CactusVPN VPN Privacy & No-log

CactusVPN's no-log policy

The privacy story on CactusVPN begins with the precise scope of what the provider states it does not record. CactusVPN states a strict no-log policy: it keeps no activity logs (sites visited or apps used), no traffic logs (the content you send and receive), no connection logs (session start and end times) and no source IP logs. With none of these stored, there is no per-user activity history to hand over even if it is requested.

It is worth understanding that "states" is the operative word: this is CactusVPN's own policy, and at present there is no public independent audit confirming it. Read it as a policy commitment rather than a verified result.

• No activity or traffic logs of the user
• No connection or source IP logs
• A stated policy (no public audit yet)

Jurisdiction & 14 Eyes

What makes CactusVPN's privacy position especially interesting is its base in Moldova — a small Eastern European country that sits entirely outside the 5 Eyes, 9 Eyes and 14 Eyes surveillance alliances. That means CactusVPN is not subject to the automatic cross-border intelligence-sharing pacts that bind providers headquartered in the US or UK, which is a genuine jurisdictional advantage that belongs to CactusVPN itself.

That said, a favourable jurisdiction is only half the equation. The location eases legal and disclosure pressure, but what actually protects a user is having no data to surrender under the no-log policy above. The two should always be considered together rather than relying on either alone.

Anonymous payment

To keep your identity tied to the account as little as possible from the moment you sign up, CactusVPN offers several payment routes: credit card, PayPal and cryptocurrency (including Bitcoin). For users who weigh privacy heavily, paying in crypto cuts the financial link between your real identity and the VPN account far more effectively than a card transaction, which is tied to your name and bank.

Leak protection

However strong the policy is, it is meaningless if your IP or DNS leaks outside the encrypted tunnel. CactusVPN addresses this with a kill switch that cuts internet access the instant the VPN connection drops, and DNS leak protection that forces DNS queries through the tunnel rather than your ISP's resolver.

A leak-protection feature specific to CactusVPN is Applications, often called the App Killer. You pre-define a list of sensitive apps — a browser or torrent client, for example — and if the VPN drops, the system shuts those apps down in addition to cutting the connection. This reduces the chance an app keeps transmitting data during the brief window when the tunnel is gone. After connecting, it is still good practice to test at dnsleaktest.com and disable WebRTC in the browser for an additional layer.

• Kill switch that cuts the connection if the VPN drops
• DNS leak protection forcing DNS through the tunnel
• Applications (App Killer) closes specified apps automatically

Encryption

For encryption, CactusVPN applies industry-standard ciphers on a per-protocol basis: AES-256 on OpenVPN and IKEv2, and ChaCha20 on WireGuard. This is a modern, robust set that is more than sufficient to protect everyday traffic. Users who prioritise speed on mobile tend to choose WireGuard with ChaCha20, while those who want the broadest compatibility can fall back to OpenVPN with AES-256.

Good privacy practice

A good tool still needs good habits. When using CactusVPN, keep the kill switch enabled at all times, configure the Applications (App Killer) list to cover your sensitive apps, choose crypto payment if you want to reduce identity linkage, and avoid logging into name-linked accounts during sessions where privacy matters most.

• Always enable the kill switch and set up App Killer
• Pay with crypto to reduce identity linkage
• Test for DNS/IP leaks regularly