No Browsing History, Minimal Operational Logs
Kyrio VPN is designed to minimize data collection and keep VPN activity separate from account, billing, and provisioning records wherever practical.
Last Updated: June 13, 2026
Overview
We collect only what is necessary to create VPN accounts, process payment, provision access, and keep the service secure.
What we do not log
- Browsing history tied to VPN usage
- DNS queries
- Traffic contents
- Persistent activity logs about the content of your VPN traffic
What we may store
- Account identifiers such as username and, if provided, email
- Password hashes and recovery key hashes
- Encrypted 2FA secrets and 2FA status
- Subscription tier, device limit, invoice/order/track IDs, payment status, and provisioning metadata
- Limited anti-abuse records such as IP/user-agent-based rate-limit data
- Support messages you send to us
Account security
Kyrio VPN uses generated credentials and recovery-key-based account recovery. Passwords are stored as hashes, not plain text, and 2FA secrets are encrypted at rest after setup is confirmed.
Legal requests
We respond to valid legal requests only for information we actually maintain. Where legally permitted, affected users may be notified.
Third-party services
Payment processors and hosting vendors may process limited information under their own policies. OxaPay may handle VPN payment details, and our VPN infrastructure processes only the data needed to provision your access.
Retention and deletion
We retain account, billing, support, and provisioning records only as long as needed to operate the service, prevent abuse, and meet legal or tax obligations. Anti-abuse rate-limit records expire automatically after a limited period.
Legal review & transparency
We review legal requests before responding and may seek clarification or challenge a request where appropriate and legally permitted.
Transparency statement
As of July 2, 2026, Kyrio VPN does not publish browsing-history, DNS, or traffic-content logs. Only the minimum operational records needed to keep the service running are retained.