VPN Logging Explained

VPN logging policies determine what data providers store about your activity. Some keep connection logs, others track nothing at all. This guide explains the different logging types, which VPNs are truly no-log, and how to verify claims yourself.

Types of VPN logs

VPNs may store different data categories, with varying privacy implications:

Connection logs (metadata)

  • Timestamps of when you connected/disconnected
  • Server locations used
  • Bandwidth consumed
  • Often retained for troubleshooting or abuse prevention

Activity logs (danger zone)

  • Websites visited or files downloaded
  • DNS queries (what you looked up)
  • IP addresses assigned to you
  • Rare in reputable VPNs due to privacy risks

Some providers like ExpressVPN and Proton VPN undergo independent audits to prove they don't store these logs.

Verified no-log VPN providers

ProviderLogging policyAudit statusTry
ExpressVPNNo activity or connection logsMultiple audits (latest 2022)Get ExpressVPN
NordVPNNo logs, RAM-only serversAudited by PwC (2022)Get NordVPN
Proton VPNStrict Swiss privacy lawsOpen-source apps + auditsGet Proton VPN

For budget options, Surfshark also maintains a no-log policy with regular transparency reports.

How to verify no-log claims

  1. Check jurisdiction – Avoid countries with data retention laws (Five Eyes alliance)
  2. Read privacy policy – Look for specifics on what's stored and for how long
  3. Find audit reports – Independent firms like Cure53 or PwC verify claims
  4. Test with your own traffic – Some VPNs offer IP/DNS leak tests

When in doubt, choose providers with a proven track record like those in our best VPN guide.

VPN logging FAQs

Can free VPNs be no-log?

Extremely rare. Free providers often log and sell user data to cover costs. Exceptions like Proton VPN's free tier limit speeds instead.

Do VPNs log torrenting?

Reputable no-log VPNs won't track P2P activity. Some providers like NordVPN even optimize servers for torrenting.

How long do VPNs keep logs?

True no-log services delete data when your session ends. Others may store connection metadata for days to months.

Can police get VPN logs?

Only if logs exist. Audited no-log VPNs have nothing to provide, as seen in real-world cases.

Stay private with a verified no-log VPN

For ironclad privacy, we recommend ExpressVPN – independently audited, based in the British Virgin Islands, and trusted by security experts worldwide.

Get ExpressVPN