no connection metadata is written to persistent storage.
What this means for you
Concrete scenarios — and what happens because we keep no logs.
Government asks for your browsing history
We have nothing to hand over. No data exists.
A hacker breaches our servers
There are no activity logs to steal. Your VPN usage is invisible.
Someone tries to link your IP to your activity
We never stored the connection. The trail ends at our server.
You're streaming from a region-locked library
No record of which servers you used or when. Completely private.
Privacy you can verify
We don't keep activity logs. IP addresses kept for security are deleted after 30 days.