Your IP: 216.73.217.176 Your ISP: Amazon.com, Inc. Your Status: Protected
Lux VPN is operated by a technology company with more than 25 years of hands-on experience in networking, internet infrastructure, and online privacy. That background goes back long before VPNs were a mainstream product, running hosting infrastructure, managing IP networks, and working directly with the technical side of how data actually moves across the internet. We built Lux VPN because we understand exactly what a VPN is protecting you from, and exactly how easily that protection gets watered down by companies chasing growth over privacy. Our focus stays narrow on purpose: give people a straightforward way to stop their ISP, their network, and anyone watching from seeing what they do online.
Most VPN companies are incorporated in the US or the EU, jurisdictions with mandatory data retention laws and membership in intelligence-sharing alliances like Five Eyes, Nine Eyes, and Fourteen Eyes, agreements where member countries' intelligence services routinely share surveillance data with each other. A VPN incorporated in one of those countries can be legally compelled to log and hand over customer data, no matter what its privacy policy promises. We made a different choice on purpose. Lux VPN is incorporated in the Seychelles, entirely outside those alliances and outside any law requiring us to retain customer data in the first place. Our banking relationships are based in Hong Kong for the same reason: keeping the business itself outside the reach of the surveillance and reporting regimes our customers are trying to avoid.
We're also independently owned, which is rarer in this industry than most people realize. A lot of the "different" VPN brands you see reviewed side by side are actually owned by the same parent company. ExpressVPN, CyberGhost, and Private Internet Access all answer to Kape Technologies, a single UK-based firm running multiple VPN brands as if they were competitors. We don't answer to a private equity firm, a holding company, or a board optimizing for an exit. Lux VPN answers to the people paying for it.
None of these are accidents, and none of them are just for show. Every part of this business, where it's registered, where the money moves, where the data lives, sits somewhere that isn't legally obligated to compromise your privacy on someone else's request. That's a different promise than "we have a privacy policy." It's a structural one.
Information we retain
Here's the complete list. Every item on it exists for one of three reasons: billing you, supporting you, or catching fraud. Nothing else.
Name and email address, used for your account, receipts, and support correspondence.
Credit card transaction ID, a reference to the charge itself, not your card number. Your full billing address and payment details are sent directly to our payment processor and never touch our systems.
Support ticket details, tied to your name and email, so we can actually help you and have a record if you need to follow up.
Nothing else gets kept. We don't log VPN connections, browsing activity, DNS queries, or session data, that's the infrastructure's no-logs policy, and we don't collect anything else "just in case" it might be useful someday. We also won't pretend to retain nothing at all, since a company promising zero data of any kind is either lying or doesn't understand its own accounting requirements. A minimal footprint is honest. A claim of none at all usually isn't.
Retention & Backups
Account data, name, email, transaction ID, and support ticket history, is retained for as long as your account is active, and for 180 days after cancellation. After that 180-day window, the account is purged from our active systems.
Our billing system, including the account data itself and every backup of it, is hosted in Iceland. Iceland has strong data protection laws, isn't part of the Five Eyes, Nine Eyes, or Fourteen Eyes intelligence-sharing alliances, and requires a judicial process before any data can be handed over, there's no shortcut through a quiet administrative request. It's the same reasoning behind our Seychelles incorporation and Hong Kong banking: every piece of this business sits somewhere that can't be pressured into giving up customer data on a whim.
We run full billing and administrative backups weekly, keeping a rolling four weeks of backups at a time. Each week's backup replaces the one from four weeks prior. This means a record purged from our active systems can still exist in a backup for up to four weeks afterward, until that backup cycle rolls it out.
In July 2026, independent assessor Digital Safety completed a review of Lux VPN's privacy and logging practices. The assessment included customer, billing, support, backup, and hosting systems.
Digital Safety did not identify evidence that Lux VPN retained traffic contents or destinations, DNS queries, customer source IP addresses, or assigned VPN IP addresses. No exceptions were identified during the assessment.
Lux VPN retains limited account, payment-reference, and support information for account administration, billing reconciliation, and customer support. Full details, including retention periods, backup practices, scope, methodology, and limitations, are provided in the complete independent assessment report.
No vague promises. A jurisdiction that can't be pressured into logging you, a data list short enough to read in one sitting, and an independent review to back it up. That's the whole case, and it's one you can verify yourself.
Login