Dated 2026-11-06 · re-issued periodically
As of the date above, KAPO VPN has never received a court order, subpoena, national security letter, or other law-enforcement demand compelling us to identify a user, hand over records, or decrypt traffic.
If we did receive such a demand, what we hold is what our Privacy Policy lists, and that is what we could be made to hand over. We do not ask for a name or email to create an account: an account is a number. Payment is in crypto through a payment processor, which receives your account number and can link a payment to it. We do not set out to log the websites you visit or the content of your traffic, but we do keep some records. They include when an account was created and when each device was first seen and enrolled, and each device's public key, tunnel IP and route, which are also stored on the VPN servers' disks. Until a server reboots or the device is removed, its memory also holds the last IP address each device connected from, the time of its last handshake and how much data it has sent and received. With ad blocking on, the filter keeps one day of statistics, which may include site names. Some checks of our servers are not finished yet. What KAPO VPN does and doesn't do lists them.
This wording replaces the version dated 2026-09-05. We changed it because the earlier version claimed more than we can back up about what we keep. No demand or request of any kind caused this change.
This statement will be re-issued on a regular basis with a new date. If it stops being renewed, is not renewed within a reasonable window, or reappears with materially different wording, treat that as a signal worth asking us about publicly - not a false-positive to ignore.