An encrypted tunnel, not a proxy
Everything your device sends is wrapped in ChaCha20-Poly1305 and carried over UDP to a gateway that decrypts it and sends it on.
No logs. Not won’t — can’t.
Most VPNs promise not to keep logs. This one is built so the servers carrying your traffic are never told who you are — so there is nothing to keep, and nothing to hand over. Fast, encrypted, one price, and the tunnel stays up even if we go down.
Why this one
Privacy you can check, not just believe.
Every VPN says it keeps no logs. Here is what that means when it is engineered in rather than written down.
Your name never reaches the servers that carry your traffic.
A connection is authorised by an 89-byte credential — a validity window, a plan tier, a signature. No account, no email, no device ID. Not redacted: there is no field for it. How it works.
Nothing to hand over.
Our servers keep counters — packets, bytes, handshakes — and have nowhere to write a source address, a peer or a destination. A request for your history is answered with a schema, not a refusal. Exactly what we keep.
Stays up when we go down.
Once your tunnel is established it does not depend on our sign-in systems, or on the app window being open. An outage on our side does not expose you.
One price. No renewal trick. Nothing bundled.
What you pay in month one is what you pay in month forty. No introductory rate, no antivirus upsell, no countdown. Use it on every device you own — there is no cap.
How it works
What happens when you press the dial.
Four steps, on a loop. The part to watch is what each box is told.
- 1You sign in, and the app is issued a credential: a plan tier, an expiry, a signature. No name in it — not hidden, absent.
- 2The app shows that credential to the server that will carry your traffic. The signature checks out; the tunnel comes up. The server never learns who you are.
- 3Traffic flows. The server keeps counters — packets, bytes — and has no field for where they went.
- 4If our sign-in systems go dark, your tunnel keeps running. They were never in the path.
Who sees what
Who can see what.
Most VPN privacy pages are a list of adjectives. This is a list of parties and facts, and where the answer is “partly”, the note says which part.
| Fact | Your deviceThe app and the service | NemeanSign-in, billing, and the servers that carry traffic | Site you visitThe other end |
|---|---|---|---|
| Your email address | Yes | PartlySign-in knows it — it is your username. The servers that carry your traffic are never told it; there is no field for it in what the app presents. | No |
| Your home IP address | Yes | PartlySeen when you sign in, as any website sees it, and while you are connected, because that is where the packets come from. Nowhere to record it against your account. | NoSees one of our addresses, shared with everyone else on it. |
| What you visit | Yes | PartlyForwards each packet to its destination and keeps no record of it. The counters have no field for one. | YesSees the visit, from our address. |
| That you have an account | Yes | YesSign-in, yes. The servers that carry your traffic see a valid credential — a tier and an expiry — and not whose. | No |
| What is inside your traffic | Yes | PartlyUnwraps the tunnel layer. What is inside — HTTPS, for most things — stays encrypted to the site. | YesAs it always has. |
What it does
What you get.
Shipped and in the app today. The features page has the full list.
Credentials that carry no identity
The gateway checks an 89-byte signed credential that says "entitled until this time" — and nothing about who you are.
Your password never enters the app
The app opens your browser to sign in, and gets back a session of its own. It never sees what you typed.
The tunnel keeps running
Once connected, your session does not depend on our sign-in systems, or even on the app window being open.
Isolated from other users
One customer on a gateway cannot reach another, or the gateway itself, by construction.
All your devices
One account, every device you sign in on. There is no device cap to count against.
Compared
Against the ones you have heard of.
On the things you can check from the outside.
| Fact | Nemean | NordVPN | ExpressVPN | Mullvad | Proton VPN |
|---|---|---|---|---|---|
| Renewal price is the sign-up price | YesOne price. No introductory rate. | NoMulti-year upfront, then renews at a higher rate. | NoMulti-year upfront, then renews annually at a higher rate. | Yes€5 a month, unchanged since 2009. | NoDiscounted multi-year terms; renews at the standard rate. |
| “No logs” built in, not just promised | YesThe servers carrying traffic are never told who you are; counters have no field for a destination. | PartlyA policy, with third-party assurance reports. | PartlyA policy, with audits and RAM-only servers. | PartlyNumbered accounts and a candid policy; still a policy. | PartlyA policy, audited annually. |
| Devices on one account | YesUnlimited. | Partly10. | Partly8 to 14, by tier. | Partly5. | Partly10. |
| Just a VPN — nothing bundled to justify the price | YesTwo plans. The only difference is locations. | NoFour tiers: antivirus, password manager, storage, identity products. | NoThree tiers: password manager, identity tools, AI chat, eSIM. | YesA separate browser, free. | PartlyPart of a mail/drive/password suite. |
| No countdowns, “limited offers” or strike-through prices | Yes | No | No | Yes | PartlyPercentage-off badges on longer terms. |
| Tunnel stays up if the provider’s account systems fail | YesBy design: nothing on the connection path consults them. | PartlyNot stated. | PartlyNot stated. | PartlyNot stated. | PartlyNot stated. |
| Phone apps | NoPlanned. Windows, macOS and Linux today. | Yes | Yes | Yes | Yes |
Pricing
Two plans. The price is the price.
No introductory rate that triples on renewal, no coupon, no countdown. What you pay in month one is what you pay in month forty.
Standard
The whole product. Every feature, every device, the standard locations.
$5/ month
Billed $5 every month. Or $48 a year — $4 a month.
- Every standard location
- Windows, macOS and Linux apps
- Use it on all the devices you sign in on
- Full or split tunnel, IPv6 fail-closed
- Two-factor authentication on the account
Premium
Everything in Standard, plus the premium locations.
$8/ month
Billed $8 every month. Or $72 a year — $6 a month.
- Everything in Standard
- Every location, including premium ones
Start with the app
An account takes a minute; the app takes another. We are early and say so — the about page lists exactly where things stand.