Transparency Report
What Nexun stores, what it never touches, and how you can verify it yourself.
What we never log
Browsing history
No URLs, no websites, no visited domains — ever.
DNS queries
DNS resolution happens in memory and is never persisted.
Traffic content
No packet inspection, no logging of what you send or receive.
Your real IP
We don't store the originating IP addresses of connected users.
Session timestamps
No per-connection start/stop logs that could link you to activity.
Destination addresses
We don't record where your traffic exits to.
What we do store
The complete list of data we keep about your account. Nothing else exists.
| What | Why | Retention |
|---|---|---|
| Email address | Account login + receipts | Until account deletion |
| Subscription status | Know which plan you have | Until account deletion |
| WireGuard public key | Route your tunnel to a node | Until device removal |
This list is not marketing — it's mirrored by the weekly infrastructure report, which hashes the live database schema.
Architectural guarantees
These properties aren't promises — they're how the system is built. You can't log what you can't see.
Stateless nodes
VPN nodes hold no persistent state. A reboot wipes every peer, every connection, every tunnel.
Split responsibilities
Accounts live on one server. VPN nodes live on another. Neither side has the other's data.
Silent by design
Nodes emit only health metrics (uptime, peer count) — never traffic, never addresses.
End-to-end crypto
WireGuard handles encryption in the kernel. Keys never leave your device in plaintext.
Infrastructure Report
Cryptographically signed attestation of what we DO and DO NOT log. Includes live count of retained user IPs and their age. Independently verifiable via Ed25519.
Who runs Nexun
Nexun is operated from the Netherlands under Dutch and EU privacy law (GDPR). There is no parent company, no third-party investors with access to user data, and no mandatory data-retention regime we're subject to.
Legal entity: Nexun B.V. — Amsterdam, Netherlands.
Warrant canary
The warrant canary has not been refreshed recently. If this state persists, treat the canary as broken.
Last refreshed: 15 April 2026 (75 {days} days ago)
Third parties
Stripe — Payment processing. Sees email + amount. Never sees VPN activity.
Apple / Google — App store billing. Receives purchase receipts. No access to our systems.
Everything else — No analytics SDKs, no trackers, no ad networks, no data brokers.
Ready when you are
Everything on this page is verifiable. Download Nexun and see for yourself.