# CyberGhost VPN privacy rating

Commercial VPN service from CyberGhost S.R.L. in Romania, a subsidiary of Kape Technologies. Apps support WireGuard, OpenVPN and IKEv2.

## Summary

CyberGhost VPN scores 50 out of 100 (grade D) on the VPN providers criteria. It meets 5 of 12 criteria: no ads or data sales, independent audit, transparency report, audited no-logs policy and modern protocols. It partly meets TLS configuration and anonymous payment. It does not meet open source, no trackers or telemetry, tells users about requests, security headers and open-source apps. It is based in Romania: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade C-.

- Website: https://www.cyberghostvpn.com
- Jurisdiction: Romania. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Platforms: Windows, macOS, Linux, Android, iOS
- Home page trackers: Cloudflare Web Analytics (cookieless analytics), Google Fonts (not scored), Google reCAPTCHA (not scored), Google Tag Manager
- Category: [VPN providers](https://privacyratings.com/vpns/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy lists AppsFlyer, Mouseflow, Google Analytics and VWO, and the Android app includes AppsFlyer, Firebase Analytics and Sentry. | https://www.cyberghostvpn.com/privacypolicy |
| No ads or data sales | Yes | Funded by paid subscriptions. The policy states personal data is not sold, rented or traded. | https://www.cyberghostvpn.com/privacypolicy |
| Independent audit | Yes | Full Deloitte ISAE 3000 assurance report on the VPN infrastructure is downloadable. | https://www.cyberghostvpn.com/deloitte-privacy-policy |
| Transparency report | Yes | Quarterly counts of legal requests for user data are published. | https://www.cyberghostvpn.com/transparency-report |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=www.cyberghostvpn.com&hideResults=on |
| Security headers | No | Grade C- (45/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.cyberghostvpn.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Audited no-logs policy | Yes | Deloitte Audit Romania examined the server configuration and safeguards against activity logging. The full report is public. | https://www.cyberghostvpn.com/deloitte-privacy-policy |
| Anonymous payment | Partial | Bitcoin is accepted, but an email address is needed for the account. | https://www.cyberghostvpn.com/privacypolicy |
| Open-source apps | No | The apps are closed source. |  |
| Modern protocols | Yes | WireGuard is supported alongside OpenVPN and IKEv2. | https://support.cyberghostvpn.com/hc/en-us/articles/213983829-Which-VPN-Protocols-Do-You-Support |

Source: https://privacyratings.com/vpns/cyberghost/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/vpns/cyberghost.md