When looking for a no-logs VPN, don’t treat a marketing claim as proof. Compare what data the service processes, how long it keeps it, who can access it, and what information you can avoid sharing. An account that doesn’t require an email address means sharing less account information, but it doesn’t prove that connection records aren’t kept. Payment methods and encryption also need to be assessed separately.
No-logs: Know what data is covered
“Logs” aren’t a single file. Browsing records may include domains visited, destination addresses, and request content. Connection metadata may include your source IP, connection times, exit server, and data transferred. Account data can include usernames, payment records, and support conversations. A service saying it “doesn’t log browsing activity” doesn’t automatically mean it doesn’t process other types of data.
Usage tracking may be needed for data-based billing, but measuring traffic doesn’t require keeping a record of every visit. When reviewing a privacy policy, check the level of detail collected, whether it’s linked to an account, and how long it’s retained. Don’t assume that traffic-based pricing means every visit is logged—or that it means no logs are kept at all.
| Data category | Typical data | What to check |
|---|---|---|
| Browsing records | Domains, destination addresses, request content | Does the policy specify each type of data that isn’t recorded? |
| Connection metadata | Source IP, connection times, server | Is it stored, for how long, and is it linked to an account? |
| Usage data | Data transferred, remaining data | How detailed is the tracking, and when is the data deleted? |
| Accounts and transactions | Username, orders, payment status | What does the service retain, and what does the payment provider retain? |
| Diagnostic data | Error logs, device information, feedback attachments | Is it submitted automatically, and can users control it? |
When comparing services, keep a copy of the policy rather than relying on the “no logs” label. If it explains browsing data but says nothing about connection metadata, that part remains unverified. Don’t fill in the gaps by assuming a stronger promise.
Verify the claims: Check policies and evidence
Start by checking which operator the privacy policy applies to and whether it covers the client, servers, and website you use. Website analytics and network connection services may handle data differently. A statement about one app version may not apply to other clients.
- ✅ Look for specific data categories, purposes, retention periods, and deletion methods—not just a broad statement.
- ✅ Check what infrastructure providers, payment services, diagnostic tools, and other third parties can access.
- ✅ Check when the policy was last updated and how to request access, correction, or deletion of your data.
- ✅ If the service cites an audit, review its scope, date, and limitations—not just the audit badge.
- ✅ Treat anything not publicly explained as “unconfirmed” and ask specific questions.
An independent audit can provide more verifiable information, but it usually covers a specific period and scope. Reviewing client code doesn’t replace checking server logs, and a server review doesn’t cover payment providers. This article does not claim that VPNSize has received a third-party audit, nor does it treat unpublished logging details as confirmed facts.
Accounts and payments: Share less by default
VPNSize doesn’t require an email address. Create an account with a username and password. This reduces the direct link between your email and service account, but reusing a public username from another platform may still make that link easier to establish. Choose a unique username and use a password manager to create a password you don’t use elsewhere.
An account that doesn’t require an email address also means you shouldn’t assume you can recover it by email. Before getting started, check the recovery options in the panel and keep any necessary credentials safe. When contacting support, share only what’s needed to identify the issue—never send your password, full subscription link, or unrelated transaction details.
VPNSize supports Alipay, WeChat Pay, and USDT. Choose a payment method based on convenience, transaction traceability, and your own preferences. USDT transfers on major public blockchains are generally searchable, and exchanges may retain account information. Paying with USDT doesn’t automatically break the link between your identity, wallet address, and payment order.
Subscriptions and clients: Protect access credentials
If your client requires an imported subscription, treat the subscription link as an access credential. It may contain a token that identifies your account or permissions; anyone with the link could access its configuration or use related resources. Don’t share the full link with public conversion sites, discussion forums, or screenshots of an issue.
- Get clients from trusted sources and verify the publisher, update source, and requested permissions. VPNSize’s client downloads are available in the user panel.
- Make sure the client supports the protocol you plan to use before importing a subscription. Similar names don’t mean the formats are compatible.
- Review routing modes, DNS settings, and diagnostic upload options. Don’t copy a complete configuration from an unknown source.
- After importing, check that the intended apps use the expected route before enabling automatic connection.
- If a link has been exposed, check whether the panel lets you reset it. If you’re unsure, contact support; deleting a public post alone doesn’t invalidate the credential.
Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC refer to different proxy protocols or implementations. Their transport and encryption settings vary, but a protocol name alone doesn’t prove that a service keeps no logs. A third-party client supporting a protocol also doesn’t mean VPNSize offers it; check the panel and service documentation.
Windows and macOS clients may offer system proxy or virtual network interface modes, while iOS and Android handle network extension permissions and background activity differently. A “Connected” indicator only reports a connection state; it doesn’t prove that all app traffic uses that connection.
Public Wi-Fi: Encryption and leak checks
On public Wi-Fi, first confirm that the network is legitimate, then complete any required sign-in. If a page asks you to install an unknown root certificate, device management profile, or app from an unverified source, stop and check before proceeding. A VPN connection doesn’t make a suspicious installation request trustworthy.
VPNSize uses “military-grade encryption” as a key security marketing claim. To understand what it protects, look at the actual scope: encryption primarily protects traffic along the relevant path between your device and the service’s exit point. It doesn’t replace HTTPS on the destination website or stop you from submitting information to a fake page.
How to check for DNS leaks
A DNS leak generally means that domain lookups that should follow an expected route are being sent to a different resolver. Whether that’s a problem depends on your routing rules: using local DNS for domains set to connect directly may be intentional. Not every local DNS result indicates a fault.
Note your exit IP and DNS results before connecting, then connect to the service and compare them using a network test and a DNS leak testing tool. Testing sites can access network information, so choose one you trust. A changed exit IP doesn’t prove that DNS is following the expected route, and normal-looking DNS results aren’t comprehensive proof of privacy.
If the results aren’t what you expect, check the client’s DNS settings, your browser’s Secure DNS settings, system resolver configuration, and routing rules—in that order. Change one setting at a time and test again. Browser-encrypted DNS may use a different route from the client, so check your configuration rather than disabling it by default.
Can you still connect after the VPN drops?
Some clients offer a kill switch, but its name and coverage vary. If this matters to you, test it during non-sensitive activity: disconnect and check whether the app can still connect directly. Also check what happens when the network changes or the device wakes from sleep. Until you’ve tested it, don’t assume the system icon means the kill switch is working.
Split tunneling and routes: Know what is protected
Split tunneling sends traffic to different destinations over different routes. This can help balance access to local services and international websites, but traffic set to connect directly won’t use the proxy connection. Global proxy mode usually covers more traffic, but may not affect apps that ignore the system proxy. Virtual network interface modes can also be affected by exclusions and system behavior.
When choosing a server, IEPL, relay, and direct connection describe how a route is organized; they don’t indicate a logging policy. A dedicated line may be used for a specific segment, but that doesn’t mean the entire path from your device to every destination is dedicated. Check route labels, exit regions, privacy policies, and client settings separately.
Websites can still identify your account after you sign in. Cookies, browser fingerprinting, and account activity don’t disappear just because your exit IP changes. To reduce linkability on the website side, also manage browser permissions, sign-in status, and site data instead of relying on a route change alone.
Data usage: Choose a plan and check the details
Once you’ve clarified your privacy needs, choose a data allowance based on how often you use the service. VPNSize monthly plans are ¥9.9/month for 60GB, ¥18/month for 250GB, and ¥28/month for 500GB. Data resets monthly on the activation date; mid-cycle upgrades are prorated for the remaining days. Choose a tier based on your actual usage—you don’t need a larger allowance for privacy.
For occasional use, compare data packages: ¥158/300GB, ¥358/1000GB, and ¥658/3000GB. Data doesn’t expire and is available until used. This service has no device limit, but check routing and permissions on each device. Correct settings on one device don’t verify the others.
VPNSize offers a 14-day no-questions-asked refund. The refund policy can help you evaluate the service, but it isn’t evidence of a no-logs policy. During testing, check connection behavior, data usage, and privacy settings—not just whether websites load. Ask for clarification on data handling that hasn’t been publicly explained before drawing conclusions.