Court-tested, server-seized. Still no logs.
Server Seized
February 2026 — Dutch authorities physically took our server. Found nothing. RAM-only.
Court Dismissed
April 2025 — Co-founder criminally charged via INTERPOL. Case dismissed. Zero data to hand over.
Full Disclosure
July 2021 — Servers seized. We told on ourselves publicly. Then rebuilt everything.
Your browsing history or DNS queries
Your real IP address
The VPN IP address assigned to you
Connection timestamps
Session duration or per-session bandwidth
Any content of your encrypted traffic
When you last used Windscribe (date only, not time)
Total bandwidth used in the last 30 days
Which app versions you've activated
- February 2026
Netherlands: They took the server
Dutch authorities physically seized a Windscribe VPN server from a data center rack, without a warrant or prior request. What they found: a stock Ubuntu install running entirely in RAM — no hard drives, no logs, no user data."We get a handful of law enforcement requests every month. And each time we tell them we have no logs. This time they didn't ask, they just snatched the server from the rack to look for the logs themselves. Unfortunately for them, there's still no logs lol." — Windscribe - April 2025
Greece: The co-founder was criminally charged
A Windscribe server in Finland was allegedly used to breach a Greek system. Greek authorities, with INTERPOL assistance, charged co-founder Yegor Sak personally with "illegal access to information system." Two-year legal battle across three countries. Case dismissed April 11, 2025 because Windscribe had zero user data to provide."As we do not log user activity, we cannot hand over what we do not have." — Yegor Sak, Windscribe Co-Founder - July 2021
Ukraine: The one where we told on ourselves
Two Windscribe servers were seized by Ukrainian authorities. No user data was compromised because no logs existed, but an OpenVPN CA key was exposed since servers weren't encrypted at rest. Windscribe published a full technical breakdown and used it as the catalyst for Operation FreshScribe — a complete infrastructure overhaul to RAM-only servers. That overhaul is what made the 2026 Dutch seizure a non-event.
Audits are snapshots. Court cases are stress tests.
Our Transparency Stack
Layer 01 — Fully open-source clients
Desktop apps (Windows, Mac, Linux), Android app, and browser extension are all on GitHub. Inspect the code. Verify our claims. Build it yourself if you want.
Layer 02 — Live transparency report
Real-time feed showing every DMCA and law enforcement request we receive. Every single response: "Can't help you." Not a static annual PDF. A live, always-updated counter.
Layer 03 — Third-party security audits
PacketLabs audited our full FreshScribe server infrastructure (June 2024): 20 repositories, ~80,000 lines of code, external + internal penetration testing. Found no intentional subversions of our no-logs policy. Leviathan Security Group audited desktop apps (2021) and mobile apps (2022).
Layer 04 — Public employee handbook
We publish our internal employee handbook publicly because transparency should show up in how we operate, not just in what we sell.
The WeVPN rescue
When WeVPN shut down, we comped every WeVPN user with free Windscribe service for the remainder of their subscription. Not an acquisition. A gesture of good will. This is what a company does when its values are real, not performative.
Anonymous From Sign-Up
No-logs means nothing if the company knows who you are from the moment you sign up. We designed the entire flow so we don't have to know.
This is why the Greek court case ended the way it did.
Traditional Server — Data can survive when the power is switched off
FreshScribe RAM-Only — Data disappears when power does
The Arc: Failure → Rebuild → Vindication.
Canada, Five Eyes, and Why It Doesn't Matter
Canadian jurisdiction gets brought up a lot. Here's the part that matters. The common objection: "Windscribe is based in Canada. Canada is a Five Eyes country. Isn't that a dealbreaker?"
- Canadian law does not mandate that VPN providers store user data or maintain logs. This is a critical legal distinction.
- Five Eyes means intelligence agencies can share data between countries. It does not mean VPN companies are required to collect data for them to share.
- If there are no logs, there is nothing to share. Jurisdiction matters when a provider has data. When a provider has zero data, the question is academic.
- Greek authorities with INTERPOL backing could not extract data from a Canadian VPN company. Because the data did not exist.
Frequently Asked Questions About No-Log VPNs
Does Windscribe keep any logs at all?
We store three non-identifying data points: when you last used Windscribe (date only), total bandwidth in the last 30 days, and which app versions you've activated. We do not store your IP, browsing history, DNS queries, timestamps, or any traffic content.
Has Windscribe's no-logs policy been proven in court?
Yes. In April 2025, our co-founder was personally charged in a Greek court after a Windscribe server was allegedly used in a cybercrime. INTERPOL was involved. The case was dismissed because we had zero user data to provide.
Has Windscribe been independently audited?
Yes. PacketLabs audited our full server infrastructure in June 2024, reviewing 20 repositories and ~80,000 lines of code. Leviathan Security Group audited our desktop apps (2021) and mobile apps (2022). All reports are publicly available.
Why is Windscribe based in Canada (a Five Eyes country)?
Canadian law does not require VPN providers to store logs. Five Eyes enables data sharing between agencies, but if there is no data to share, the point is moot. The Greek court case proved this empirically.
Is Windscribe's code open source?
Yes. Desktop apps, Android app, and browser extension are all open source on GitHub. You can inspect the code yourself to verify our claims.
Do I need an email to sign up?
No. You can create an account with just a username and password. Combined with cryptocurrency payment, you can use Windscribe with zero identity information tied to your account.
What are RAM-only servers?
RAM-only (diskless) servers run entirely in volatile memory. When power is cut, all data is erased permanently. Windscribe's entire infrastructure runs on RAM-only servers. This was proven in February 2026 when Dutch authorities physically seized a server and found nothing.
What happens if authorities request my data?
We tell them we can't help. Every single law enforcement and DMCA request has gotten the same answer. Our live transparency report tracks every request in real time.