X-VPN

A free app with a Premium upgrade, sold in US dollars

X-VPN is a freemium VPN. The footer on every page credits LIGHTNINGLINK NETWORKS PTE. LTD., and the about page's FAQ says X-VPN "is operated by LIGHTNINGLINK NETWORKS PTE. LTD." and is "headquartered in Singapore", giving the address 8 Marina View, Asia Square Tower 1. The footer also describes it as a Singapore-based provider "offering free VPN access without requiring an account since 2017". The VPN is the main product, though Premium bundles extra tools: an ad and tracker blocker, download scanning, a PC cleaner, a fake ID generator and dark web monitoring.

Who can get it is broad on the site's own telling. The homepage offers free downloads "for PC, Android, iPhone, Mac, or Linux" with "no account sign-up required", and the pricing FAQ lists PC, Android, iPhone, Mac, Xbox, PS4/5, Chromebook, Linux, router, Chrome, Apple TV, Android TV, Amazon TV and Vision Pro. A checkout note warns buyers of an All-Platform plan to cancel any mobile subscription bought through Apple's store, so Premium is sold both in the App Store and directly. Prices on the pricing page are in US dollars, and the pricing page title reads "Buy VPN with Credit Card, Paypal, and Bitcoin". The site names no country where it does not sell. Its FAQ says X-VPN is legal "in most countries" and tells readers to check local laws.

The audit claim, logging and jurisdiction

X-VPN's pages say it completed a no-logs audit, but they do not name the auditor. The audit post says X-VPN "commissioned one of the Big Four accounting firms in Singapore" to carry out an assurance engagement under ISAE 3000 (Revised) on the Privacy Policy statements about user data, and two help-center articles, both last edited 2026-06-01, say the work was completed on February 28, 2026. The site refers to an audit but does not name the firm that carried it out, and the report is only available to logged-in users in the account center, so the site does not name an independent audit of its logging policy that a reader can check. The help center lists five areas the provider says were covered: no storage of user activity data, minimal data processing, security controls on servers, databases and code, alignment between the Privacy Policy and practice, and oversight by its data protection officer. The audit post adds that "Two observations were identified", which it says were addressed, without saying what they were.

The logging claims are the provider's. X-VPN states that it does not collect user or destination IP addresses, browsing activity, websites visited, VPN server used, DNS queries, downloaded content or connection timestamps. It says it processes only an email address (which can be an alias or disposable), a hashed password, order ID and order history, plus aggregated performance metrics such as CPU and memory use. It says all its servers run in RAM-only mode. Its no-logs page says X-VPN "has received 65 requests from governments" for user information and had nothing to hand over, and it points to a Transparency Report for the details.

On jurisdiction, the pages call Singapore "a privacy-friendly country that does not have mandatory VPN data retention laws" and say it "is not subject to 'Fourteen Eyes' or any other intelligence-sharing alliance". That is the provider's framing of its own home.

Protocols, network and features

The company history on the about page says X-VPN launched with "seven proprietary obfuscated VPN protocols", later grouped them as the Everest suite, and then added OpenVPN and WireGuard, which it says were meant "to improve transparency and trust". It says it added QUIC and V2Ray in 2025 to improve unblocking, and introduced Multi Tunneling, which it describes as letting "different traffic use different IPs in a single connection". The features page lists AES-256 encryption, a kill switch, Double VPN, private DNS and DNS leak protection, obfuscation, split tunneling, a built-in browser and a latency test for each server. The about page mentions 10 Gbps servers, TLS 1.3, static IP and a partnership with Cloudflare.

Network figures vary a little. The features page and homepage say "over 10,000" servers in 80+ countries, the homepage also advertises 250+ locations, and the about page's timeline says the network grew "from 5,000+ to 8,000+ servers in 65+ countries" before reaching "over 10,000 servers across 80+ countries" in 2025. User counts differ as well: 100,000,000+ in most footers, "150 millions" on the pricing page, and 1,000,000+ on the audit post.

For streaming, the homepage names BBC iPlayer, Sky Go and ITV Hub for UK servers, Netflix, Hulu, Disney+ and ESPN for US servers, CBC Gem for Canada, and Stan and AFL Live Pass for Australia. These are the provider's claims, and its own FAQ warns that using a VPN "may violate the terms of service of some streaming platforms". The site menu lists PUBG, Roblox and Pokemon under gaming. The pages say nothing about torrenting.

Free version, Premium prices and refunds

The pricing FAQ says the free version "only allows users to change different IPs and get VPN data encrypted", and the homepage adds that the Change VPN Location feature "is only available with a Premium Subscription". Premium adds the kill switch, split tunneling, static IP, dedicated streaming and gaming servers, and the bundled privacy tools. The site does not explain how the free version is paid for, beyond encouraging free users to upgrade.

The pricing page shows Premium at $47.99 for the first 12 months, $69.99 for the first 24 months (listed as a 24-Month Plan with a 3-Month Bonus) and $11.99 billed every month. It says the 24-month plan "auto-renews annually" and that "Upon renewal, you will be charged the then-current renewal price", without stating that price. The FAQ says the 24-month plan saves 76% compared with paying monthly and gives "$2.99 per month" as the best price. The same checkout text also appears with each amount described as a "one-time non-refundable payment" for one of the payment routes, and the page does not explain how that squares with the refund policy. Premium covers 5 devices per subscription.

Payment methods are PayPal, credit card and "coin payments", and the no-logs page names Bitcoin, Bitcoin Cash and Ethereum, and says an account can be registered with a virtual email. Refunds are offered for "no reason within 30 days from the date of purchase". Support is listed as 24-hour live chat and email.

What remains open

The biggest open point is the audit: X-VPN gives a standard, a completion date and a scope, but it does not name the Big Four firm and keeps the report behind a login, so a reader cannot check who signed it. The renewal price after the first term is not stated. Server and user counts vary from page to page, and the note about non-refundable payments sits awkwardly beside the 30-day guarantee.

On the other side, X-VPN states plainly who runs it and where, the free app needs no account, crypto and a throwaway email are accepted, and the protocol list mixes its own Everest suite with OpenVPN and WireGuard. It suits a reader who wants a free app for changing IP and encrypting traffic without an account, or a low-cost Premium plan with obfuscation and many device types. It suits less well a reader who wants a named, publicly readable audit or a published renewal price before committing.