No-logs VPN, RAM-only servers

Connection metadata is the layer that matters. It is the source address the session came from, the timestamp it opened and closed, the server it used and the volume of traffic. This is the layer that links a real person to a session, and it is the layer our servers do not write down: no source IP addresses, no connection timestamps.

DNS is the second layer. Every name your device looks up passes through a resolver, and a resolver that keeps a history has a readable list of what you visited even if nothing else was stored. Traffic content is the third, and it is encrypted end to end by the tunnel, so the server carries it without being able to read it.

The fourth layer is not on the server at all. It is the account: an email address, a payment card, a login history, a support ticket with your name in it. Most providers keep more identity in that layer than they could ever infer from the network layer, which is why we do not have one.

A RAM-only server boots its entire operating system into memory. Nothing is written to a persistent disk in normal operation, so there is no place for a log file to accumulate, no swap file holding fragments of state and nothing to recover from the drive if the machine is taken away powered down. A reboot returns the machine to a blank slate.

That is a real property and it is worth having. It removes the most common failure mode in this industry, which is not a provider lying but a provider forgetting: a debug log left on after an incident, a crash dump, a backup nobody remembered was running.

What it does not do is make a running server blind. While your session is live, that machine is forwarding your packets, and forwarding requires knowing where they came from in order to send the replies back. RAM-only means that state is not recorded, is not durable and does not survive a power cycle. It does not mean the traffic is invisible while it is in flight. Anyone selling RAM-only as "impossible to observe" is overselling it, and you should discount everything else they say by the same amount.

Separately from the network, there is a shop, and the shop has a record. Ours is one order row: which plan you bought, when the order was created, when it expires, the crypto payment reference, and the 8-character magic code that opens the order page. That is the whole customer record.

It contains no name, no email, no password, no card number and no billing address, because none of those fields exist at checkout. There is no account to log into and therefore no login history, no password reset trail and no mailbox tying the subscription to a person. If you type an email anywhere on this site, for a support ticket or a reminder, it exists because you chose to give it.

The one thing we cannot make disappear is the payment itself. A crypto payment goes through a gateway that sees the transaction, and on a transparent chain such as Bitcoin or an ERC-20 stablecoin it is publicly recorded and permanent. Monero is the coin where the payment itself stays private, which is the only reason it keeps coming up on pages like this one.

Without a tunnel, your internet provider or the network you are on sees every destination you connect to. With one, it sees an encrypted connection to a single endpoint and nothing about where that traffic goes afterwards. The destinations become visible to the VPN server instead.

That is a transfer of trust, not the removal of it. The honest question is never "does this make me invisible", it is "which party would I rather could see this, and what does that party keep". Our answer to the second half is: no source addresses and no timestamps, on a machine with no disk to keep them on.

None of it touches the layer above. A site you sign into knows exactly who you are no matter which address you arrive from, a cookie you were already carrying still identifies you, and a browser fingerprint is unchanged by a tunnel. A VPN is a network tool and it fixes network problems.

Buy without an identifier. If a provider never receives an email address, that provider cannot hand one over, cannot leak one in a breach and cannot use it to link two of your purchases. This is the single largest reduction available and it costs you nothing except a credential you now have to store yourself.

Pay in a way that does not carry your identity into the transaction. A card is your legal name and your bank. Coins bought on an exchange that verified your passport carry that verification to the address you send from, on a chain that keeps the hop forever. Monero does not have that property.

Reach the site over Tor if the visit itself matters, including our onion service, so the purchase is not attached to a home address. Then keep the credential offline and keep separate things separate: the strongest configuration any provider can honestly offer you is still undone by signing into your everyday accounts through it.