No history to
hand over.
A VPN under Czech law with no logs, nothing written to disk, and a sole trader you can look up in the public register. Pevnost is Czech for fortress. Private beta.
Nothing on disk.
Our VPN nodes will run entirely from memory. The disk holds only our public, published boot image and is never written to. Power the machine off and nothing of any session remains.
Approved by hand.
A node receives its WireGuard keys only after we approve it against the published image hash, after every single boot. An unexpected reboot is an incident, not a restart. Remote attestation (TPM) is planned for our own hardware.
Czech law.
No retention duty for a service like ours, in our assessment. No general power to order logging built in. A Constitutional Court that annulled blanket data retention in 2011. Requests arrive in writing and get counted.
The ledger.
Never written down
- Your IP addressmemory only, never written
- When you connectednever written
- Where you wentnever
- DNS queriesnever
- Your namenot asked
- Your emailnot asked
What we keep
- Account ID (random)until deleted
- Expiry dateuntil deleted
- Device public keys *until removed
- Payment record (bank/card: payer name on the statement)tax law, 3–10 y
- Node load, aggregate30 days
* A device public key is the public half of the WireGuard key pair your device generates for itself. It is a random 32‑byte value, created on your device, and it is the only thing a server needs to let that device in. It says nothing about who you are or what hardware you use, it cannot be turned back into the private key, and you can replace it at any time. The private half never leaves your device.
While a device is connected, the server holds its current address and last handshake time in memory, as WireGuard must; nothing of it is ever written. Accounts that have been expired for 90 days are deleted together with their device keys. The full list, with legal bases, is in the privacy policy. The same table is what a court order gets.
What we cannot do.
No VPN stops a wiretap on a data‑centre uplink. Our hosting providers, like every carrier, can see which addresses connect to our servers and when. They cannot see what happens inside the tunnel.
We cannot make you anonymous to a site you log into, and we cannot protect you from a device that is already compromised.
What we guarantee is narrower and verifiable: we write no record of your activity anywhere, so a request for history gets an honest “there is none”.
What is Pevnost, in plain words?
Pevnost is a no‑log VPN in the Czech Republic, run by a sole trader under Czech and EU law. It is a WireGuard VPN: you get a configuration file or our Windows app, your traffic leaves through a Czech server, and the server writes nothing about it anywhere.
In our assessment it is an EU VPN without a data‑retention duty for a service of its kind, and we publish every request we receive. The first server is in a Czech data centre; more Czech locations come before any other country.
Why Czechia.
- A sole trader you can look up
- Most VPNs tell you where they are not. We are Jan Faltýsek, a sole trader in Prague, ID 11840064, listed in the public Trade Licensing Register, with servers in Czech data centres. You can find us.
- EU law, minimised data
- GDPR obliges us to keep as little personal data as possible. We keep less than that. Under the Digital Services Act we are, in our assessment, a mere‑conduit intermediary.
- No retention duty for a VPN
- The Czech retention regime binds telecom operators. The Constitutional Court annulled blanket data retention in 2011 (Pl. ÚS 24/10) and the police’s open‑ended access to it the same year (Pl. ÚS 42/11). In 2019 it upheld a narrower re‑enacted regime (Pl. ÚS 45/17); that regime binds telecom operators, not us.
- No secret build orders
- Czech law has no general power to order a service like ours to build in logging or monitoring. Operators of telecom networks do have interception duties; in our assessment we are not one. What does exist: a court or prosecutor may order us to preserve data we already hold (§ 7b of the Code of Criminal Procedure), under a duty of confidentiality. Since that data does not include your activity, there is nothing to preserve.
120 CZK a month. That is the whole price list.
About 5 EUR. Five devices, no data cap, gigabit‑class Czech servers, our own DNS inside the tunnel, 30 days money back. Private beta: at launch we take bank transfer, Bitcoin, Lightning and Monero. Cards and cash by post come later.
A year is 1 200 CZK. 120 CZK is the final price; we are not currently registered for VAT. If VAT becomes due on your purchase, the price shown at checkout will include it before you pay.
Apps.
Windows: our own client, beta 0.2.1, 5.1 MB, source published with the first paid release. Kill switch, key rotation, a server list it accepts only with our signature. Not code‑signed yet, so verify the hash. Everywhere else: the official WireGuard app and one file from your account page.
Questions.
Is the service live?
Private beta. You can create an account now and pay by bank transfer; it is activated within one working day of the money arriving and the first server goes live in the coming days, so paid days start counting from activation. Bitcoin, Lightning and Monero follow.
Are you anonymous?
No service is. Your ISP sees that you talk to a Czech server. The sites you log into know who you are. Our promise is narrower: we keep no record of what you do, so there is no history to hand over.
What do the police get if they ask?
A written answer that the data does not exist, usually within 7 days, and a line in our quarterly transparency report. Authorities outside the EU go through mutual legal assistance. Authorities of other EU member states may use a European Production or Preservation Order under Regulation (EU) 2023/1543; we honour such orders only to the extent of the data listed in the privacy policy.
Which app do I use?
On Windows, our own app (beta) with kill switch and key rotation, or the official WireGuard app. On macOS, iOS, Android and Linux, the official WireGuard app with the configuration file from your account page. Details and the download are on the Apps page.
Why only Czechia?
Because this is the law we know and the courts whose record we can point to. The Constitutional Court annulled blanket data retention in 2011 and the police’s open‑ended access to it the same year. This is a country that remembers what a secret police with complete files does. We follow every ruling in the original and can stand in front of a Czech court. Other countries will follow only where we can say the same.
What is a “device public key” and why do you keep it?
WireGuard identifies a device by a key pair. Your device makes both halves itself. The private half stays on the device; the public half is what you register with us. A server lets a device in only if its public key is on the list, so we have to keep that list. The key is random, not derived from your hardware or identity, and you can delete or replace it whenever you like.
Can I pay without telling you who I am?
Your account is a random ID and we never ask for a name. But the payment method matters. Bank transfer: your bank and our bank statement show your name, the amount and the account identifier you put in the payment reference; we keep that statement as long as tax law requires and can be ordered to hand it over. Cards and Bitcoin leave a trace with the payment provider or on the chain. If you want no link between your name and your account, pay with Monero, or with cash once we offer it.