Transparency report
Updated as of launch, 2026-06-27.
| Government/legal data requests received | 0 |
| Requests complied with | 0 |
| User data handed over | 0 |
| Gag orders received | 0 |
Warrant canary
As of the date above, vpn.golf has not received any warrant, subpoena, national security letter, or gag order, and has not been compelled to weaken security or logging. If this statement disappears, treat it as a signal.
What we could even hand over
By design, very little — account email and aggregate byte counters. There is no browsing history to produce (see no-logs policy).
Frequently asked questions
As of the date on the transparency page: zero requests received, zero complied with, zero data handed over.
A statement we publish saying we have not received secret legal demands. If it disappears or stops being updated, treat that as a signal.
By design, very little — account email and aggregate byte counters. There are no traffic, DNS, or connection logs to produce.
Yes. The transparency page is updated with running counts of government and legal data requests received, requests complied with, data handed over, and gag orders received.
As of the date on the transparency page, zero. That count is published alongside the warrant canary, and the canary covers secret demands we couldn't otherwise disclose.
We can only be compelled with respect to what we hold or can begin collecting going forward; we cannot reconstruct past traffic that was never logged. The warrant canary exists to signal compelled changes we can't state outright.
Where the law permits, yes — we aim to notify affected users. For demands that come with a gag order, the warrant canary is how we signal that something has changed.
No. We do not sell, rent, or share user data, and we run no advertising trackers. The little we collect — account email and byte totals — exists only to operate the service.
A secret government demand, often paired with a gag order, that a provider may be barred from disclosing. Our warrant canary states we have received none; its removal would be the signal.
We refresh it on a regular cadence and date it. The signal isn't only its wording — if it goes stale or vanishes, treat that as meaningful.
Run our DNS leak test to confirm lookups resolve through the exit node, and read the no-logs and how-it-works pages. We have no third-party audit yet and say so plainly.
We respond to valid legal process, but we can only produce what exists — account email and aggregate byte counters. There are no traffic, DNS, or connection logs to turn over.