Saltar al contenido
TP VPN

TP VPN · Recursos

What "no activity logs" really means

What TP VPN does not log, which operational records it keeps, their retention periods and the current status of independent review.

Actualizado · Unos 4 min

Este artículo aún no está disponible en español; se muestra la versión en inglés.

TP VPN does not log browsing activity, DNS queries or tunnel destinations. It keeps limited operational records, including connection records for 30 days and session records for 90 days. This is a no-activity-logs policy, not a claim that no account or billing data exists.

Why "no logs" is easy to misread

"Logs" can mean many things: the sites you visited, DNS queries, connection times, byte counts, sign-in records, payment records. Lumping them together and summarising them as "none" is neither accurate nor checkable. We chose not to use an absolute slogan. Instead we publish a table that states how each kind of data is handled, and we keep that table consistent with the database schema.

What we do not log

We do not record your online activity. Specifically:

  • Browsing content. Which sites you visit, what you read, what you send.
  • DNS queries. Which domain names your device resolved.
  • Traffic destinations. Which IP addresses or ports your packets went to.
  • Your real IP address. It is resolved to a country and city in memory at connection time; the raw address is never written to the database, log files or backups.

These exclusions describe our published logging policy. They should be read alongside the operational records and retention limits below, rather than as a promise of complete anonymity.

What we record, and why

RecordFieldsPurposeRetention
Connection logsConnection time, node used, upload and download byte countsBilling, fair-use accounting, troubleshooting30 days
Session recordsSession start and end, device identifier, nodeDevice limits, troubleshooting90 days
Aggregated traffic statisticsByte totals per period, without per-connection detailCapacity planning13 months
Orders and paymentsOrder number, amount, payment method, timeTax and audit requirements7 years
Support ticketsThe descriptions and replies you exchange with usProviding support24 months after closure
Administrator audit logActions taken in the admin consoleInternal compliance3 years

None of these fields concerns the addresses or content you access. Data is deleted automatically when its retention period ends. The numbers match the Privacy Policy and the Trust Center; any change is announced and reflected in the policy.

How to assess the policy

The Privacy Policy is the source for our collection and retention commitments. The Trust Center provides a shorter explanation of the fields and time limits.

Our data model and internal checks help keep implementation aligned with that policy. A schema check alone does not prove how every deployed system behaves, and it does not replace an independent assessment.

Device keys

The app generates a WireGuard key pair on the device. The private key is kept in the platform's secure storage; registration sends the public key. Replacing a device creates new keys rather than moving the old private key.

What happens with a law-enforcement request

We can only provide data that exists. Because browsing content, DNS queries and destination addresses are never collected, they cannot be looked up or handed over; at most, the metering and billing fields in the table above are available. The handling principles are set out in the Privacy Policy.

Status of independent audits

An independent audit has not yet been carried out. We plan to commission a third party to assess the logging architecture and the apps, and we will publish the full report and its scope in the Trust Center when it is complete. Until then we will not claim, in any form, to have "passed an audit".

Why there is no warrant canary

TP VPN does not publish a warrant canary. Read the current policy, retention table and audit status for the information we publish about our privacy practices.

How you can check

  • Read the Trust Center and compare its retention figures with this article.
  • Read sections 2 and 3 of the Privacy Policy and compare them line by line with this article.
  • Watch the policy version and effective date: material changes are announced at least 30 days in advance.
  • If you find an inconsistency or a security issue, email security@tpvpn.com; we acknowledge within 3 business days.

Further reading

← Volver al centro de recursos