# IVPN privacy rating

VPN service from Gibraltar with random account IDs, no email at sign-up, cash and Monero payment, and open-source apps.

## Summary

IVPN scores 75 out of 100 (grade B) on the VPN providers criteria. It meets 7 of 12 criteria: no ads or data sales, independent audit, transparency report, tells users about requests, anonymous payment, open-source apps and modern protocols. It partly meets open source, no trackers or telemetry, TLS configuration, security headers and audited no-logs policy. It is based in Gibraltar: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade B+.

- Website: https://www.ivpn.net
- Source code: https://github.com/ivpn/desktop-app
- License: GPL-3.0
- Jurisdiction: Gibraltar. Not in the Five, Nine or Fourteen Eyes. GDPR-style data protection law.
- Home page trackers: none found
- Category: [VPN providers](https://privacyratings.com/vpns/)
- Grade: B (75/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | Apps are open source under GPL-3.0. The server side is not. | https://github.com/ivpn/desktop-app/blob/master/LICENSE.md |
| No trackers or telemetry | Partial | Website analytics use self-hosted Matomo, and mobile crash reports go to IVPN servers and can be turned off. No third-party trackers. | https://www.ivpn.net/en/privacy/ |
| No ads or data sales | Yes | Funded by paid plans. No ads. | https://www.ivpn.net/en/pricing/ |
| Independent audit | Yes | Full public Cure53 report on the customer website and servers. Audits are repeated yearly. | https://cure53.de/pentest-report_IVPN_2024.pdf |
| Transparency report | Yes | Yearly counts of requests received, valid requests and requests where data was provided. | https://www.ivpn.net/en/transparency-report/ |
| Tells users about requests | Yes | The legal process guidelines promise to notify users unless notice is prohibited. | https://www.ivpn.net/en/legal-process-guidelines/ |
| TLS configuration | Partial | Grade A- | https://www.ssllabs.com/ssltest/analyze.html?d=www.ivpn.net&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.ivpn.net |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Audited no-logs policy | Partial | The Cure53 no-logs audit is older than three years. Later audits focus on security. | https://cure53.de/audit-report_ivpn.pdf |
| Anonymous payment | Yes | No email is needed. Cash, Monero and Bitcoin are accepted. | https://www.ivpn.net/en/pricing/ |
| Open-source apps | Yes | Android, iOS and desktop apps are open source under GPL-3.0. | https://github.com/ivpn |
| Modern protocols | Yes | WireGuard is supported, with post-quantum key exchange in the apps. | https://www.ivpn.net/en/wireguard/ |

Source: https://privacyratings.com/vpns/ivpn/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/vpns/ivpn.md