Security and privacy
How PrivShift protects your connection, what our published policies say about your data, and how to report a security problem. The policies linked on this page are the authoritative text.
How PrivShift protects your connection
- WireGuard encryption. Keys are created on your device, and the private key never leaves it.
- Kill switch. When it is on, traffic stays blocked if the tunnel drops.
- Private DNS and IPv6 protection. While you are protected, DNS goes through the VPN and IPv6 does not leak.
- Signed Windows app. The installer is signed and its SHA-256 checksum is listed on the download page, so you can check the file before installing.
- Connections survive our outages. If the site or the app cannot reach PrivShift, existing VPN connections keep working. See service status.
What we do not collect
We do not log or store the websites you visit, destination addresses or URLs, DNS queries or the content of your traffic. We do not record your IP address with your sign-ins or acceptances.
How we use your data
To provide the service, bill you, secure your account, answer support requests and meet legal obligations. We do not sell personal data and do not use it for advertising.
Quoted from our Privacy Policy, last updated 13 November 2026. It also explains what account, billing and device data we keep, for how long, and how to delete your account.
Report a security vulnerability
Report security vulnerabilities to security@privshift.com. Please include steps to reproduce, and give us reasonable time to fix the issue before disclosing it. Do not access other people's data or disrupt the service while testing. We will acknowledge your report and keep you informed.
Email security@privshift.com. See the security policy.