JaguarVPN logo

What is a VPN provider?

A VPN provider is the company operating the servers your traffic goes through — which makes choosing one a question about the company, not the technology. Whichever provider you use can see the traffic leaving their end, so what matters is their logging policy, their jurisdiction, and whether anyone has audited it.

What you are actually choosing

Nearly every VPN comparison is about features: server counts, protocols, streaming support, price. Those matter for whether the product works. None of them is the decision.

The decision is this. A VPN moves the party who can see your browsing — it does not remove one. Without a VPN, your internet provider sees every destination. With one, they do not, and your VPN provider does, because the tunnel ends at their servers and traffic leaves from there.

So "which VPN should I use" is really "whom would I rather have in that position". That is a question about a company: what it records, where it is incorporated, whether anyone independent has checked, and whether it can be held to anything.

No amount of encryption changes it. The cryptography protects your traffic from everyone between you and the server, and is not intended to protect it from the server.

What to check, in order of how much it tells you

CheckWhy it mattersWhat good looks like
Independent auditThe only external check on a no-logs claimA named firm, a published report, a date within a year or two
Who the company isAn accountable entity can be held to its policyA registered company with an address and identifiable directors
Transparency reportShows what happens when authorities askRequests received, and what was actually produced
What the policy says it keeps"No logs" is a slogan; the policy is the commitmentExplicit about connection records and timestamps, not just "browsing"
JurisdictionDetermines which orders they must comply withGenuinely relevant, and less decisive than marketing suggests
Does the client leak?An honest policy does not fix a leaky appTest it: DNS, WebRTC

That last row is the one you can verify yourself in two minutes, and it is the one nobody does. A provider can have a spotless policy and a client that sends DNS queries outside the tunnel, in which case your internet provider still has the list.

On free providers

Servers, bandwidth and staff cost money. A service that charges nothing is being funded some other way, and the question is simply which.

The documented answers, historically, have included selling browsing data to analytics brokers, injecting advertising into pages, and — in cases that reached the press — routing other people's traffic through subscribers' own connections, so users unknowingly became exit nodes for strangers.

A free tier from a company with a paid product is a different proposition. The business model is visible: free users are a funnel, and the incentive is to convert them rather than to monetise them some other way. That is worth distinguishing from a service whose only product is the free one.

Being clear about our own position

This page is on a VPN provider's website, so it is fair to be direct about what that means.

JaguarVPN is operated by Stacklab X Ltd, a company registered in the United Kingdom — number 16537732 — and you can read what we record, our transparency report, and how we handle law-enforcement requests. Apply the checks above to us as readily as to anyone else; a provider that objects to being audited against its own criteria has told you something.

And the honest bottom line, which is the same for every provider including this one: using a VPN means choosing whom to trust with the position your internet provider used to hold. That should be a deliberate choice, made on evidence, rather than a decision about which brand had the better advertisement.

Related questions

Can my VPN provider see what I do?

They are in a position to, and that is a structural fact rather than an accusation. Traffic leaves their servers in the clear as far as the destination is concerned, so whoever runs those servers occupies exactly the position your internet provider held before. What stops them is policy, architecture and consequence — a stated no-logs policy, systems built so there is nothing to log, and an independent audit confirming it. Encryption does not stop them, because the tunnel ends at them.

What does a no-logs policy actually mean?

It should mean the provider does not record which sites you visit or which addresses you connected from, and that their systems are built so those records do not exist to be handed over. Most keep some operational data — concurrent connections, total bandwidth — which is reasonable and is not browsing history. The claim is worth roughly what the evidence behind it is worth: an independent audit, or a court case where the provider was ordered to produce records and genuinely had none.

Does the provider’s country matter?

Somewhat, and less than it is usually made to sound. Jurisdiction determines which legal orders a provider must comply with and whether they can be compelled to start logging a specific user. It is a real consideration. But the "14 Eyes" framing that dominates VPN marketing implies a level of routine, automatic data sharing that does not match how those arrangements work, and a provider with genuinely no logs in a cooperative jurisdiction is in a stronger position than one with logs in a permissive one.

Are free VPN providers safe?

Servers and bandwidth cost real money, so a free service is being paid for somehow. Historically that has meant selling browsing data, injecting advertisements, and in several documented cases routing other people’s traffic through subscribers’ connections. A free tier offered by a company with a paid product is a different proposition, because the business model is visible and the free users are a funnel rather than the product.

How do I verify a provider’s claims?

Look for an independent audit by a named firm with a published report and a recent date — not a badge. Look for a transparency report covering data requests received and what was produced. Check whether the company is identifiable: a registered entity with an address and directors is accountable in a way an anonymous brand is not. And test the product yourself for leaks, because a provider that is honest about policy can still ship a client that leaks DNS.

Where to go next