Skip to content

What CoxVPN keeps, and what it never logs

Here is the full list of account data we hold, with the reason next to each item. Below it you will see the activity we never record at all. After that come the tunnel ciphers, how we handle legal requests, and some simple ways to keep your login safe.

Data kept on your account

  • Sign-in dataIf you joined with email, we hold that address and a one-way hash of your password. If you joined with a token, we hold its hash plus the final 4 characters, so two token accounts never get mixed up. Signing in compares hashes, and the plain password is never saved. Token accounts also have one encrypted copy of the token, used only to link top-ups to the account.
  • Sign-up IP, as a hashEach IP can create up to 3 accounts. A hash of the sign-up address is enough to check that.
  • Money in and outEvery top-up, order and refund gets its own dated line showing the sum. This keeps your balance correct and lets us trace a payment that got stuck.
  • Your passes and expiry datesWhich pass you have (Basic, Plus or Pro) and when it runs out. A pass bought while another is active starts the day the current one ends.
  • Active device markersWe count slots this way: one per device online, up to 6, 10 or 12 depending on the pass. A marker holds no IP and is removed when the device disconnects.
  • Proxy credentialsThese appear the first time you open My passes after ordering a proxy: a username starting with cx, a password, and any allowed IPs you add. Our proxy gateway compares them each time you connect.
  • Conversations with usWhat you send through My info > Contact us and our replies, so you do not have to explain things again next time.

Never written to any log

  • Your real IP from your provider
  • Which websites load and which apps run
  • DNS queries
  • What your data actually says
  • The moment you go online or offline
  • Session duration
Read the privacy policy

Which encryption does the tunnel use?

As soon as you flip the connect switch, your device sends everything through an encrypted tunnel to a CoxVPN server. Your provider or the Wi-Fi owner can see that a VPN is in use, and that is all. Basic, Plus and Pro share the same ciphers: ChaCha20 on WireGuard, AES-256-GCM on OpenVPN and on IKEv2.

Changing protocol affects speed and how well the tunnel holds up. What gets recorded stays the same. Start with WireGuard, use OpenVPN TCP on networks that block UDP, and pick IKEv2 for a phone that switches between Wi-Fi and LTE a lot.

Do DNS lookups stay private?

Every site visit starts with a lookup that asks where the site is. If those lookups go outside the tunnel, your provider can collect a list of where you go, encryption or not.

While you are connected, lookups go through the tunnel to our own DNS servers, which keep no query log. Lookups aimed at any other DNS server are dropped. There is nothing for you to set up.

What happens if the connection drops?

Tunnels drop for ordinary reasons: a weak signal, a laptop coming out of sleep, a phone moving from Wi-Fi to LTE. In those seconds, an unprotected device simply carries on without the tunnel, real IP and all.

With the kill switch on, your device stays offline until CoxVPN reconnects. Anyone who lives on public Wi-Fi should switch it on the first day and never touch it again.

  • Desktop and Apple devices: open Settings, then Connection, and turn on Kill switch
  • Android: our in-app switch, backed by the system options Always-on VPN and Block connections without VPN

What do you see when I pay with crypto?

Paying takes two steps. You send crypto through the PayGate checkout and it becomes a dollar balance. Then you pay for your cart from that balance. Since crypto is the only way in, card numbers and bank accounts never reach us.

We record the amount, the coin, the date and what you bought. One thing to know: on most chains, transfers are public, so a person holding your wallet address can browse its history.

Can police or courts get my data?

We comply with the law where it applies to us. Even so, a court order cannot conjure data. All it can reach is what is listed at the top of this page: account and payment records.

Since we never wrote down your browsing, lookups, real IP or session times, no request can make us produce them.

How do I keep my login safe?

We never send email. That means no reset for a forgotten password and no replacement for a lost token. Anyone who has your login can also spend your balance.

Here is what we recommend:

  • Right at sign-up, put the password or token into a password manager, or download the token as .txt
  • Store a backup somewhere other than your main device
  • Log out of My info on computers other people use
  • Do not share your token or password, not in a chat, a screenshot or even a support message

Common questions

Is my browsing visible to CoxVPN?

Your traffic passes through our servers, but none of it is recorded. We do not log sites, content, DNS queries or connection times.

Does the site use tracking or analytics?

No. We run no ad cookies, no pixels and no outside visitor analytics. We do not sell data or share it with advertisers, and we only release account data when the law requires it.

What if I lose my token or password?

It is gone for good. We have no email for a reset and no other way to confirm you own it, so you will need a new account.

Where can I send a vulnerability report?

Log in and write to us at My info > Contact us. You do not need a pass to send it. Describe what you saw and the steps to reproduce it, and our reply will come in the same thread.

Ready when you are

Start like flipping a switch

No account needed to fill the cart. You sign up at the moment you pay.

Choose a passSee proxies