I've been using this service for several years and just paid my invoice for this year.
I can vouch for support being very quick to provide assistance.
Deal is not as good as two years ago but the prices have gone up a bit. I was unable to find a better discount right now, sorry!
Use the code at checkout to get a recurring 20% discount. Be sure to remove the automatic 10% discount code at checkout.
Mod: Affiliate link removed, guidelines
Some session data is tracked for 24hrs and then deleted. See below.
Seems reasonable to me.
Do you log/monitor my activity? What logs do you keep on servers?
No, we do not log/monitor any kind of user activity such as visited web-sites, emails, files transferred, instant messages, DNS queries etc.
We do, however, keep some connection logs (to our VPN service) for security and support purposes. These are kept on a separate, encrypted server (located in an undisclosed location) and are automatically erased on a daily basis. We don't keep any logs on servers, not even common Linux daemon logs.
Keeping these logs also help us in identifying potential attacks against our service, such as brute-force and even some MiTM attack vectors.
What exactly does "connection logs" mean?
When you connect to a VPN server, the server (VPN daemon) will log your real IP address, connection start/end time, and total traffic transferred during the session (e.g. 100MB, 2GB etc). These connection logs with your IP address are generated by the VPN server/daemon and are stored for one day. All logs on this server are permanently deleted on a daily basis running a cron job. We do not log or store any sensitive data such as what you actually transfer during the session.
Some other VPN providers do not log anything. Not even the connection start/end time.
Some of them probably don’t, but we seriously doubt that all of them live up to their claims.
There is simply no way to prove a provider’s claims, so it’s really a matter of trust between the user and the provider. VPN servers/daemons log such data by default as they are designed to do so. In most cases, the complete disabling of session logging capabilities requires source code modifications. We have solid reasons to believe that many of them have implemented a default/out-of-the-box VPN solution, with no source code modifications. Moreover, we use the connection logs for security purposes, such as detecting brute-force attempts and several other types of attacks, so we believe that the way we handle the connection logs is a positive security feature.
They keep logs?