A privacy-first VPN built from the ground up to minimize what we know about you. No email required. No browsing history retained. Verified by design.
Your client derives Curve25519 keypairs locally using RFC 7748 Montgomery ladder clamping. The private key never leaves your local Windows DPAPI encrypted vault.
You enroll via an anonymous 16-digit Account ID. The Control Plane API receives only your Public Key to lease a private 10.64.0.0/16 tunnel address.
Edge nodes run kernel WireGuard with MSS PMTU clamping and BBR congestion control. Relays operate entirely in RAM with volatile zero-logging rules.
Commercial VPNs make ridiculous claims of "100% untraceable anonymity". Here is the exact technical reality of what happens when you use AetherVPN.
| Information Category | AetherVPN Policy | Technical Enforcement Mechanism |
|---|---|---|
| Browsing & Destination History | ✗ Strictly NEVER Stored | Zero DNS query logging; kernel packets are forwarded directly to transit interfaces without packet logging. |
| DNS Queries & Resolution | ✗ Strictly NEVER Stored | Internal tunnel DNS resolver (10.64.0.1) runs with no query caching to disk. |
| Connection Timestamps & IPs | ✗ Strictly NEVER Stored | No persistent connection logs mapping incoming customer IP addresses to connection timestamps. |
| User Profile (Email, Name, Phone) | ✗ Not Collected | Account identifier is a randomly generated 16-digit token (7391-4288-1952). No personal information required. |
| Subscription & Device Quota | ✓ Operational Storage | Subscription tier (Free vs Plus) and active registered public keys (up to 5) to enforce multi-device limits. |
| Server Fleet Health | ✓ Aggregate Telemetry | Total node bandwidth, CPU utilization, and latency probes to recommend the fastest servers. |
A fast, sleek client designed to protect your network without clutter or friction.
Enforces local Windows Firewall rules that instantly block outgoing traffic if the VPN tunnel drops unexpectedly, eliminating silent IP leaks.
Monitors tunnel interface state. If transient network blips drop your connection, the client automatically initiates exponential backoff reconnects.
Intercepts all local UDP/TCP port 53 DNS queries and forces them into the WireGuard tunnel to prevent ISP DNS hijacking.
Real hardware network counters measure sent, received, and throughput rates in real time without simulating fake numbers.
View all enrolled laptops, phones, and tablets from your desktop app. Revoke a single lost device with one click without resetting your account.
Inspect exactly what events the client logs. Export clean, sanitized diagnostics that redact private keys and destination websites.