Transparency report

Every quarter we publish the number of legal requests we received for user data — from any government, law-enforcement body, civil litigant, or third party — and the number of records we handed over in response. This page is updated on the same day as the warrant canary. Last updated: 2026-04-13.

Q1 2026 (Jan 1 – Mar 31)

Published 2026-04-13

Requests received

Data disclosed

For Q1 2026, we received zero government or law-enforcement data requests that we are legally permitted to disclose. No user data disclosed.

What we would — and wouldn't — hand over

We record per-session metadata — peer ID, connection start/end, bytes transferred, and a one-way-hashed endpoint fingerprint — retained for up to 90 days (or your LOG_RETENTION_DAYS setting) to let you see your own session history and to support quota enforcement. We do NOT log the content of your traffic, DNS queries, or the plaintext IPs of the sites you visit.

DXVPN is built to collect as little information as possible. What we retain for legitimate operational reasons (billing, session counters, email verification) is documented in our Privacy policy.

If served with a valid legal demand we cannot technically comply with (because the data simply doesn't exist on our infrastructure), we state so in writing. If we comply with any request, the next quarter's report will reflect it.

For security disclosures, use the contacts in our security.txt. For press inquiries: press@sechb.com.

Schedule

New quarters are added within 15 days of quarter-end (Apr 15, Jul 15, Oct 15, Jan 15). A missing quarter past its deadline should be read as a warrant-canary-style signal — see /canary.