Some VPN providers like to market their jurisdiction as a selling point, relying on their country's privacy laws. But laws inevitably change. We don't need to hide behind a country's laws, because we don't rely on those laws to safeguard your privacy. We created Cloak Engaged as a zero-knowledge system, by deciding that having nothing to protect in the first place is far better than keeping some data on you and needing to rely on an external padlock like legal jurisdiction. Simply put, we could hand over whatever we have to anyone if compelled, and they would still have nothing.

With our VPN enabled, even when devices were going in and out of WiFi coverage, or switching between WiFi and cellular, or left all-day and all-night with the VPN enabled, we found no DNS leaks in our testing. You are welcome to test this yourself using tools like dnsleaktest or ipleak.

Many VPN providers try to create this impression where hackers are out to get you, and that you're unprotected without a VPN, when in reality a VPN isn't actually needed for security when you practice basic security hygiene. They advertise that your internet provider can see everything you do, and that you're completely exposed without a VPN, when in reality it's limited to the domain names. We find this misleading, but it gets worse — many of the big providers are morally bankrupt.

We made our VPN as affordable as possible, whilst also delivering premium-level performance. Unlike conventional providers, we don't make our 1-month plan ridiculously expensive just to make the 2-year plan look like a better deal, just to lock you in. Instead, we make our 1-month plan more affordable than most long-term plans from other providers, so that you're free to change providers anytime.

Each subscription comes with 6 passes (named after random Pokémon). 5 of those are regional passes. These connect you to a server in the region you chose for your subscription. These are hosted on Akamai (Linode) infrastructure. This is for general use, or when optimal latency is needed. You will also receive 1 grandline pass. This is hosted on OVH. This is for when torrenting is needed, or anything requiring large transfers at high speeds (but increased latency).

Each server is like a building that we lease. While we don't see, collect, or store any logs on the activity that happens inside the building, the building owner (infrastructure provider) typically keeps ambient network-flow connection logs. This is the case for both Akamai (Linode) and OVH (and most providers). This is like a CCTV camera on the street that sees the entrance and exit of the building. When the building is being used by many people, your traffic is mixed in the crowd, which makes it hard for the building owner to correlate an inbound connection with an outbound connection. But correlation is still possible during times of low traffic. So under some conditions it is possible for our infrastructure provider to correlate a domain name visit to your IP address, if they are specifically pressured.

For transparency, while we are zero-logs, our infrastructure providers are not, but this is typically not an issue for most cases. For users who want extra assurance, we will soon be adding at least 1 asgard pass to our subscription offering. This will be hosted on 1984 Hosting in Iceland - a longstanding privacy focused provider who also has a zero logs policy. This is for an added layer of privacy (but slower speed and latency). Coming soon.