Your IP: 216.73.216.149 Your ISP: Amazon.com, Inc. Your Status: Protected
Lux VPN is run by a team with more than 25 years of hands-on experience in networking, internet infrastructure, and online privacy. That background goes back long before VPNs were a mainstream product, running hosting infrastructure, managing IP networks, and working directly with the technical side of how data actually moves across the internet. We built Lux VPN because we understand exactly what a VPN is protecting you from, and exactly how easily that protection gets watered down by companies chasing growth over privacy. Our focus stays narrow on purpose: give people a straightforward way to stop their ISP, their network, and anyone watching from seeing what they do online.
Many VPN companies are incorporated in the US or the EU. In those countries a provider can be compelled, by court order or government request, to hand over customer data or start retaining it, and many of those countries belong to intelligence-sharing alliances like Five Eyes, Nine Eyes, and Fourteen Eyes, agreements where member countries' intelligence services share surveillance data with each other. A privacy policy doesn't override any of that. We made a different choice on purpose. Lux VPN is incorporated in the Seychelles, which is outside those alliances and has no law requiring us to retain customer data in the first place. Our banking is in Hong Kong, which is part of keeping the business outside the Five, Nine, and Fourteen Eyes countries.
We're also independently owned, which is rarer in this industry than most people realize. A lot of the "different" VPN brands you see reviewed side by side are actually owned by the same parent company. ExpressVPN, CyberGhost, and Private Internet Access are all owned by Kape Technologies, alongside several other VPN brands. We don't answer to a private equity firm, a holding company, or a board optimizing for an exit. Lux VPN answers to the people paying for it.
None of these are accidents. Where the business is registered, where it banks, and where the data lives were all chosen to keep it outside the Five, Nine, and Fourteen Eyes countries and away from laws that would require us to log what you do. That's a different promise than "we have a privacy policy." It's a structural one.
Information we retain
Lux VPN accounts are anonymous. We don't ask for your name, and an email address is optional. Here's what we keep about your account:
Your account number, and your PIN stored only as a one-way hash that we can't read.
A recovery email, only if you add one. It's used to help you back into your account and for account and billing emails, and you can remove it at any time.
Your plans and payments: the plan, payment method, amount, dates and the payment provider's order reference. Card numbers and billing details go straight to our payment processor and never touch our systems.
Your VPN username and password, so you can see them in your account.
Support tickets you open in your account, and our replies.
Notes we add to your account when we help you, for example that we issued a refund.
IP addresses from sign-in and signup attempts, kept for 2 days to stop password guessing.
Our website also keeps standard web server logs for a short time, and contact form messages in our support mailbox. Details in our Privacy Policy.
That's the full list. We don't log VPN connections, browsing activity, DNS queries or session data; that's our no VPN logs policy, and we don't collect anything else "just in case" it might be useful someday. We also won't pretend to retain nothing at all, since a company promising zero data of any kind is either lying or doesn't understand its own accounting requirements. A minimal footprint is honest. A claim of none at all usually isn't.
Retention & Backups
Your account stays until you close it, so you can renew whenever you like. When you close it in Account & Security, your VPN login is deleted and your PIN and recovery details are erased right away. Your plans, orders and support tickets are deleted 180 days later. Payment records are kept for as long as tax and accounting law requires.
Our billing system, including the account data itself and every backup of it, is hosted in Iceland. Iceland has strong data protection law, generally requires legal process before data is handed over, and isn't part of the Five Eyes, Nine Eyes, or Fourteen Eyes intelligence-sharing alliances. It's the same reasoning behind our Seychelles incorporation and Hong Kong banking: keeping each part of the business outside the Five, Nine, and Fourteen Eyes countries.
We run full billing and administrative backups weekly, keeping a rolling four weeks of backups at a time. Each week's backup replaces the one from four weeks prior. This means a record purged from our active systems can still exist in a backup for up to four weeks afterward, until that backup cycle rolls it out.
Full details are in our Privacy Policy.
In July 2026, independent assessor Digital Safety completed a review of Lux VPN's privacy and logging practices. The assessment included customer, billing, support, backup, and hosting systems.
Digital Safety did not identify evidence that Lux VPN retained traffic contents or destinations, DNS queries, VPN connection source IP addresses, or assigned VPN IP addresses. No exceptions were identified during the assessment.
Lux VPN retains limited account, payment-reference, and support information for account administration, billing reconciliation, and customer support. Full details, including retention periods, backup practices, scope, methodology, and limitations, are provided in the complete independent assessment report.
No vague promises. A jurisdiction with no law requiring us to log you, a data list short enough to read in one sitting, and an independent assessment you can read for yourself.
Login