kemangVPNBlog · 18 Sept 2026
VPN Logging Policies: What VPN Providers Actually Record
No-log claims are often made without explanation. Here is what data a VPN provider can record, and how to judge their claims critically.
Almost every VPN service claims to be "no-log". But the term has no standard definition, and it means different things from one provider to the next. This article explains what kinds of data can be recorded, so you can judge anyone's claims critically, including ours.
Why you should care
Using a VPN means shifting trust. Without a VPN, your ISP can see which sites you visit. With a VPN, your ISP can no longer see that, but the VPN provider technically can.
You are not removing the party that can see your traffic; you are choosing which party you trust. So the question is not "can they", but "what do they keep, and why".
Types of data that can be logged
Activity logs
Records of the sites you visit, the services you use, and the content of your traffic. This is the most sensitive category. A provider that keeps this essentially replaces your ISP as the party that knows what you do online. Services that take privacy seriously do not keep it.
Connection logs
Records of when you connected, for how long, from which IP address, to which server, and how much data you used. They do not include the content of your activity, but the combination of timestamps and IP addresses can still link a particular session to a particular person.
Some providers keep this temporarily for operational purposes and then delete it. What matters is how long it is kept and what it is used for.
Aggregate data
Totals that are not tied to any individual user, such as load per server or the number of sessions. This is common, needed to maintain service quality, and generally does not raise privacy concerns.
Account data
Email address, payment history, support tickets. Every subscription service keeps this, because without it your account cannot be managed. It is separate from your internet activity.
How to judge a no-log claim
- Read the privacy policy, not the marketing page. The homepage says "no-log"; the privacy policy explains what is actually stored. If the two contradict each other, the privacy policy is what counts.
- Look for specifics. A good policy states what data is kept, for how long, and for what purpose. General statements without detail are not a guarantee.
- Notice what is left unsaid. "We do not log browsing activity" is not the same as "we do not log anything".
- Be wary of free services. Running servers and bandwidth costs money. If you are not paying, consider how those costs are being covered.
Where kemangVPN stands
We do not log our customers' browsing activity: there are no records of the sites you visit or the content of your traffic. What we do keep is the account data needed to manage your subscription: your email, payment history, and support conversations.
You can read the details yourself in our Privacy Policy. We encourage you to read it, and to read the policies of any other provider you are considering just as critically.
About kemangVPN
kemangVPN is a subscription VPN service built for Indonesia: 84 servers in 45 countries including Jakarta, AES-256 encryption, no activity logging, and 10 devices on one account.
Plans start at US$3.99 a month, paid via PayPal; rupiah payments (QRIS, bank transfer) are available when you order in IDR. Activation is instant once payment is confirmed, with a 7-day money-back guarantee.