Is ZoogVPN safe? Logging policy, audits and jurisdiction
Privacy and jurisdiction 4.3/10 and security 3.6/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✕ No.
In 10 seconds
- Kill switch
Privacy
- Jurisdiction
- Not stated
- Legal entity
- Zoog Services IKE (Single Member Private Company, No. 145382616000)
- No-logs policy
- Yes zero-logs VPN service
- Data retention
- as long as needed; aggregate transfer totals for operations
- Shared with third parties
- payment processors (email); Google AdMob in Android app
- Trackers on the website
- Google Tag Manager; analytics cookies
What the privacy policy says is collected
Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.
- Email✕ Yes
- IP at sign-up✓ No
- Connection IP✓ No
- Session times✓ No
- Bandwidth✕ Yes
- Device infoNot stated
- App analyticsNot stated
- Crash reportsNot stated
Security
- Kill switch
- Yes (yes (desktop))
- DNS leak protection
- Yes (yes (advanced leak protection))
- Encryption
- 256-bit (Premium), 128-bit (Free)
- Security audits
- No
- Open-source apps
- No
- Two-factor sign-in
- Not stated
On privacy, ZoogVPN scores 4.3 out of 10, and 3.6 on security. That is above the median for its segment (2.7 and 2.1), and our data shows no red flags. The weak spot lies elsewhere: almost everything known about its data protection rests on the company's own word.
A logging policy with no verification
The policy promises zero-logs and states outright that it does not store connection IP addresses, sign-up IP addresses or session times. It keeps your email and total traffic volume, though you can sign up with a disposable email address and pay in cryptocurrency. ZoogVPN has no independent no-logs audit, and it publishes neither a transparency report nor a warrant canary. The policy says nothing about how the company handles law enforcement requests. The operator is registered in Greece as Zoog Services IKE, and no data protection officer is named in the policy. Services whose promises have been checked by an auditor are listed in our ranking of VPNs with an audited no-logs policy.
The free version
The free plan encrypts traffic with a 128-bit key, Premium with 256-bit. The free Android app contains Google AdMob ads, and the policy names AdMob among the parties that receive data. The policy does not say whether ZoogVPN collects device information, app analytics, or crash reports.
Connection security
The service claims protection against DNS leaks. A kill switch is listed only for desktop apps; ZoogVPN says nothing about phones. The main protocols are OpenVPN and IKEv2, with L2TP/IPsec and PPTP left for manual setup. PPTP has long been considered broken, and there is no reason to choose it even on an old router. The company gives no description of its own Shadow Protocol. The app code is closed, it has published no security audits, and the company does not mention two-factor authentication.