Is BearVPN safe? Unverified promises from an unnamed company

Privacy and jurisdiction 4.3/10 and security 1.4/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✕ No.

In 10 seconds

Kill switch

Privacy

Jurisdiction: Not stated
Legal entity: Not stated
No-logs policy: Yes no IPs, timestamps, session duration, browsing, DNS
Data retention: traffic info cleared after session; account data unspecified
Shared with third parties: no sale without consent; PayPal for some payments

What the privacy policy says is collected

Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.

Email✕ Yes
IP at sign-upNot stated
Connection IP✓ No
Session times✓ No
BandwidthNot stated
Device info✕ Yes
App analyticsNot stated
Crash reportsNot stated

Security

Kill switch: Yes
DNS leak protection: Not stated
Encryption: AES-256
Security audits: none
Open-source apps: No
Two-factor sign-in: Not stated

The privacy policy of BearVPN sounds right, but there is no way to check its claims. Privacy scores 4.3 out of 10 against a segment median of 2.7, security 1.4 against a median of 2.1. Our data shows no red flags or public incidents.

Who is responsible for your data

The BearVPN website does not name the company or its country of registration. So it is unclear whose laws apply to it and whether it belongs to any surveillance alliance. On government requests, the policy answers with a single phrase: the service cannot hand over data it does not have. There is no transparency report and no warrant canary. The privacy policy was last updated on 10 June 2024.

What the service promises not to store

BearVPN claims it does not log IP addresses, session times and durations, browsing history or DNS queries, and that it deletes traffic information once a session ends. No independent audit of these promises exists, and they have not been tested in court or through a breach either. The policy does not say how long account data is kept. An email address is optional: you sign in with a device code, and the service collects that code.

Technical protection

There is a kill switch and AES-256 encryption. BearVPN does not name its protocols; the website only mentions "modern protocols" and traffic obfuscation. The service does not say whether it protects against DNS leaks or offers two-factor sign-in. There are no security audits, and the app code is closed source.

Can you use BearVPN anonymously?

The free mobile version works without registration and without a card. You cannot buy Premium anonymously: BearVPN does not accept cryptocurrency or cash, only cards, PayPal and app stores.