TP VPN · Resources
What "no activity logs" really means
What TP VPN does not log, which operational records it keeps, their retention periods and the current status of independent review.
Updated · About 4 min
TP VPN does not log browsing activity, DNS queries or tunnel destinations. It keeps limited operational records, including connection records for 30 days and session records for 90 days. This is a no-activity-logs policy, not a claim that no account or billing data exists.
Why "no logs" is easy to misread
"Logs" can mean many things: the sites you visited, DNS queries, connection times, byte counts, sign-in records, payment records. Lumping them together and summarising them as "none" is neither accurate nor checkable. We chose not to use an absolute slogan. Instead we publish a table that states how each kind of data is handled, and we keep that table consistent with the database schema.
What we do not log
We do not record your online activity. Specifically:
- Browsing content. Which sites you visit, what you read, what you send.
- DNS queries. Which domain names your device resolved.
- Traffic destinations. Which IP addresses or ports your packets went to.
- Your real IP address. It is resolved to a country and city in memory at connection time; the raw address is never written to the database, log files or backups.
These exclusions describe our published logging policy. They should be read alongside the operational records and retention limits below, rather than as a promise of complete anonymity.
What we record, and why
| Record | Fields | Purpose | Retention |
|---|---|---|---|
| Connection logs | Connection time, node used, upload and download byte counts | Billing, fair-use accounting, troubleshooting | 30 days |
| Session records | Session start and end, device identifier, node | Device limits, troubleshooting | 90 days |
| Aggregated traffic statistics | Byte totals per period, without per-connection detail | Capacity planning | 13 months |
| Orders and payments | Order number, amount, payment method, time | Tax and audit requirements | 7 years |
| Support tickets | The descriptions and replies you exchange with us | Providing support | 24 months after closure |
| Administrator audit log | Actions taken in the admin console | Internal compliance | 3 years |
None of these fields concerns the addresses or content you access. Data is deleted automatically when its retention period ends. The numbers match the Privacy Policy and the Trust Center; any change is announced and reflected in the policy.
How to assess the policy
The Privacy Policy is the source for our collection and retention commitments. The Trust Center provides a shorter explanation of the fields and time limits.
Our data model and internal checks help keep implementation aligned with that policy. A schema check alone does not prove how every deployed system behaves, and it does not replace an independent assessment.
Device keys
The app generates a WireGuard key pair on the device. The private key is kept in the platform's secure storage; registration sends the public key. Replacing a device creates new keys rather than moving the old private key.
What happens with a law-enforcement request
We can only provide data that exists. Because browsing content, DNS queries and destination addresses are never collected, they cannot be looked up or handed over; at most, the metering and billing fields in the table above are available. The handling principles are set out in the Privacy Policy.
Status of independent audits
An independent audit has not yet been carried out. We plan to commission a third party to assess the logging architecture and the apps, and we will publish the full report and its scope in the Trust Center when it is complete. Until then we will not claim, in any form, to have "passed an audit".
Why there is no warrant canary
TP VPN does not publish a warrant canary. Read the current policy, retention table and audit status for the information we publish about our privacy practices.
How you can check
- Read the Trust Center and compare its retention figures with this article.
- Read sections 2 and 3 of the Privacy Policy and compare them line by line with this article.
- Watch the policy version and effective date: material changes are announced at least 30 days in advance.
- If you find an inconsistency or a security issue, email security@tpvpn.com; we acknowledge within 3 business days.
Further reading
- The No activity logs feature page
- What is a VPN
- Understanding the WireGuard protocol
- Account migration and sign-in methods, including account deletion