The Snooper’s Charter

Your ISP keeps a 12-month log of every site you visit.
By law.

Under the Investigatory Powers Act 2016, BT, Sky and Virgin Media must retain a year of your browsing. Police, GCHQ, and in some cases local councils can request these records — sometimes without prior judicial review. Nexun makes your ISP see nothing, and we don’t have it either.

No cardNo emailNo accountStop in one tap
isp-icr-feed.log
Live
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:--
--:--:-- UK · retained 12 months · 48 authorities can requestIPA 2016
The law most people forgot about

The Snooper’s Charter — meet it.

The Investigatory Powers Act 2016 requires every UK ISP to retain 12 months of “internet connection records” for every customer. That is: a full list of every website you visited, every day, for a year.

These records can be requested by 48 separate UK authorities — not just MI5 and the police, but also HMRC, the Food Standards Agency, the Gambling Commission, local councils, and a long list of regulators. The 2018 amendments require judicial sign-off for some of them; many access routes still don’t.

You did not opt into this. Your ISP isn’t allowed to opt out. A VPN is the only consumer-grade way to step out of the logging.

48 authorities can request
Not just MI5 — also HMRC, the Food Standards Agency, the Gambling Commission, local councils, and a long list of regulators.
12 months minimum
Every IP, every domain, every connection event — kept by your ISP for a year by default. Often longer in practice.
No warrant for most types
Police can request a person’s internet connection records under a senior officer’s authorisation. Judicial oversight is selective, not universal.
A look behind the curtain

This is what your ISP has on you right now.

A simplified version of what an “Internet Connection Record” looks like inside your ISP’s mandated retention store. With Nexun, the picture changes — completely.

Without Nexun
/var/log/isp/icr_84273.log
Mon 09:14:32  85.187.218.32 → barclays.co.uk           HTTPS
Mon 09:14:45  85.187.218.32 → boots.com                HTTPS
Mon 09:15:12  85.187.218.32 → reddit.com/r/depression  HTTPS
Mon 09:16:33  85.187.218.32 → nhs.uk/conditions/ibs    HTTPS
Mon 09:18:08  85.187.218.32 → grindr.com               HTTPS
Mon 09:22:51  85.187.218.32 → moneysavingexpert.com    HTTPS
Mon 09:24:17  85.187.218.32 → propertypal.com          HTTPS
Mon 09:31:42  85.187.218.32 → debtline.org             HTTPS
Mon 09:47:19  85.187.218.32 → ashleymadison.com        HTTPS
Mon 09:52:08  85.187.218.32 → samaritans.org           HTTPS
[ entries continue for 12 months ]
Retained for 12 months · accessible by 48 UK authoritiesIPA 2016 §87
With Nexun
/var/log/isp/icr_84273.log
Mon 09:14:32  85.187.218.32 → nexun.io                 HTTPS
Mon 09:14:45  85.187.218.32 → nexun.io                 HTTPS
Mon 09:15:12  85.187.218.32 → nexun.io                 HTTPS
Mon 09:16:33  85.187.218.32 → nexun.io                 HTTPS
Mon 09:18:08  85.187.218.32 → nexun.io                 HTTPS
Mon 09:22:51  85.187.218.32 → nexun.io                 HTTPS
Mon 09:24:17  85.187.218.32 → nexun.io                 HTTPS
Mon 09:31:42  85.187.218.32 → nexun.io                 HTTPS
Mon 09:47:19  85.187.218.32 → nexun.io                 HTTPS
Mon 09:52:08  85.187.218.32 → nexun.io                 HTTPS
[ every line: just one server, all day, every day ]
Still retained — but useless. One destination only.100% encrypted
And what Nexun keeps about your browsing
nexun-server:/var/log/activity.log
(empty — by architecture, not by promise)
What Nexun does

Three things, done properly.

01

Your ISP sees only Nexun

Every site request travels inside an encrypted WireGuard tunnel. BT/Sky/Virgin Media see one connection — to our server. They do not see what you load through it.

  • WireGuard 256-bit encryption
  • DNS resolved inside the tunnel
  • No "visited sites" list in the ICR they hold
  • Same browsing speed, sub-30ms overhead
02

And we don’t keep it either

Most VPNs claim "no logs". We make it architectural. Connection logs live on YOUR device, encrypted, never sent to our servers. If we receive a UK data request, we have nothing to hand over.

  • Privacy Logging™ — logs on your device
  • Server-side: stateless nodes, reboot wipes everything
  • Warrant canary refreshed quarterly
  • 0 government data requests, ever
03

Outside UK jurisdiction

A UK-based VPN is subject to the same retention law it would be helping you avoid — awkward at best. We operate from outside the UK, outside the 5-Eyes alliance, and with no parent company that can be pressured into changing that.

  • Not subject to UK IPA retention rules
  • Outside 5-Eyes / 14-Eyes alliances
  • No parent company, no investor data access
  • Independent EU privacy regulator oversight
No wizard. No setup. No account.

You’re protected in under 60 seconds.

Install, tap, done. No certificates, no config files, no creating an account before you can even try it.

Step 01

Install

~10 seconds

Download Nexun from the App Store or Google Play. ~12 MB. No account, no email — yet.

Step 02

Tap Connect

0.3 seconds

Open the app and tap the big button. WireGuard handshake in milliseconds. No country selection needed — we pick the fastest server.

Step 03

Browse normally

as fast as before

Your ISP now sees only “nexun.io, nexun.io, nexun.io” in its log. Sites load at full speed. Banking apps still work.

Step 04

Stop or keep

one tap

After 24 hours the free session ends. To keep going, subscribe inside the app (from £1.69/m). To leave, just stop. No contract, no fee.

Try it now — free for 24 hours.

No card. No email. No account. Tap install on the App Store or Play Store and you’re connected before the kettle boils.

Get Nexun free →
No cardNo emailStop in 1 tap
The Nexun difference

Privacy Logging

Every other VPN either keeps logs (bad) or claims they don’t (unverifiable). Nexun does neither. Connection logs are stored on YOUR device, encrypted, never sent anywhere unless you choose to share them.

Logs live on YOUR device
Encrypted in the app. Only you have the key. We never see them.
Servers are stateless
A node reboot wipes every tunnel and every peer. There is nothing historical to subpoena.
No DNS history written
DNS resolution happens in memory, never persisted to disk. By design.
You can inspect your own activity
Open the in-app log viewer. Export, delete, or share — your call.
Your device
encrypted_log.json
NEVER
Nexun servers
(empty)
Often overlooked

Where your VPN is based actually matters.

Privacy law varies wildly by country. The jurisdiction your VPN provider operates under decides what they’re legally allowed to keep, and who can quietly demand it.

Mandatory data retention
Some countries force VPN providers to keep connection logs — defeats the point.
5-Eyes / 14-Eyes alliances
Intelligence-sharing means data quietly crosses borders without you knowing.
VC or corporate ownership
Investors with access to user data eventually face pressure to monetise it.
Hidden parent companies
A "Panama" VPN owned by a holding company in another country is a paper-thin shield.

Nexun is an independent EU company, owned by its founders, with no mandatory retention obligation, no investor data access, and no parent company anywhere. The UK Investigatory Powers Act doesn’t apply to us — and we wrote our infrastructure so we couldn’t comply with it anyway.

🌍 17 cities · 24/7 live

Servers where you need them.

Hover any city — see live server status.

🇫🇮
Helsinki1 online
🇺🇸
Miami2 online
🇨🇾
Larnaca1 online
🇬🇧
London1 online
🇳🇱
Amsterdam2 online
🇩🇪
Nuremberg2 online
🇨🇭
Zürich1 online
🇫🇷
Paris1 online
🇧🇪
Brussels1 online
🇸🇬
Singapore1 online
🇸🇪
Stockholm1 online
🇹🇷
Istanbul1 online
🇦🇹
Vienna1 online
🇨🇦
Montreal1 online
🇯🇵
Tokyo1 online
🇮🇹
Milan1 online
🇪🇸
Seville1 online
17 active regions
Flagship
Available
Verifiable, not promised

The honest numbers.

Every figure here is checkable in our public transparency report or warrant canary.

21
server locations · 17 countries
live count from our network
0
government data requests, ever
warrant canary refreshed quarterly
days we retain your browsing
because zero, technically
30
days money-back guarantee
no questions, no forms
What we keep · what we don’t

Most VPNs say “no logs”. Then read the small print.

Server logs
Truncated at write-time — zero historical retention
DNS queries
Resolved in-memory only, never written to disk
Connection metadata
Stored on YOUR device, encrypted in-app
Account data
Email + payment record · UK-GDPR processed
Warrant canary
Signed quarterly · last refresh 15 Apr 2026

See our public transparency report and Privacy Logging policy.

Pricing

Transparent pricing, no surprises

Choose the plan that fits you. No hidden costs, cancel anytime.

Budget

For yourself — full protection on 2 devices

£2.09/ month

Charged in EUR — your bank handles the conversion€ 2,49

  • 2 devices
  • 1 accounts
  • Privacy Logging
  • WireGuard encryption
  • All server locations
  • 256-bit encryption
  • Priority support

Duo

For you and your partner — share on 5 devices

£4.19/ month

Charged in EUR — your bank handles the conversion€ 4,99

  • 5 devices
  • 2 accounts
  • Privacy Logging
  • WireGuard encryption
  • All server locations
  • 256-bit encryption
  • Priority support
Most popular

Pro

For the whole household — 10 devices, 4 accounts

£7.55/ month

Charged in EUR — your bank handles the conversion€ 8,99

  • 10 devices
  • 4 accounts
  • Privacy Logging
  • WireGuard encryption
  • All server locations
  • 256-bit encryption
  • Priority support
Best value

Family

For the whole family — 20 devices, 6 accounts

£10.91/ month

Charged in EUR — your bank handles the conversion€ 12,99

  • 20 devices
  • 6 accounts
  • Privacy Logging
  • WireGuard encryption
  • All server locations
  • 256-bit encryption
  • Priority support

All prices include VAT. Cancel anytime, no long-term contracts.

Questions worth asking

The honest FAQ.

Is the Snooper’s Charter really still in force?

Yes. The Investigatory Powers Act 2016 has been in force since November 2016. The 2018 amendments (after a CJEU ruling found parts unlawful) added judicial oversight for some access routes — but the underlying 12-month retention obligation on UK ISPs is still active and applies to BT, Sky, Virgin Media and all major networks.

Doesn’t HTTPS protect me already?

HTTPS encrypts the content of your traffic, so your ISP can’t see the exact page text. They can still see which domain you connected to, when, and how long for — that’s the "internet connection record" the law requires. A VPN hides the domain too: your ISP sees only the Nexun server.

Is using a VPN against the law in the UK?

No. VPNs are completely legal in the UK and the OSA / IPA 2016 don’t change that. Plenty of legitimate reasons: remote work, public-WiFi safety, abroad streaming, or simply not wanting your ISP to keep a year of your browsing.

Why not just use a UK-based VPN?

A UK-based VPN is subject to the same Investigatory Powers Act it would be helping you avoid — at best uncomfortable, at worst defeating the point. Nexun operates from outside the UK, which means the IPA retention rules simply don’t apply to us. The choice of jurisdiction is one of the few VPN claims you can verify in public company registers.

Do you actually keep zero logs?

We keep zero activity logs. The only things on our servers are: your email (login + receipts), your subscription status, and your WireGuard public key (so the right tunnel reaches the right device). No URLs, no DNS, no timestamps, no traffic content. Our warrant canary — signed 15 April 2026 — confirms zero government data requests received to date.

How does the 24-hour free trial work?

No card up front. Install the app, tap Connect — 24 hours of full VPN, no email, no account, no payment. Because we never collect your card details, there is nothing to charge when the trial ends. To continue, subscribe via App Store or Play Store (from £1.69/month). Create a free account before the 24 hours expire and the trial extends to 5 days.

The point

You’re not a criminal.

You’re a billpayer.

Stop being logged like one.

Try Nexun for 24 hours.
No card. No email. No catch.

Install, tap Connect, you’re elsewhere — for 24 hours, free. From £1.69/month only if you keep it.

30-day money-backCancel any time, in-appUK-GDPR · ICO-awareRegistered in NL
Try free for 24 hours →