CyberGhost is a VPN company based in Romania. If we set the “exotic paradise” part aside and add Dracula’s castle to the combo, Romania is very similar to the Seychelles when it comes to VPNs. Therefore, CyberGhost has a perfect location to provide ultimate online security to its users.
The Romanian Constitutional Court declared the EU Data Detention Directive unconstitutional in its entirety way back in 2014, effectively ending the story that began in 2008. It also nullified the legal power of the Romanian Law on Cyber Security, stopping data collection by law enforcement and intelligence.
We also have to take into account that Romania has managed to avoid the implementation of these measures despite being a member of the EU and in strategic partnership with the US for 20 years. In case you were wondering, this partnership does include bilateral cyber security efforts as well.
Having said that, however, if a governmental entity obtains a court order, it can legally intercept communications and log traffic, location info, and other data.
Back to the main point, CyberGhost does not keep any logs of your online activity, being staunch believers in Internet freedom themselves. The company owns a real office with real employees and you can find their address on their site, adding to the overall credibility. More specifically, the service won’t keep logs of your IP address, assigned servers, login/logout times, traffic and account data or any information sent via their servers. Furthermore, they also refrain from “real-time logging,” meaning they won’t monitor and record your telephone calls, messenger/video chats, and other forms of communication.
As far as personal data is concerned, CyberGhost doesn’t collect your name, email address, payment information or domicile address. In order to completely distance your personal information from your account, they don’t even process your payment themselves.
On the other hand, CyberGhost will keep records of the logins once a day for statistical purposes. The data is deleted after 24 hours and all they keep is that you logged in once on, let’s say, March 15th. At the end of each month, even the total sum is deleted. This doesn’t endanger your anonymity in any way, however, and you have to face the fact that every VPN service is a business and they have to have some information on how the customers use their platform.
Moreover, the data collected is never shared with third parties without an explicit court order.