Who you’re trusting with your traffic, what we can technically see, what we actually keep, and how we back it up.
404 VPN started with a simple idea: a secure connection shouldn’t require technical know-how.
We’re building a VPN that makes sense to regular people: you’re connected in a couple of minutes, it runs on the modern VLESS protocol, and we’re open about data. The free plan gives you 2 GB a day with no card, and there are apps for Android and Mac. We don’t promise “total anonymity”: no VPN can honestly guarantee that.
404 VPN is operated by:
404 VPN is built by a small team that looks after the product, the apps and the servers.
Runs the company
Service architecture and security
The apps and how people use them
VPN servers and the network
We don’t just say “no logs.” Here’s what that means at 404 VPN, item by item.
| Data | Kept? | Why and for how long |
|---|---|---|
| What you do through the VPN | ||
| Browsing history | No | Our servers don’t record which sites you visit |
| DNS queries | No | Not recorded |
| Traffic content | No | Encrypted in transit and never stored |
| Your account | ||
| Email or Telegram ID, password hash | Yes | So you can sign in, for as long as the account exists |
| Plan, expiration date, payments | Yes | Amount, plan and payment status, for billing and renewals |
| Traffic volume and last connection time | Yes | To count the 2 GB daily limit and plan limits |
| The browser or app you signed in from | Yes | For the list of sign-ins to your account |
| Support requests | Yes | Your message and our reply, otherwise we can’t answer |
| Technical data | ||
| Technical data needed to run and protect the service | Limited | Server logs kept for a limited time, with no browsing history |
| IP address at sign-up | Hash only | A one-way hash that protects the referral program from abuse |
| Which site pages get opened | Yes | Google Analytics 4, _ga cookie |
Seven locations. The list comes from the same source as server selection in your account.
No independent audit has been done yet.
Our first external security audit is planned for Q4 2026. We’ll publish the results here, whatever they turn up.
No requests so far. When they come in, we’ll publish everything we’re able to disclose here: how many requests arrived, what data they asked for and what we handed over.
We don’t keep browsing history, so we can’t hand it over. We do have account data, such as your email or Telegram ID, plan and payments, and we’ll report requests for that here too.
Email support@404vpn.io with “Vulnerability” in the subject line. We welcome responsible disclosure and won’t pursue researchers who report issues in good faith and follow the rules below.
This contact is also published in security.txt
We don’t sell the myth of “total anonymity.”
404 VPN hides your real IP address from the sites you visit and encrypts the connection between your device and our server. But a VPN doesn’t protect against everything: cookies, browser fingerprinting, malware and signing in to your personal accounts can still identify you.
For partnerships and press inquiries, write to hello@404vpn.io. For technical support, use the form below and your message will go straight to our team.
Trust shouldn’t rest on words alone.
That’s why we show who runs 404 VPN, what data we keep, where our infrastructure runs, and what our VPN can and can’t do.
2 GB a day, no card