Who you’re trusting with your traffic, what we can technically see, what we actually keep, and how we back it up.
404 VPN started with a simple idea: a secure connection shouldn’t require technical know-how.
We’re building a VPN that makes sense to regular people: you’re connected in a couple of minutes, it runs on the modern VLESS protocol, and we’re open about data. You can try it free for a day, with no traffic limit and no card, and there are apps for Android, Windows, macOS and Linux. We don’t promise “total anonymity”: no VPN can honestly guarantee that.
We don’t just say “no logs.” Here’s what that means at 404 VPN, item by item.
| Data | Kept? | Why and for how long |
|---|---|---|
| What you do through the VPN | ||
| Browsing history | No | Our servers don’t record which sites you visit |
| DNS queries | No | Not recorded |
| Traffic content | No | Encrypted in transit and never stored |
| Your account | ||
| Email or Telegram ID, password hash | Yes | So you can sign in, for as long as the account exists |
| Plan, expiration date, payments | Yes | Amount, plan and payment status, for billing and renewals |
| Traffic volume and last connection time | Yes | To apply your plan’s limits and the free trial day |
| Devices on your account: an ID, OS and model sent by the VPN app | Yes | To count devices against your plan and give the free trial only once per device |
| The browser or app you signed in from | Yes | For the list of sign-ins to your account |
| Support requests | Yes | Your message and our reply, otherwise we can’t answer |
| Technical data | ||
| Technical data needed to run and protect the service | Limited | Server logs kept for a limited time, with no browsing history |
| IP address at sign-up | Hash only | A one-way hash that protects the referral program from abuse |
| Which site pages get opened | Yes | Google Analytics 4, _ga cookie |
Ten servers in eight countries. The list comes from the same source as server selection in your account.
No independent audit has been done yet.
Our first external security audit is planned for Q4 2026. We’ll publish the results here, whatever they turn up.
No requests so far. When they come in, we’ll publish everything we’re able to disclose here: how many requests arrived, what data they asked for and what we handed over.
We don’t keep browsing history, so we can’t hand it over. We do have account data, such as your email or Telegram ID, plan and payments, and we’ll report requests for that here too.
Email support@404vpn.io with “Vulnerability” in the subject line. We welcome responsible disclosure and won’t pursue researchers who report issues in good faith and follow the rules below.
This contact is also published in security.txt
We don’t sell the myth of “total anonymity.”
404 VPN hides your real IP address from the sites you visit and encrypts the connection between your device and our server. But a VPN doesn’t protect against everything: cookies, browser fingerprinting, malware and signing in to your personal accounts can still identify you.
For partnerships and press inquiries, write to hello@404vpn.io. For technical support, use the form below and your message will go straight to our team.
Trust shouldn’t rest on words alone.
That’s why we show who runs 404 VPN, what data we keep, where our infrastructure runs, and what our VPN can and can’t do.
1 day free, no traffic limit, no card