Skip to main content
Create account

What we store, and what we never log

This page lists each piece of data SoVPN keeps about your account, then the activity we never record. Support messages are stored as well, so we can answer them. Further down: how your connection is protected, and how to keep your account token safe.

What SoVPN stores

  • Account token hashYour account token is created at sign-up and is the only way to log in. We keep a one-way hash of it and compare against that hash when you log in. No email, name or phone number is asked for.
  • Last 4 characters of the tokenThey help us tell accounts apart, for example when you write to support. Four characters are not enough to log in with.
  • Balance and payment historyEach top-up, purchase and refund is saved with its amount and date. That keeps your balance correct and lets us look into a payment that went wrong.
  • Plan and end dateUsed to check whether your account is on Basic, Plus or Pro, and when the current period runs out.
  • Temporary device markerA connected device takes up one slot, which is how the device limit works. The marker is deleted when the device disconnects.
  • Proxy access detailsGenerated the first time you open the Proxy plans tab: a proxy username and password, plus any allowed IPs you add. The proxy gateway needs them to let you connect.

What SoVPN never logs

  • Websites and apps you use
  • The content of your traffic
  • DNS queries
  • Your real IP address
  • When you connect and disconnect
  • How long you stay connected
Read the privacy policy

Encryption inside the tunnel

While you're connected, everything your device sends travels through an encrypted tunnel to a SoVPN server. Your ISP, or whoever runs the Wi-Fi, can tell a VPN is in use but can't see which pages you open or what you send. OpenVPN and IKEv2 are encrypted with AES-256-GCM, WireGuard with ChaCha20, and it's the same on every plan.

All plans support WireGuard, OpenVPN (UDP and TCP) and IKEv2. WireGuard connects fast and suits most people. OpenVPN TCP helps on networks that block UDP, and IKEv2 copes well when a phone moves between Wi-Fi and mobile data. You can change it in Settings > Connection > Protocol. The protocol affects speed and stability, not what gets logged.

Stopping DNS leaks

To open a website, your device first asks a DNS server where that site lives. If the question goes to your ISP outside the tunnel, your ISP gets a list of the sites you visit, encrypted traffic or not.

While you're connected, SoVPN sends every lookup through the tunnel to its own DNS servers, which don't log queries, and blocks lookups headed anywhere else. It's on by default and needs no setup.

Kill switch

A VPN connection can drop for ordinary reasons: weak signal, a laptop coming out of sleep, a phone switching networks. Without a kill switch, your apps keep going over the regular connection, and your real IP address shows.

With the kill switch on, the internet is cut off until SoVPN reconnects. Turn it on once and leave it on, especially if you often use public Wi-Fi.

  • Windows, macOS, Linux, iOS: Settings > Connection > Kill switch
  • Android: turn on the kill switch in the app, then in Android's VPN settings turn on Always-on VPN and Block connections without VPN for SoVPN

When authorities ask for data

SoVPN complies with the law that applies to it. A valid legal request can only cover data we actually have, which is the account and payment data listed at the top of this page.

We don't record browsing history, DNS queries, real IP addresses or connection times, so there is no such data to give.

Paying with crypto, not cards

You fund a dollar balance with crypto on the PayGate checkout page and buy plans from it. SoVPN doesn't accept cards or PayPal, so card numbers and bank details never reach us.

Our records show the amount, the coin, the date and the plan. Keep in mind that most blockchains are public: anyone who knows your wallet address can see its transfers.

Keeping your token safe

Your account token is the only key to your account. Whoever has it can log in, and there is no email on file, so a lost token can't be reset and we have no way to return the account to you. My info has no option to change the token either.

A few habits help:

  • Save the token as a .txt file or in a password manager the moment you sign up
  • Keep a second copy somewhere other than the device you use most
  • Log out of the dashboard on shared or public computers
  • Don't paste your token into chats, screenshots or support messages

Common questions

Can SoVPN see what I do online?

Your traffic goes through our servers on its way out, but we don't log the sites you visit, what you send, your DNS queries or your connection times. Your activity isn't saved anywhere.

Do you sell or share my data?

No. We don't sell data or pass it to advertisers, and neither the site nor the apps contain ad trackers or third-party analytics. Account data is only provided when the law requires it.

What if I lose my account token?

The account can't be recovered. There's no email to send a reset to and nothing we can use to confirm you own it, so you would need to create a new account. Saving the token right at sign-up prevents this.

How do I report a security problem?

Log in and send it from the Support tab, which you can use even without an active plan. Describe what you found and the steps to reproduce it. We reply in the same tab.

Pick a plan for the devices you use and connect today

Top-ups start at $5, and your first VPN plan is refundable to balance within 7 days.

Create accountSee pricing