Free vs paid VPN in the UK
When a “free VPN” is fine – and when it quietly turns your data into the product.
No-logs VPN in 2025: marketing slogan or real privacy?
Quick answer: a genuine no-logs VPN does not keep activity logs that could link your real IP to browsing history, DNS requests or traffic content. It may still collect minimal technical data (like total bandwidth per server), but this must be anonymised, aggregated and regularly wiped.
If you scroll through VPN websites, almost all of them shout “strict no-logs policy”. The problem is that no-logs is not a protected legal term in the UK. One provider means “no usage logs”, another means “we log, but only for 24 hours”, and a third one quietly collects device IDs for advertising.
In this guide we’ll break down what no-logs should mean in practice, which data is most sensitive, how RAM-only and diskless servers help, and how you – as a normal user in the UK – can verify whether a VPN’s promise is more than a landing-page buzzword.
What a no-logs VPN should (and shouldn’t) collect
Key takeaway: ignore vague marketing phrases. Look specifically for what the provider says about connection timestamps, source IPs, browsing history, and DNS queries – that’s where the real privacy risk lives.
A VPN always sees some information about your connection. Technically it can’t work without it. The important question is: does the provider record that data on disk in a way that can later identify you?
| Data type | Safe for a no-logs VPN? | Why it matters |
|---|---|---|
| Real IP address & exact timestamps | No – must not be stored long-term | Allows correlation: “IP X used VPN at 20:14, same minute as torrent traffic on exit IP Y”. |
| Visited domains / URLs (HTTP/HTTPS) | No – never acceptable for a no-logs claim | Effectively a complete browsing history tied to your account. |
| Aggregate bandwidth per server | Yes, if anonymised | Needed for capacity planning and detecting abuse; no link to individuals. |
| Crash logs on client device | Yes, if optional & anonymised | Helps fix bugs; should never contain full URLs or personal identifiers. |
| Payment email / billing data | Yes, stored separately | Billing law requires some records, but they shouldn’t be technically linked to traffic logs. |
Some providers quietly log connection metadata “for performance and security”, which can still be enough to deanonymise you in the wrong hands. That’s why a serious no-logs VPN clearly states what is not collected, not just what is.
Honest moment: if any VPN’s privacy policy is only two paragraphs long and screams “we respect your privacy” without details, I close the tab immediately.
If you’re new to VPNs in general, it’s worth scanning our intro guides “What is a VPN?” and “Free vs paid VPN” before obsessing over log types.
Short video: VPN privacy explained in plain English
Key takeaway: the main job of a VPN is to separate who you are (your IP, location, ISP) from what you do (sites you visit, apps you use). A proper no-logs policy stops that bridge from being rebuilt later.
If the embed doesn’t load, you can watch the video directly on YouTube: What is a VPN and do I need one? – simple explanation .
How modern no-logs VPNs prove their claims
Key takeaway: don’t just trust the words “zero logs”. Look for independent audits, RAM-only servers, clear jurisdiction and, ideally, real-world court cases where no data was handed over.
Luckily, 2025 is much better than 2015 in terms of transparency. Reputable providers combine several mechanisms to back up their slogans:
- Independent audits – external firms review configuration, logging systems and sometimes even source code.
- RAM-only (diskless) servers – the entire runtime lives in volatile memory; reboots wipe everything.
- Configuration as code – identical, centrally managed server images make it harder to “forget” a rogue log file on one node.
- Colocation and owned hardware – fewer third-party data centres touching the equipment.
- Public transparency reports – number of data requests received vs. what could actually be provided (ideally: nothing identifiable).
When you see constant marketing around “no-logs”, but none of the points above, that’s a red flag. In that case, your data protection is effectively “trust us, bro”.
Providers like NordVPN and Surfshark combine audited policies with RAM-only infrastructure, which is why we usually recommend them as starting points instead of random “100% free lifetime VPN” services from app stores.
Want a practical starting point?
If you don’t want to spend weeks comparing providers, start with one audited no-logs VPN, test it on your own devices and keep an eye on leak tests and performance.
Small disclosure: if you subscribe via these links, VPN World may earn a commission – without changing your price. It helps keep this project independent and ad-free.
7-point checklist: is this VPN really no-logs?
Key takeaway: treat VPN marketing pages like a job interview. Ask hard questions, verify with independent sources, and always assume that “free & unlimited” comes with a data-harvesting catch.
Use the table below like a mini due-diligence sheet before committing to a long subscription. It’s the same process we use when researching tools for guides such as best free VPNs in the UK.
| Question | What you want to see | Red flag |
|---|---|---|
| Independent audit? | Recent technical or no-logs audit by a known firm; report publicly referenced. | “We’ve been audited” with no names, dates or links. |
| Policy on activity logs? | Explicit “no browsing history, no DNS queries, no traffic content”. | Generic wording like “we care about your privacy” with no detail. |
| Connection metadata? | Minimal, aggregated data with clear retention period (e.g. 24 hours, aggregated stats). | Full timestamps and IPs stored for “fraud prevention” without limits. |
| Infrastructure? | RAM-only servers, config as code, owned or tightly controlled hardware. | Old shared servers, vague “trusted partners”, no mention of reboots or wiping. |
| Jurisdiction & data requests? | Country openly stated; transparency reports with “no logs available to hand over”. | Completely silent on law enforcement requests and data retention obligations. |
| Client telemetry? | Optional, opt-in, clearly documented; never includes URLs or DNS data. | Always-on analytics / advertising IDs with no opt-out. |
| Track record? | No major scandals involving handing over logs that “didn’t exist”. | Past incidents where activity logs appeared despite “no-logs” claims. |
Once you’ve gone through this checklist, run a few technical tests yourself:
- Leak tests: with the VPN connected, visit an IP / DNS leak test and confirm that your DNS requests don’t go through your ISP.
- Public Wi-Fi check: connect to a café hotspot and repeat the tests – see our VPN for public Wi-Fi guide for details.
- Speed tests: make sure the combination of protocol (WireGuard / NordLynx) and a nearby server still gives usable latency.
It sounds like a lot of work, but you only have to do this properly once or twice. After that, you’ll spot weak “no-logs” claims in seconds.
FAQ: common questions about no-logs VPNs
Is any VPN completely log-free?
Realistically, no. Every network service needs some operational data. The key is that none of it should be detailed enough to reconstruct your individual activities. Look for providers that clearly separate billing data from network systems and explain exactly what’s collected and for how long.
Do UK data retention laws affect foreign VPNs?
If a VPN has infrastructure or a legal presence in the UK, local laws may apply to that entity. Many privacy-focused services choose jurisdictions with less aggressive data retention requirements, but that doesn’t magically exempt them from all international cooperation. Logging nothing useful remains the most robust defence.
Is a no-logs VPN enough to stay anonymous?
Not on its own. Browser fingerprinting, account logins, cookies and behaviour patterns can still reveal who you are. Think of a no-logs VPN as a strong privacy layer that should be combined with basic hygiene like unique passwords, 2FA (see our VPN + 2FA guide) and a sensible browser setup.
Should I use a free no-logs VPN instead of a paid one?
There are a few legitimate free tiers, but almost all truly free VPNs monetise data one way or another. If you’re serious about privacy, a limited but transparent paid plan is usually the safer bet than a mysterious “no-logs” free app.
Related VPN World guides (EN-GB)
How to check your VPN for DNS leaks
Step-by-step DNS & IPv6 leak tests to make sure nothing escapes the tunnel.
Using a VPN on public Wi-Fi
Practical checklist for cafés, hotels, airports and trains in the UK and abroad.
Disadvantages of VPNs
Situations where a VPN can actually break things – and how to fix or avoid them.
About the author
Denys Shchur is the creator of VPN World, focusing on practical, test-driven guides about VPNs, online privacy and secure remote work. He spends far too much time running speed tests and checking for DNS leaks, so you don’t have to.