Who operates the service
CyberGhost S.R.L. operates the service from Romania.
The policy states that it does not retain browsing/activity records or VPN connection logs tied to source IP, timestamps, or session duration. Account and contact details for subscription administration and support. The policy lists name, address, email, username, and payment information. Payment processors handle card data. CyberGhost separately discloses transaction, billing-method, partial-card, cancellation, chargeback, and fraud records.
Read the privacy policy ↗
What the audit covers
Deloitte Audit S.R.L. · 2025-12-19: VPN and supporting IT-system configuration, operating safeguards, access/change/configuration/incident management, and sampled deployment processes. Disclaimer says prepared for management;third-party duty of care is disclaimed.
An audit concerns the systems and period described in its scope. It does not establish that a service can never log data or that every app behaves identically.
How to read an audit