How Tarn works

Your traffic is encrypted before it leaves your device

Everything you send goes through an encrypted tunnel between your device and one of our servers. Your internet provider, your mobile carrier and whoever runs the Wi-Fi you are on can see that you are connected to us. They cannot see which sites you visit, what you type, or what you download.

Websites see our address, not yours

Sites and services see the address of the Tarn server you chose, along with everyone else using it. Your home or mobile address is not part of the request, which is what stops the routine background profiling that follows an IP around the web.

It keeps working where VPNs are blocked

Many networks — hotel Wi-Fi, corporate firewalls, some countries — actively look for VPN traffic and block it. Tarn disguises the connection so it is difficult to tell apart from ordinary encrypted web browsing, which is why it usually keeps working when other VPNs simply stop connecting.

We are not going to publish the specifics of how. Anything we describe in detail here is something a filtering vendor can build a rule against, and that would make the product worse for the people who need it most.

We hold nothing about what you do

Our servers keep only what is needed to route your traffic in the moment, and none of it is written down as history. There is no connection log, no DNS log and no per-account bandwidth record. The no-logs policy lists precisely what exists and what does not — it is specific, because a vague promise is worth nothing.

Your account is a key, not an identity

Signing up produces a licence key and nothing else. We do not ask for an email address or a name, and payment is crypto only, so there is no billing record tying the account to a person. We could not identify you if we were asked to.