Cryptostorm

Token-based VPN with no account or email on the XMR purchase path, plus Tor and I2P site access and multihop.

cryptostorm.is

Zero KYC
Evidence and facts →

Token-based VPN with no account or email on the XMR purchase path, plus Tor and I2P site access and multihop.

Common usePrivacyVPNOperator dataUnknown

Identity checksZero KYCNo document check recorded · identity exposure level 0/4

Evidence and riskVerified evidenceCautionMaterial claims checked against current sources.; those sources show trade-offs worth reading.

Last reviewedReviewed 5 Sep 2026KYC checked 5 Sep 2026 · unknown jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskCaution

Evidence and facts

CUNICULA SCORE 4.0

59/100Limited evidencePrivacy 21/25 · Control 7/20 · Transparency 8/20 · Security 17/25 · Accountability 6/10 · Cap 79 · Method

JURISDICTIONUnknown

CAUTIONCryptostorm says VPN nodes do not retain per-session activity logs, but its website logs IP, user agent, referrer, request and time for up to two weeks. Applicable payment flows retain email, delivered token and a processor transaction ID; XMR and NOWPayments do not request email. These are operator claims, not an independent audit.

AUDITED BYNo audit listed

OPERATOR DATAUnknown

SOURCE COVERAGE

Verified evidenceTHIRD-PARTY REPORTED1/5Reviewed 5 Sep 2026 · Source → official site

LAST CHECKED2026-08-27

LAST UPDATED2026-09-05

Specs

DOCUMENT CHECKNone recorded

IDENTITY EXPOSURELevel 0/4

KYC TRIGGERSNo account KYC for token use; XMR and NOWPayments options avoid email according to official privacy policy. Card/CCBill paths retain payment processor transaction IDs.

FEE$1.86/week; $6/month; $16/three months; $28/six months; $52/year; $94/two years; simultaneous-device limits vary by duration.

CATEGORIESVPN

COMMON USESPrivacy

FEATURESToken-based, No accounts, No email for XMR/NOWPayments, Tor and I2P access, OpenVPN, WireGuard, Multihop, Open-source tooling

TORYes

REGIONSGlobal availability

Review analysis, source material, related services, and history

Analysis

OVERVIEW

Token-based access with no accounts at all: a token bought with Monero carries no email or identity, and the service publishes Tor and I2P access paths.

LIMITS

Operator opacity is the recorded warning: no verified legal entity, and the privacy policy itself states web logs persist up to two weeks. The design is strong; the accountability evidence is thin.

USEFUL FOR

Users who weight account-less architecture above operator transparency and accept that trade knowingly.

Sources · reviewed 2026-07-16

cryptostorm privacy policy ↗

Corporate identity

Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.

LEGAL ENTITY: Cryptostorm LLCsource ↗
INCORPORATED IN: Delaware, United Statessource ↗
REGISTERED ADDRESS: Dover, DE, USsource ↗

Registry research · reviewed 2026-08-09

Frequently Asked Questions

Is identity verification required?

No identity verification is recorded for typical use. No account KYC for token use; XMR and NOWPayments options avoid email according to official privacy policy. Card/CCBill paths retain payment processor transaction IDs.

Which payment methods are accepted?

Please check the provider site for accepted payment methods.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

The jurisdiction is not publicly confirmed. Check the provider site for incorporation details.

How are identity, operator, and evidence fields reported?

Identity exposure is level 0 of 4. Hosted operator data has not been established. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-09-05, and recorded risk is caution.

Related Services

AirVPNairvpn.orgairvpn.org · VPN · IT

Italian VPN, no email, accepts BTC and XMR.

Cunicula score39/100Source coverageCurrent Zero KYCCaution

About Visit ↗

AzireVPNazirevpn.comazirevpn.com · VPN · SE

Swedish RAM-only VPN with Blind Operator.

Cunicula score57/100Source coverageCurrent Zero KYCCaution

About Visit ↗

IVPNivpn.netivpn.net · VPN · GI

Audited VPN using account IDs, no email.

Cunicula scoreNot ratedSource coveragePartial Zero KYCCaution

About Visit ↗

Compare

Compare withAirVPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withAzireVPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withIVPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withLNVPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withMullvad VPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.PCompare withPrivateAlpsKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withSafing SPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withXeovo VPNKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Sources and history

Terms and privacy policy

No changes to the documents we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.

Service history

Latest meaningful changes to the facts shown on this provider page.

5 Sep 2026
Review overdue providers against current sources
Fee, KYC last checked, Last reviewed, Privacy warning, and 2 more
26 Aug 2026
Apply full-service rereview and score 4.0
Features, Fee, Recorded risk, Score assessment
9 Aug 2026
Corporate registry information updated
Corporate

Full service history

5 Sep 2026updated
Review overdue providers against current sources
Fee
$1.86/week; $6/month; $52/year; $94/two years$1.86/week; $6/month; $16/three months; $28/six months; $52/year; $94/two years; simultaneous-device limits vary by duration.
KYC last checked
2026-06-222026-09-05
Last reviewed
2026-06-222026-09-05
Privacy warning
Official privacy policy says web logs are retained up to two weeks and that cryptostorm has no active EU business entity. Existing founder/operator opacity warning remains relevant.Cryptostorm says VPN nodes do not retain per-session activity logs, but its website logs IP, user agent, referrer, request and time for up to two weeks. Applicable payment flows retain email, delivered token and a processor transaction ID; XMR and NOWPayments do not request email. These are operator claims, not an independent audit.
Source reviewed
official sitehttps://cryptostorm.is/privacy
Updated at
2026-06-222026-09-05
Review source: official site · public history entry
27 Aug 2026updated
Reconcile score 4.0 evidence
Audited by
not setnone
Checked at
2026-06-232026-08-27
Score assessment / Operator data exposure
moderatelimited
Score assessment / Source model
openpartial
Score review
not setOutcome: HOLD; Checked at: 2026-08-27; Inputs: Operator data exposure: limited; Control model: hosted-account; Source model: partial; Audit: Score eligible: no; Reason: No current independent audit citation/date/scope.
Review source: official site · public history entry
26 Aug 2026updated
Apply full-service rereview and score 4.0
Features
Token-based, No accounts, No email, Tor exit, Open-sourceToken-based, No accounts, No email for XMR/NOWPayments, Tor and I2P access, OpenVPN, WireGuard, Multihop, Open-source tooling
Fee
not set$1.86/week; $6/month; $52/year; $94/two years
Recorded risk
standardcaution
Score assessment
not setOperator data exposure: moderate; Control model: hosted-account; Source model: open
Review source: official site · public history entry
9 Aug 2026updated
Corporate registry information updated
Corporate
not setEntity type: company; Repository url: https://github.com/cryptostorm; Legal entity: Cryptostorm LLC; Incorporation jurisdiction: Delaware, United States; Registered address: Dover, DE, US
Review source: official site · public history entry
8 Aug 2026updated
Provider summary rewritten
Description
Token-based VPN with no account/email required for XMR purchase path, Tor/I2P site access, bare-metal servers, no-logs claim, and server/client-side multihop options.Token-based VPN with no account or email on the XMR purchase path, plus Tor and I2P site access and multihop.
Review source: official site · public history entry
7 Aug 2026updated
Provider summary rewritten
Card summary
not setToken-based VPN reachable over Tor and I2P.
Review source: official site · public history entry
6 Aug 2026updated
Provider presentation updated
Evidence status
not setverified
Recorded risk
not setstandard
Trust level
verifiednot set
Review source: official site · public history entry
24 Jun 2026updated
Provider facts reviewed and updated
Checked at
2026-06-222026-06-23
Geo
not setGLOBAL
Review source: official site · public history entry
22 Jun 2026updated
Provider facts reviewed and updated
Checked at
2026-03-282026-06-22
Description
Token-based VPN — no accounts, no email, no identity. Buy a token, activate, connect. Supports Tor exit nodes. Open-source client.Token-based VPN with no account/email required for XMR purchase path, Tor/I2P site access, bare-metal servers, no-logs claim, and server/client-side multihop options.
Jurisdiction
ISnot set
Jurisdiction confidence
inferredunknown
KYC last checked
2026-03-282026-06-22
Kyc note
not setNo account KYC for token use; XMR and NOWPayments options avoid email according to official privacy policy. Card/CCBill paths retain payment processor transaction IDs.
Last reviewed
2026-03-282026-06-22
Privacy warning
Founder Douglas Spink has a controversial personal history. Current operators are pseudonymous.Official privacy policy says web logs are retained up to two weeks and that cryptostorm has no active EU business entity. Existing founder/operator opacity warning remains relevant.
Source reviewed
older source, not independently verifiedofficial site
Updated at
2026-03-282026-06-22
Review source: official site · public history entry
22 Jun 2026updated
Ship trust audit remediation pass
Jurisdiction confidence
not setinferred
KYC last checked
not set2026-03-28
Last reviewed
not set2026-03-28
Source reviewed
not setolder source, not independently verified
Review source: older source, not independently verified · public history entry
7 Apr 2026updated
Drop warrantCanary trust signal
Warrant canary
nonot set
Review source: source not recorded · public history entry
29 Mar 2026updated
KYC risk level system + advanced directory filters
KYC level
not set0
Review source: source not recorded · public history entry
29 Mar 2026updated
Resolve 19 critical+high audit findings
Countries
noneGLOBAL
Review source: source not recorded · public history entry
28 Mar 2026created
Provider facts reviewed and updated
Provider profile
not setcreated
Review source: source not recorded · public history entry

Only fields shown on the provider page are tracked. Private identifiers are never published.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.