What FortiSafe logs — and what it doesn't
FortiSafe doesn't log what you do on the VPN: the sites you visit, the content, DNS queries, your connection IP address, timestamps or data volume. We keep only what the account and subscription need, each with a deadline for deletion. The partner that runs the servers is contractually bound not to log it either.
Based on the Privacy Policy version 1.2, effective September 12, 2026.
What we don't log
Once your device has its configuration, the app connects straight to the network's servers — our systems take no part in the connection. So we don't receive or keep:
- the sites, apps and services you use;
- the content of what you send and receive;
- your DNS queries;
- the IP address you connect to the VPN from, or your connection and disconnection times;
- how much data you use.
What about the partner that runs the servers?
Under its contract with us, this partner is bound not to log anything about your VPN activity: not your traffic or the sites you visit, not connection data (your real IP address, connection and disconnection times, session length or data volume), and not your DNS queries — and not to write any of this to disk, even temporarily.
For each device we create a technical account on the network, identified by a random code — without your name or email.
Putting both sides together, neither we nor our partner keep a record of what you do on the VPN. What we do keep is listed in “What we keep”. API technical logs (up to 7 days) show when the app talked to our API — not when you were connected to the VPN or what you accessed.
What we keep, why and for how long
| Data | Why | How long |
|---|---|---|
| Email, name (if you provide it) and language | Create and maintain your account, send your sign-in code and subscription notices | While the account exists |
| Sign-in code and the IP address that requested it | Protect sign-in against repeated attempts. The code is stored only as a one-way hash | 30 days |
| Sessions: device type and start, last-use and expiry dates | Keep you signed in | Up to 30 days after the session ends (each session lasts at most 90 days) |
| Devices: the name you give them, the operating system, dates and the VPN technical credential, stored encrypted | Deliver the VPN configuration to each device | While the device is on the account. Once removed, its network account is deleted immediately and the record is erased after 12 months |
| Subscription: plan, where it was bought, the purchase ID at the store or payment provider, start and end | Know whether you can connect; charge, renew and refund | While the subscription exists and up to 5 years afterwards, for tax obligations and to handle any dispute |
| API technical logs: IP address, time and the endpoint called | Security and troubleshooting | Up to 7 days, deleted automatically by Cloudflare |
| Messages you send us | Reply and keep a support record | Up to 2 years after the last message |
A device's “last use”, mentioned above, is the last time the app requested its configuration from your account — not the last VPN connection.
How the deadlines are enforced
- An automatic routine runs every day and deletes sign-in codes, ended sessions and removed devices when each deadline passes.
- In the same daily routine, messages older than 2 years are deleted along with their attachments.
- Our infrastructure partner's commitment is contractual. We haven't published an independent audit yet.
Requests from authorities
We only disclose data in response to a legally valid order or request, reviewed case by case, and only what was requested and exists — at most, what is listed in the table above. Where the law allows, we tell you first. We publish how many requests we receive in our transparency report.
What this doesn't mean
- A VPN doesn't make anyone anonymous: wherever you sign in, the service still knows who you are.
- The sites and apps you use still log whatever they log themselves.
- Anyone who buys the fixed IP (under construction) will have that address tied to their account. That will be in the policy before the service exists.
Questions
Does FortiSafe keep the sites I visit?
No. VPN traffic doesn't go through our systems, and our infrastructure partner is contractually bound not to log sites, DNS queries or connection data.
What does FortiSafe keep about me?
Your account email, devices, subscription, sessions and sign-in codes for a short time, and the messages you send us — each with the deadline shown in the table on this page.
Does FortiSafe hand data to authorities?
Only in response to a legally valid order or request, reviewed case by case, and only what exists: at most, the data in the table on this page. Requests received are listed in the transparency report.