IVPN
IVPN is one of the more privacy-focused services available, requiring no personal information to sign up, keeping no VPN logs by law or policy, and committing to shut down rather than be forced to spy on users. However, like most services, policy changes take effect simply by your continued use, liability for any harm is capped at what you paid, and your account data can be retained for up to 90 days after cancellation. A few practical concerns exist on mobile, including crash reporting enabled by default and background location access requested by the Android app. The 30-day refund is a genuine safety net but comes with restrictions, and IVPN can terminate accounts instantly without a refund if you violate their terms.
Last analyzed
Heads up: this analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original document before you agree — see our Terms.
Clause-by-clause breakdown
Every clause we flagged in IVPN's agreement, with what it means for you.
Using the service after a policy change counts as agreeing to it.
“We reserve the right to make amendments or modifications to our Terms Of Use Agreement. If we make changes that are material, we will take every reasonable step to ensure that changes are brought to your attention by posting all changes prominently on the IVPN website and emailing our existing customers. The notice will designate a reasonable period of time after which the new Terms will take effect. If you disagree with our changes, then you should stop using the IVPN service within the designated notice period. Your continued use of the IVPN service will be subject to the new Terms.”
Quoted verbatim from the agreement What this means: IVPN can change its Terms of Service at any time. While they promise to post changes prominently and email existing customers, continuing to use the service after the notice period automatically binds you to the new terms — even if you never actively agreed to them. You must stop using the service within the notice window if you object.
What you can do: Watch for emails from IVPN announcing policy changes. If you disagree with any update, cancel your subscription before the notice period expires to avoid being bound by the new terms.
IVPN's liability is capped at what you paid, no matter the harm.
“The service that is offered to you is provided on an "as is" basis, with no warranties whatsoever. We are not liable for any direct, indirect, consequential, inconveniences, or whatsoever damages, or loss of profit, that may arise from the use of our services. We are not in any shape or form liable for damages of any sort (realized or unrealized) resulting from the use of, or through the use of, or arising from the use of, or the inability to use the IVPN service pertaining to any registered user. In any event, IVPN shall never be liable for any monetary damages beyond what the user paid to IVPN and this will not include court costs or attorney fees irrespective of any statutes or laws that may be interpreted otherwise.”
Quoted verbatim from the agreement What this means: IVPN disclaims all liability for any harm — direct, indirect, or consequential — arising from use of the service. Even if IVPN's own failure causes you real harm, your maximum recovery is capped at the amount you paid them, and you cannot recover legal costs. For a privacy-focused VPN where a failure could expose your identity or activity, this cap is disproportionate to the potential harm.
What you can do: Understand that if a VPN failure exposes your data or identity, you have very limited legal recourse against IVPN. Consider whether the service's technical privacy guarantees (no-logs) are sufficient protection on their own.
IVPN can cancel your account instantly with no refund.
“If you violate any of our terms, we reserve the right to terminate your service without any advance warning or notification. No refunds or credit will be given.”
Quoted verbatim from the agreement What this means: IVPN can terminate your account immediately and without notice if they believe you have violated any term. You will not receive a refund for any unused subscription time, regardless of how much you paid or how long was remaining. There is no appeal or dispute process described.
What you can do: Avoid any activity that could be construed as a ToS violation. Consider shorter subscription periods to limit financial exposure if your account is terminated unexpectedly.
IVPN can update its privacy policy at any time unilaterally.
“IVPN reserves the right to change this privacy policy at any time. In such cases, we will take every reasonable step to ensure that these changes are brought to your attention by posting all changes prominently on the IVPN website for a reasonable period of time, before the new policy becomes effective as well as emailing our existing customers.”
Quoted verbatim from the agreement What this means: IVPN can change its privacy policy at any time without requiring your active agreement. While they commit to posting changes prominently and emailing customers before the new policy takes effect, there is no requirement for you to affirmatively consent to the new terms — your continued use implies acceptance.
What you can do: Monitor emails from IVPN for privacy policy update notices. If a change is unacceptable, cancel before the new policy takes effect.
Mobile apps send crash reports automatically; you must opt out.
“By default, if one of our mobile apps crashes while you're using it, anonymized data about the crash will be collected on the device to help us identify the cause of the crash and hopefully fix it in a future update. These "crash logs" contain information such as the state of the app, operating system, and device at the time of the crash, but no personally identifiable information. Crash logs for our desktop apps are only sent when the user manually confirms the action. For our mobile apps, you can opt-out of crash log reporting by disabling it in user preferences.”
Quoted verbatim from the agreement What this means: Mobile apps automatically collect and send anonymized crash reports by default. While no personally identifiable information is included, this is an opt-out rather than opt-in feature on mobile. Desktop apps require manual confirmation before sending crash logs. You can disable mobile crash reporting in the app's preferences.
What you can do: Go to your IVPN mobile app's user preferences and disable crash log reporting if you prefer not to send any data, even anonymized, to IVPN's servers.
IVPN uses self-hosted Matomo analytics on their website.
“When your web browser loads a page on our site, a small snippet of JavaScript code is executed within your browser which submits information such as; your browser user-agent, language, screen resolution, referring website, IP address. To ensure your privacy, IVPN discards the last two octets of the IP address. Matomo may also set a web cookie to facilitate the identification of users who revisit the site.”
Quoted verbatim from the agreement What this means: IVPN uses Matomo (a self-hosted, open-source analytics tool) to collect browser data when you visit their website. Your IP address is partially anonymized by discarding the last two octets. Matomo is hosted on IVPN's own servers, not sent to Google or other third parties, which is a privacy-conscious choice compared to most services.
What you can do: Use a browser with JavaScript disabled or a content blocker to prevent Matomo from collecting analytics data when you visit the IVPN website.
30-day refund is available once only; cash and vouchers are non-refundable.
“If you are unsatisfied for any reason, you can request a full refund within 30 days of your payment. This full refund offer is available once per account and per customer. Please note: IVPN Light purchases are non-refundable. Cash and Voucher payments are non-refundable. Please note: We do not offer prorated refunds.”
Quoted verbatim from the agreement What this means: IVPN offers a 30-day money-back guarantee, but it is limited to once per account and once per customer. IVPN Light plan purchases, cash payments, and voucher payments are entirely non-refundable. No prorated refunds are offered for unused subscription time under any circumstances.
What you can do: Use a refundable payment method (credit card, PayPal, or cryptocurrency) for your first purchase to preserve your 30-day refund option. Avoid cash or voucher payments if you want refund protection.
Your data is kept for up to 90 days after your account ends.
“When a VPN account is terminated on our network due to the subscription ending, non-payment or for any other reason, all data associated with that VPN account including the account itself (with the exception of the accounting data below) is automatically deleted after 90 days. After the account is deleted, the remaining accounting data below has no link to any past account ID.”
Quoted verbatim from the agreement What this means: When your account ends, most data is deleted automatically after 90 days. However, some accounting data (such as payment transaction IDs) is retained beyond that period. Importantly, IVPN states that after deletion this accounting data has no link to any past account ID, which limits its identifying value. You can bypass the 90-day wait by using the self-service delete button.
What you can do: Click the 'delete account' button in the client area to trigger immediate deletion rather than waiting up to 90 days.
The Android app requests continuous background location access.
“Background location permission (continuous): Required to access the current Wi-Fi SSID, when the Network Protection feature is enabled.”
Quoted verbatim from the agreement What this means: The Android app requests continuous background location permission. This is needed to read the Wi-Fi network name (SSID) for the Network Protection feature, which automatically applies VPN rules based on which network you are connected to. Android classifies Wi-Fi SSID access as a location permission. IVPN states this data is used only for this feature and is not logged or transmitted.
What you can do: If you do not use the Network Protection feature, you can deny the background location permission in Android settings without affecting core VPN functionality.
No email, name, or personal info is needed to sign up.
“Zero user information is our goal As a privacy service we believe it's crucially important to collect the minimum information required to operate our service. Many companies require at least an email address so they can push subscription renewals and enable other customer growth strategies. When you sign up for IVPN, you will not be asked for any personal information e.g. email address, name etc. We will also not log any personally identifiable information e.g. IP address.”
Quoted verbatim from the agreement What this means: IVPN does not require an email address, name, or any other personal information to create an account. No IP address is logged. This is a strong privacy commitment that goes well beyond what most VPN providers offer, making it very difficult to link an account to a real person.
What you can do: Take advantage of this by signing up without providing any personal details, and use a privacy-preserving payment method (cash or cryptocurrency) for maximum anonymity.
IVPN keeps no logs of your VPN traffic or connections.
“We do not log any data relating to a user's VPN activity (while connected or connecting to the VPN). No traffic logging No connection timestamp or connection duration No DNS request logging No logging of user bandwidth No logging of customer IP addresses No logging of any account activity except active total simultaneous connections (explained below)”
Quoted verbatim from the agreement What this means: IVPN keeps no logs of what you do online, when you connect, how long you connect, which DNS queries you make, how much bandwidth you use, or what your IP address is. This means that even if IVPN is compelled by a court order, there is no data to hand over about your VPN activity.
What you can do: This is a strong protection. Pair it with anonymous sign-up and cryptocurrency payment for the strongest privacy posture.
IVPN legally cannot hand over VPN logs — they don't exist.
“IVPN does not store any logs relating to the connections of IVPN users to the VPN network i.e. timestamped records of when a particular user connected and disconnected to any server in the IVPN network. If provided with a timestamp IVPN are therefor not able to determine who was connected to any server at that time. IVPN do not store logs relating to the activity of IVPN users when connected to the IVPN service i.e. timestamped records of what Internet servers or websites the IVPN user was connected to. Therefor if provided with a timestamp IVPN are not able to retrieve any Internet activity relating to any time period or user account.”
Quoted verbatim from the agreement What this means: IVPN's own law enforcement guidelines confirm that they cannot provide connection logs or activity logs to authorities because they simply do not exist. Even with a valid court order, there is nothing to hand over regarding who connected when or what sites they visited. This is a meaningful technical and legal safeguard.
What you can do: This is a user-protective feature. No action needed — it works automatically by design.
You can delete your account and data immediately via a button.
“When a VPN account is terminated on our network due to the subscription ending, non-payment or for any other reason, all data associated with that VPN account including the account itself (with the exception of the accounting data below) is automatically deleted after 90 days. After the account is deleted, the remaining accounting data below has no link to any past account ID. If you want to delete your data immediately, simply click on the 'delete account' button within the client area.”
Quoted verbatim from the agreement What this means: When your account ends, IVPN automatically deletes all associated data within 90 days. If you want it gone sooner, a self-service 'delete account' button is available in the client area for immediate deletion. Remaining accounting data is de-linked from your account ID after deletion.
What you can do: Use the 'delete account' button in the client area if you want your data removed immediately rather than waiting up to 90 days.
IVPN is based in Gibraltar and subject to GDPR-equivalent law.
“IVPN is subject to EU law and is in compliance with the EU Data Protection Directive (Directive 95/46/EC), which prohibits companies transferring data to overseas jurisdictions with weaker privacy laws. IVPN is registered in Gibraltar, and as such the GDPR regulatory body is the Gibraltar Regulatory Authority.”
Quoted verbatim from the agreement What this means: IVPN is incorporated in Gibraltar and subject to Gibraltar's data protection laws, which are aligned with EU GDPR standards. The Gibraltar Regulatory Authority is the supervisory body. This means IVPN must comply with GDPR-level data protection requirements, giving EU and UK users meaningful legal rights.
What you can do: As a user, you can submit a Subject Access Request to [email protected] to see what data IVPN holds about you, as required under GDPR.
IVPN will move jurisdictions or close rather than log your data.
“If it ever becomes required by law for us to keep a persistent log of our customers connections or any personal data relating to their network activity, we will immediately notify our customers and do everything in our power to move jurisdictions or close the service to protect those who entrust their privacy to us.”
Quoted verbatim from the agreement What this means: IVPN explicitly commits that if laws change to require them to log user activity, they will notify customers and attempt to move to a different jurisdiction or shut down the service rather than comply. This is a strong, user-protective commitment that goes beyond what most VPN providers promise.
What you can do: This is a strong user protection. No action needed — it is a commitment by IVPN to prioritize your privacy even under legal pressure.
IVPN promises advance warning and refunds if privacy laws force changes.
“IVPN is committed to keeping its customers informed of any serious legislative threats to our service. If the laws in our jurisdiction change in way that prevents us from upholding our privacy policy, we will always inform our customers before those laws are enacted. We will also allow customers to cancel their subscription and will refund any fees that cover the remainder of their subscription period.”
Quoted verbatim from the agreement What this means: If Gibraltar law changes in a way that would force IVPN to compromise user privacy, they commit to warning customers in advance, allowing cancellations, and refunding the unused portion of subscriptions. This is a meaningful user-protective commitment that goes beyond what most VPN providers offer.
No third parties can access your data — all tools are self-hosted.
“No third-parties have access to any of your data. We always use first or third-party tools we can host on our own servers in a protected and secure environment.”
Quoted verbatim from the agreement What this means: IVPN explicitly states that no third parties have access to user data, and that any tools used are hosted on IVPN's own infrastructure. This is a stronger commitment than the typical 'we share with trusted partners' language found in most privacy policies.
Frequently asked questions
Is IVPN's Terms & Conditions agreement fair?
- BeforeYouClick grades IVPN C on an A–E scale, where A is the fairest. Its agreement contains 2 critical clauses, 7 warnings and 8 good practices.
What are the biggest problems with IVPN's terms?
- The most serious clauses we flagged are: Policy Changes Bind You Without New Consent and Liability Capped at Amount Paid.
How long does it take to read IVPN's terms?
- IVPN's agreement takes about 97 minutes to read in full, across 17 clauses we reviewed. The summary on this page covers the same ground in under a minute.
When was IVPN's agreement last analyzed?
- We last read IVPN's Terms & Conditions on July 4, 2026. Companies change their terms without notice, so check the original document for the current version.
Is this analysis legal advice?
- No. This analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original agreement before you agree to it.
More agreements to read
- Mullvad VPNSecurityGrade A
- MurenaSecurityGrade B
- NordVPNSecurityGrade B
- BitwardenSecurityGrade C
- DuckDuckGoSecurityGrade C
- ProtonVPNSecurityGrade D