Is VPN Unlimited safe? Logging policy, audits and jurisdiction

Privacy and jurisdiction 4.0/10 and security 1.1/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✕ No.

In 10 seconds

Jurisdiction in 5 Eyes

Privacy

Jurisdiction: USA, 5 Eyes
Legal entity: KeepSolid Inc.
No-logs policy: Yes zero-log
Data retention: while account exists; legal records 7 years
Shared with third parties: payment processors; service providers (storage, payments, fraud, marketing); no VPN data sold

What the privacy policy says is collected

Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.

Email✕ Yes
IP at sign-up✕ Yes
Connection IP✓ No
Session times✓ No
Bandwidth✕ Yes
Device info✕ Yes
App analyticsNot stated
Crash reportsNot stated

Security

Kill switch: Yes (yes on Windows/macOS; not built into iOS/Android (review))
DNS leak protection: Not stated
Encryption: AES-256; Camellia-256; ChaCha20-Poly1305
Two-factor sign-in: Not stated

For privacy, VPN Unlimited scores 4.0 out of 10, above the consumer VPN median (2.7). For security it gets only 1.1 against a median of 2.1. Our data shows no public incidents or red flags. The main weakness is trust: nobody has independently verified the zero-log promise, and KeepSolid does not report any security audits.

What KeepSolid stores

According to the privacy policy, your connection IP is not kept after a session, and session times are not recorded. It does store your email, if you signed up with one, and device data: name and ID, system, browser, language, time zone and app usage. Traffic volume is counted only for Personal Server. Data is kept as long as the account exists, and legal records are stored for 7 years.

You can skip the email: the service lets you in with a Guest ID, and you can pay in bitcoin. That way fewer details tie the subscription to you.

US jurisdiction

The company is based in the US, a 5 Eyes country. On a subpoena or court order, KeepSolid will hand over data, and what it can hand over is what it stores: your email and device details. The company does not name a data protection officer under GDPR.

Why only 1.1 for security

The encryption is fine: AES-256, ChaCha20-Poly1305 and Camellia-256, with WireGuard, OpenVPN, IKEv2 and its own KeepSolid Wise protocol. According to a TechRadar review, the kill switch is built only into the Windows and macOS apps. On Android, enable the system "Always-on VPN" mode with the option to block connections without VPN. The service does not say whether it protects against DNS leaks, and says nothing about open-source apps or RAM-only servers.

Two-factor login in User Office is available; per KeepSolid's guide, you enable it in Settings, under Security Settings, and the code arrives by email.