How CoastVPN works

What we do not log

• Websites you visit or traffic content through the tunnel.
• DNS queries you make through the tunnel.
• Connection durations or bandwidth usage tied to your identity.

What we store

• Your email, name, and password hash for authentication.
• Sign-in records with timestamps and, for security, the IP address and user agent your browser reports.
• VPN devices you provision: a name, its generated public key, and the internal IP address we assign.
• Subscription status from Stripe or Apple needed to grant access.

What our gateways see

To route your encrypted traffic, each gateway processes the destination of every connection. We do not write that information to disk. We retain daily upload and download byte totals per account and device counter checkpoints for bandwidth accounting. Authorized administrators can view daily, weekly, monthly, and cumulative usage. These records contain no browsing destinations, DNS queries, or traffic content and are deleted with your account.

Keys stay on your device

Tunnel keys are generated on your device. Only public keys ever reach our servers, so your private key never leaves your device.

Processors

• Stripe processes web payments.
• Apple processes in-app subscriptions and Sign in with Apple.
• Google is offered as a sign-in option.
• Resend delivers transactional email.
• PostHog processes anonymous, cookieless page-view analytics with client IP addresses discarded.

Regions and protocols

CoastVPN currently operates gateways in the United States East and West. Both support AmneziaWG and Hysteria 2.

Retention and deletion

You can delete your devices at any time. Deleting your account removes your profile, sessions, devices, and billing records. We keep a minimal record of past email sends to prevent mailer abuse. See the privacy policy for details.