A U.S. 501(c)(3) non-profit public charity · Donations are tax-deductible

Win's VPN

Affordable Yet Great Product!

One of the first AI-powered VPNs, built to keep connections reliable across hostile, unstable networks through advanced AI insights paired with rigorous human optimization and testing. Win’s VPN brings together all the good stuff of your favourite ProtonVPN, NordVPN, ExpressVPN, SurfShark, Hotspot Shield, VyprVPN, Windscribe, NymVPN, and AdGuard, minus the bad bit.

Get Win's VPN Watch Demo (Android) Watch Demo (Windows) Watch Demo (Linux) Donate

Verified No Logexcept the total device count to enforce three device limit

24/7/365 IDPSintrusion detection and prevention for VPN infrastructure

Tier III+ISO 27001/20000 certified server environments with 99% uptime

Up to 2.5 Gbpsdownload and upload speeds depending on region, network route, Wi-Fi version, device processing power, etc...

Our Mission

Win’s VPN Inc. is an IRS-recognized 501(c)(3) public charity. Determination letter and EIN in Proof.

Mission

Make everyday internet use safer and more private, advance public education in cybersecurity, and keep the open internet reachable for people whose access is restricted by cost, censorship or surveillance.

What we do

We build and operate a no-logs VPN that blocks scams, malicious links and tracking, develop the Winn Protocol that powers it, and provide the service at a price set to cover operating costs rather than to generate profit.

Who we serve

Anyone who wants a safer connection. Most of our users are ordinary people avoiding scams, phishing links, malicious sites and tracking on untrusted or public networks. The same protections also serve people whose access to news and communication is restricted by censorship or surveillance.

How we are funded

Donations from the public and cost-recovery subscriptions. Contributions are tax-deductible to the extent allowed by law. The IRS determination letter and our EIN are published in Proof.

Defense In Depth

Win's VPN combines open-source foundations, proprietary optimization, and layered cybersecurity controls to protect users and infrastructure.

AI-Powered VPN

We use customized local AI for your privacy, and we keep the VPN current with real-world censorship and network conditions so it keeps working for you. We do not collect your personal data, so we cannot train on it.

Non-Profit Mission

The first non-profit VPN built on its own protocol. A US 501(c)(3) public charity, expanding access to cybersecurity, uncensored news, and education.

Best Threat Intelligence Combined

Ads, trackers, malicious websites, and dangerous files are filtered by default using aggregated threat intelligence from leading cybersecurity sources such as IBM X-Force.

No-Logs Privacy

No browsing history, no DNS query history, no traffic contents, and no record of the destinations you reach. Transient session state is cleared when the VPN disconnects. The privacy-preserving device-limit metadata behind the three-device limit is deleted or overwritten once a device is deactivated or replaced, and app-collected operational data we no longer need is deleted or anonymized within 90 days. What is left is only what an account needs: status, payment and referral state, and proof you accepted the terms.

Hardened Servers

Our servers have a hot site disaster recovery approach using latest hardware, weekly maintenance and backups, and 24/7 attack monitoring by Intrusion Detection & Prevention System (IDS/IPS). On every node the firewall drops inbound and forwarded traffic by default, IPv6 is disabled, torrent ports are blocked, and SSH accepts key-based logins only, with no passwords and a 24-hour ban after 10 failed logins in an hour. Security updates install automatically and core dumps are disabled, so process memory never reaches disk.

Cyber Insurance

Covered by active cyber insurance through Coalition Inc., with policy certificate on file. The policy carries third-party liability cover, which is the part that matters to you: it responds to claims arising from our own failures, such as a misconfiguration on our side, rather than only covering the company's losses. Cover is subject to the policy terms and is not a guarantee of any individual outcome. Due to insurance policy requirements, we do not allow torrenting or any illegal activity on our servers.

Trademark and patent filings in process

Winn Protocol™

In telecom terms, if today’s leading VPN protocols are 5G, Winn Protocol™ is built to be the 6G: a generation ahead in how it hides traffic, races routes, and holds a connection together across hostile networks.

Winn Protocol™ is engineered to bypass NGFW Deep Packet Inspection as long as there is a working path from a user’s country to the outside world.

Cryptographic profile

Built on published NIST and IETF standards, not private cryptography. Every primitive below is publicly specified and independently reviewable.

Post-quantum key exchange X25519 + ML-KEM-768 Hybrid, never ML-KEM alone. Protects today’s traffic against future quantum decryption of recorded sessions.

Post-quantum signatures ML-DSA-65 / ML-DSA-87 Every control-plane request and response is signed, in addition to mutual X.509 authentication.

Transport TLS 1.3 + Encrypted Client Hello RFC 9849 ECH conceals the destination name. No classical-only or public-ClientHello fallback is offered.

Device identity SPIFFE-bound certificates Each device carries an authenticated URI identity that must match its request, with key rotation and no downtime.

Failure behaviour Fail-closed Any mismatch in ECH, version, cipher group or ALPN aborts the connection rather than silently downgrading it.

Key rotation Fresh exchange every rotation Session resumption is disabled, so each rekey performs a full hybrid post-quantum exchange.

Winn Protocol™

Our adaptable, modified, and hardened versions of proven censorship-bypassing protocols are designed to bypass censorship without affecting speed.

Continuous connection

Winn Protocol™ prepares several routes in advance and races them. If a path degrades or drops, a replacement is established and verified before the old one is torn down (make-before-break) so the tunnel does not go down while it changes. The kill switch stays active throughout, so traffic never escapes during the handover.

Open-Source Core

Open-source software reduces zero-day exposure, while minimal app code and obfuscation reduce reverse-engineering risk.

American Freedom

Proudly made in America so users can experience real American freedom online.

How Winn Protocol™ compares

Most VPN protocols trade one property for another. Mixnets buy metadata anonymity by giving up speed. Speed-first protocols give up stealth. Winn Protocol™ is engineered so neither has to be sacrificed, and no score is published before its evidence gate passes.

5 leading 4 strong 3 adequate 2 limited 1 absent

Capability comparison across ten categories, scored 1 to 5
Category	Win’s VPNWinn Protocol™	NordVPNNordLynx	SurfsharkDausos	Proton VPNStealth suite	ExpressVPNLightway	Hotspot ShieldHydra	VyprVPNChameleon	WindscribeWStunnel	NymVPNAnonymous Mode	AdGuard VPNTrustTunnel
Throughput	5	5	5	5	5	5	3	2	1	4
Connection speed	5	5	4	4	5	5	3	2	1	4
Reliability	5	4	3	5	5	4	4	3	3	4
Mobility & roaming	5	4	4	4	5	4	4	3	2	4
Traffic stealth	5	2	2	5	4	4	5	4	4	5
Censorship bypass	5	2	2	5	4	4	5	4	4	4
Platform compatibility	4	5	1	5	5	5	5	4	4	5
CPU / battery efficiency	4	5	5	4	5	4	3	2	1	4
Post-quantum resistance	5	4	5	2	5	1	1	1	2	3
Metadata anonymity	4	2	2	3	2	2	2	2	5	2

Scores are capability-based rather than controlled head-to-head benchmarks, assessed by Win’s VPN from each vendor’s published documentation in July 2026, with Winn Protocol™ figures taken from our own implementation and internal test suites while full independent device, cloud, DPI and soak verification continues. Product names and trademarks belong to their respective owners and appear here for identification and comparison only, with no affiliation or endorsement implied; vendor capabilities change, so verify against current documentation.

Winn Protocol™ passes Win’s VPN’s own verification suites. Comparable physical-device, cloud, DPI, throughput and connection-time results are being completed and will be published as they are archived.
NordVPN’s NordLynx is a fast WireGuard build with double NAT, but it carries no obfuscation of its own, so users in censored networks must switch to the separate NordWhisper protocol and give up NordLynx speed to get past inspection. Winn Protocol™ carries stealth in the same protocol. NordLynx · NordWhisper
Surfshark describes Dausos as post-quantum resistant, adaptive and up to 30% faster than WireGuard in its own tests, but it is a macOS-only beta and Surfshark warns of possible connectivity or performance issues, so most users cannot run it at all. Introduction · Support status
Proton’s comparison is the whole Stealth, Smart Protocol, VPN Accelerator, alternative-routing and Secure Core suite rather than one protocol, so stealth, speed and multi-hop live in separate features the user has to select between, and its post-quantum coverage does not span the whole suite. Features · VPN Accelerator
Lightway is now written in Rust, supports major platforms and uses ML-KEM-based post-quantum protection, but its obfuscation is applied automatically on the server side rather than exposed as selectable transports, so the observable traffic shape cannot be matched to a particular network. Rust rewrite · Post-quantum
Hotspot Shield’s public Hydra description documents TLS 1.2 with ECDHE rather than a standardised hybrid post-quantum exchange, so traffic captured today stays vulnerable to future quantum decryption. Security description
VyprVPN Chameleon is strong on DPI resistance and can rotate server IPs without dropping the connection, but it is an older scrambling design with no published post-quantum protection and lower throughput than modern protocols. Chameleon and Smart IP
Nym Anonymous Mode earns the strongest metadata score because its five-hop mixnet uses fixed-size layered packets, mixing, timing delays and cover traffic, but those same mechanisms cost so much latency and battery that it is unusable as a default connection. Architecture · Zero-knowledge routing
Windscribe’s WStunnel wraps an OpenVPN connection inside a WebSocket specifically to get past firewall-based blocking in places like China, Russia and Iran, but Windscribe’s own documentation warns speeds are often slower due to the extra encryption layer, and its post-quantum claim is scoped to WireGuard only, not WStunnel. WStunnel protocol · Post-quantum scope
AdGuard’s TrustTunnel is open source and hides the tunnel in plain sight, carrying it as ordinary HTTPS over HTTP/2 and HTTP/3 with an isolated stream per connection rather than a recognisable wire format of its own, so it stays workable on unstable mobile links without a separate stealth mode. Its published specification mandates only TLS 1.2 or QUIC, so the hybrid X25519MLKEM768 exchange AdGuard ships in its apps is an opt-in application setting rather than part of the protocol, and as a single-hop transport with no independent no-log audit it adds no metadata anonymity beyond an ordinary VPN. Protocol source · Open-source announcement · Post-quantum scope

Proof

The documents behind the claims: incorporation, the EIN, the Form 1023 fee, and the IRS determination letter. Each one names the agency that issued it and the public registry where you can look it up yourself.

IRS determination letter dated July 21, 2026

Federal Tax-Exempt Status, and What It Means for Donors

The Internal Revenue Service has determined that Win's VPN Inc. is exempt from federal income tax under Internal Revenue Code Section 501(c)(3). Donors can deduct contributions they make to Win's VPN Inc. under IRC Section 170, and the organization is qualified to receive tax-deductible bequests, devises, transfers, or gifts under Section 2055, 2106, or 2522. Contributions are deductible to the extent allowed by law. Deductibility depends on your own tax situation, and Win's VPN does not provide tax advice.

Effective back to June 11, 2026. The effective date of exemption on the determination letter is June 11, 2026, not the date the letter was issued. If you donated to Win's VPN Inc. on or after that date, your contribution falls inside the exempt period. Keep the receipt we emailed you and ask your own tax preparer how it applies to your return.

A public charity, not a private foundation. The letter classifies Win's VPN Inc. as a public charity under Section 509(a)(2), the classification used for organizations supported by contributions and by revenue from their exempt activities. Win's VPN Inc. uses a December 31 accounting period and is required to file an annual Form 990-series return.

Eight days. Win's VPN Inc. submitted the user fee for its Form 1023 application through Pay.gov on July 13, 2026, and the IRS determination letter is dated July 21, 2026, eight days later. The fee was $600.00, which is the user fee for the full Form 1023 rather than the streamlined Form 1023-EZ.

Verify us yourself, please. Look us up as “Win’s VPN Inc.” on the IRS Tax Exempt Organization Search at apps.irs.gov/app/eos instead of taking our word for it. Recently approved organizations can take some time to appear in that database.

Determination letter from the IRS Tax Exempt and Government Entities division, signed by Stephen A. Martin, Director, Exempt Organizations Rulings and Agreements. Open the full-size letter. Our mailing address is blacked out to protect our team; nothing else on the letter is altered.

Pay.gov confirmation of the Form 1023 user fee payment. Open the full-size receipt. The recipient email address, the tracking IDs, and the card details are blacked out.

Tax exemption is a determination about Win's VPN Inc. as an organization. It is not an IRS review, approval, or endorsement of the Win's VPN service, its security, or its performance.

Donations and Tax Deductions

What a charitable deduction actually does, and what it does not do. The documents behind our 501(c)(3) status are directly above in Proof.

Tax year 2026 rules, checked against IRS.gov

How a Charitable Deduction Actually Works

Read this first: most filers get no itemized deduction for a gift. A deduction reduces the income you are taxed on. It is not a credit, and it does not cut your tax bill dollar for dollar. Most people take the standard deduction, which for 2026 is $16,100 for a single filer, $32,200 for a married couple filing jointly, and $24,150 for a head of household. If everything you could itemize adds up to less than that, a charitable gift produces no itemized deduction for you at all.

One exception, new for 2026, and it is small. A filer who takes the standard deduction may still deduct up to $1,000 of cash contributions, or $2,000 on a joint return. That ceiling is the whole benefit. If you do itemize, 2026 also added a floor: only the part of your giving above 0.5% of adjusted gross income counts. See IRS Topic 506 and Publication 505.

Three illustrations. These state their assumptions; they are not predictions about you. A $100 gift from a single filer with roughly $60,000 of income who takes the standard deduction reduces taxable income by the full $100, worth about $12 less federal tax at a 12% marginal rate. A $10,000 gift from a couple with $300,000 of income who itemize loses $1,500 to the new floor, leaving $8,500 deductible, about $2,040 at 24%. A $100,000 gift from a single filer with $600,000 of income who itemizes loses $3,000 to the floor, leaving $97,000, about $33,950 at 35%. In every case the gift still costs what it costs.

Gifts of $250 or more need a written acknowledgment, and the deduction cannot be claimed without one. If you gave $250 or more to Win's VPN Inc. and did not receive one from us, email support@winsvpn.org and we will issue it. Separately, a deduction generally cannot exceed 60% of adjusted gross income; anything above the ceiling carries forward for up to five years. See Publication 526 and Publication 1771.

This is general information about the law, not tax advice. What a gift is worth to you depends on your filing status, your income, whether you itemize, and what else you gave. State treatment varies and does not follow the federal rules. Win's VPN Inc. cannot advise you on your return. Please talk to a tax professional and check the rules yourself at irs.gov. Please give because you want the work funded, not because you expect the government to hand the money back.

The same explanation as a one-page letter. If you would rather read this on a single printable page, or hand it to your own tax preparer, we have set it out as a letter on Win's VPN Inc. letterhead. It uses the same illustrations and the same assumptions as the text above, and it opens with the same caveat: most people who file a federal return do not itemize, and an itemized charitable deduction is worth nothing to them.

Letter language

One-page donor letter on Win's VPN Inc. letterhead, written for the 2026 tax year. Open the full-size letter. This one is a document we wrote ourselves, not a government record like the documents in Proof, and it is general information about the law rather than tax advice.

The English version of this letter is the governing text. Any other language is a translation provided for convenience. If the two differ, the English version controls.

ဤစာ၏ အင်္ဂလိပ်မူသည် အာဏာသက်ရောက်သော မူရင်းစာသားဖြစ်သည်။ အခြားဘာသာစကားမူတိုင်းသည် အဆင်ပြေစေရန် ပြန်ဆိုထားသော ဘာသာပြန်မျှသာဖြစ်သည်။ မူနှစ်ခု ကွဲလွဲပါက အင်္ဂလိပ်မူက အာဏာသက်ရောက်သည်။

WIN’S VPN INC.
501(c)(3) အများပြည်သူဆိုင်ရာ ပရဟိတအဖွဲ့ · IRC ပုဒ်မ 509(a)(2)
၂၀၂၆ ခုနှစ် ဇွန်လ ၁၁ ရက်မှ စ၍ အခွန်ကင်းလွတ်ခွင့်ရသည် · ၂၀၂၆ အခွန်နှစ်

အလှူရှင်ဖြစ်လိုသူများအတွက် · အထွေထွေအချက်အလက်သာဖြစ်ပြီး အခွန်ဆိုင်ရာ အကြံပေးချက်မဟုတ်ပါ

အခွန်ကာလတွင် အလှူတစ်ခု၏ တန်ဖိုး

၂၀၂၆ အခွန်နှစ်အတွက် ပြည်ထောင်စုစည်းမျဉ်းများ၊ တွက်ချက်ပြထားသော ဥပမာလေးခုနှင့် အခွန်စာရင်းတင်သွင်းသူအများစုနှင့် သက်ဆိုင်သည့် သတိပေးချက်။

လေးစားအပ်ပါသော အလှူရှင်ဖြစ်လိုသူ၊

Win’s VPN Inc. သို့ အလှူငွေပေးရန် စဉ်းစားပေးသည့်အတွက် ကျေးဇူးတင်ပါသည်။ မလှူဒါန်းမီ ပရဟိတအလှူ နုတ်ယူခွင့် (charitable deduction) သည် အဘယ်အရာ လုပ်ဆောင်ပေးသည်၊ အဘယ်အရာ မလုပ်ဆောင်ပေးသည်ကို အတိအကျ သိစေလိုပါသည်။

အောက်ဖော်ပြပါအချက်များသည် ၂၀၂၆ အခွန်နှစ်အတွက် ပြည်ထောင်စုဥပဒေကို ရိုးရှင်းသော စကားလုံးများဖြင့် ရှင်းလင်းထားခြင်းဖြစ်ပြီး တွက်ချက်ပြထားသော ဥပမာများ ပါဝင်သည်။ ဤသည်မှာ အထွေထွေအချက်အလက်သာဖြစ်ပြီး သင့်၏အခွန်စာရင်းနှင့် ပတ်သက်သော အကြံပေးချက်မဟုတ်သကဲ့သို့ အလှူတစ်ခုခုသည် သင့်အတွက် မည်မျှတန်ဖိုးရှိမည်ဆိုသည့် ခန့်မှန်းချက်လည်း မဟုတ်ပါ။

ဦးစွာဖတ်ပါ- အခွန်စာရင်းတင်သွင်းသူအများစုသည် ပရဟိတအလှူအတွက် တစ်ခုချင်းနုတ်ယူခွင့် (itemized deduction) မရရှိပါ

ပရဟိတအလှူ နုတ်ယူခွင့်သည် သင်အခွန်ကောက်ခံရမည့် ဝင်ငွေကို လျှော့ချပေးသည်။ ၎င်းသည် အခွန်ခရက်ဒစ် (credit) မဟုတ်သကဲ့သို့ သင့်၏အခွန်ကောက်ခံငွေကို တစ်ဒေါ်လာလှူလျှင် တစ်ဒေါ်လာစီ လျှော့ပေးခြင်းလည်း မဟုတ်ပါ။ ပြည်ထောင်စုအခွန်စာရင်း တင်သွင်းသူအများစုသည် တစ်ခုချင်း မနုတ်ယူကြသည့်အကြောင်းမှာ ၂၀၂၆ ခုနှစ် စံနုတ်ယူငွေ (standard deduction) (တစ်ဦးတည်းတင်သွင်းသူအတွက် $၁၆,၁၀၀၊ အိမ်ထောင်ဖက်နှင့်အတူ စုပေါင်းတင်သွင်းသူအတွက် $၃၂,၂၀၀၊ အိမ်ထောင်ဦးစီးအတွက် $၂၄,၁၅၀) သည် ၎င်းတို့ တစ်ခုချင်းနုတ်ယူနိုင်မည့် အရာအားလုံး ပေါင်းထားသည်ထက် ပိုမိုများပြားသောကြောင့်ဖြစ်သည်။ ထိုအချက်သည် သင်နှင့် ကိုက်ညီပါက တစ်ခုချင်းနုတ်ယူသော ပရဟိတအလှူနုတ်ယူခွင့်သည် သင့်အတွက် လုံးဝတန်ဖိုးမရှိပါ။

၂၀၂၆ အခွန်နှစ်မှ စတင်သော ကျဉ်းမြောင်းသည့် ခြွင်းချက်တစ်ခုရှိသည်- စံနုတ်ယူငွေကို အသုံးပြုသော အခွန်စာရင်းတင်သွင်းသူသည် ငွေသားအလှူများအတွက် $၁,၀၀၀ အထိ၊ သို့မဟုတ် အိမ်ထောင်ဖက်နှင့်အတူ တင်သွင်းသောစာရင်းတွင် $၂,၀၀၀ အထိ နုတ်ယူနိုင်သေးသည်။ ထိုကန့်သတ်ပမာဏသည်ပင် အကျိုးအမြတ်တစ်ခုလုံးဖြစ်သည်။

အစိုးရက ငွေကို ပြန်ပေးမည်ဟု မျှော်လင့်၍မဟုတ်ဘဲ အဖွဲ့အစည်း၏ လုပ်ငန်းများ ဆက်လက်ရပ်တည်နိုင်ရန် ရန်ပုံငွေပေးလိုသည့် စိတ်ဖြင့်သာ လှူဒါန်းပါ။

တွက်ချက်ပုံကို ရှင်းလင်းချက်

သင်သက်သာမည့် ခန့်မှန်းပမာဏမှာ နုတ်ယူနိုင်သောပမာဏကို သင့်၏ ထိပ်ဆုံးဝင်ငွေဒေါ်လာအပေါ် သက်ရောက်သည့် ဘေးနှုန်း (marginal tax rate) ဖြင့် မြှောက်ရခြင်းဖြစ်သည်။ ထိုမြှောက်ခြင်းမပြုမီ နုတ်ယူနိုင်သောပမာဏကို သတ်မှတ်ပေးသည့် ၂၀၂၆ စည်းမျဉ်း နှစ်ခုရှိသည်။ သင်တစ်ခုချင်းနုတ်ယူပါက သင့်၏ ပြုပြင်ထားသော စုစုပေါင်းဝင်ငွေ (AGI) ၏ ၀.၅% ထက်ပိုသော အလှူပမာဏကိုသာ ထည့်တွက်ရသည်။ သင်တစ်ခုချင်း မနုတ်ယူပါက အထက်ဖော်ပြပါ $၁,၀၀၀ သို့မဟုတ် $၂,၀၀၀ ကန့်သတ်ချက် သက်ရောက်သည်။ $၁,၀၀၀ အလှူသည် $၁,၀၀၀ အဖြစ် မည်သည့်အခါမျှ ပြန်မရပါ။

ယူဆချက်တိုင်းကို ရေးသားဖော်ပြထားသော ဥပမာလေးခု

$၁၀၀ အလှူ။ တစ်ဦးတည်းတင်သွင်းသူ၊ AGI ခန့်မှန်း $၆၀,၀၀၀၊ စံနုတ်ယူငွေကို အသုံးပြုသည်။ နုတ်ယူနိုင်သောပမာဏ- $၁၀၀ (တစ်ခုချင်းမနုတ်ယူသူများအတွက် $၁,၀၀၀ ကန့်သတ်ချက်အတွင်း)။ ယူဆထားသော ဘေးနှုန်း- ၁၂%။ ပြည်ထောင်စုအခွန် လျှော့ချမှု- ခန့်မှန်း $၁၂။ ခန့်မှန်း အသားတင်ကုန်ကျစရိတ်- $၈၈။

$၁,၀၀၀ အလှူ။ တစ်ဦးတည်းတင်သွင်းသူ၊ AGI ခန့်မှန်း $၉၅,၀၀၀၊ စံနုတ်ယူငွေကို အသုံးပြုသည်။ နုတ်ယူနိုင်သောပမာဏ- $၁,၀၀၀ (တစ်ခုချင်းမနုတ်ယူသူ ကန့်သတ်ချက် အတိအကျပြည့်မီသည်)။ ယူဆထားသော ဘေးနှုန်း- ၂၂%။ ပြည်ထောင်စုအခွန် လျှော့ချမှု- ခန့်မှန်း $၂၂၀။ ခန့်မှန်း အသားတင်ကုန်ကျစရိတ်- $၇၈၀။

$၁၀,၀၀၀ အလှူ။ အိမ်ထောင်ဖက်နှင့်အတူ စုပေါင်းတင်သွင်းသူ၊ AGI $၃၀၀,၀၀၀၊ တစ်ခုချင်းနုတ်ယူသည်။ နုတ်ယူနိုင်သောပမာဏ- $၈,၅၀၀ (AGI ၏ ၀.၅% အခြေခံမျဉ်းက $၁,၅၀၀ ဖယ်ထုတ်သည်)။ ယူဆထားသော ဘေးနှုန်း- ၂၄%။ ပြည်ထောင်စုအခွန် လျှော့ချမှု- ခန့်မှန်း $၂,၀၄၀။ ခန့်မှန်း အသားတင်ကုန်ကျစရိတ်- $၇,၉၆၀။

$၁၀၀,၀၀၀ အလှူ။ တစ်ဦးတည်းတင်သွင်းသူ၊ AGI $၆၀၀,၀၀၀၊ တစ်ခုချင်းနုတ်ယူသည်။ နုတ်ယူနိုင်သောပမာဏ- $၉၇,၀၀၀ (AGI ၏ ၀.၅% အခြေခံမျဉ်းက $၃,၀၀၀ ဖယ်ထုတ်သည်)။ ယူဆထားသော ဘေးနှုန်း- ၃၅%။ ပြည်ထောင်စုအခွန် လျှော့ချမှု- ခန့်မှန်း $၃၃,၉၅၀။ ခန့်မှန်း အသားတင်ကုန်ကျစရိတ်- $၆၆,၀၅၀။

အထက်ပါကိန်းဂဏန်းတိုင်းသည် မိမိအတန်းရှိ ယူဆချက်များပေါ်တွင် အခြေခံထားသော ဥပမာမျှသာဖြစ်သည်။ ၎င်းသည် သင့်နှင့်ပတ်သက်သော ခန့်မှန်းချက်မဟုတ်သကဲ့သို့ သင်ငွေတစ်စုံတစ်ရာ သက်သာမည်ဟူသော ကတိလည်း မဟုတ်ပါ။ တင်သွင်းသည့်အဆင့်အတန်း၊ ဝင်ငွေ၊ အလှူရှင်က တစ်ခုချင်းနုတ်ယူခြင်း ရှိမရှိ သို့မဟုတ် ဘေးနှုန်းတို့ကို ပြောင်းလဲလိုက်ပါက ရလဒ်လည်း ပြောင်းလဲသွားသည်။ ဘေးနှုန်းများမှာ ဖော်ပြထားသော ဝင်ငွေများမှ တွက်ချက်ထားခြင်းမဟုတ်ဘဲ ယူဆချက်မျှသာဖြစ်သည်။ အလှူပမာဏလေးမျိုးသည် ကျွန်ုပ်တို့ တည်ဆောက်ရန် စီစဉ်ထားသော အလှူရှင်အသိအမှတ်ပြုအဆင့်များ (Bronze $၁၀၀၊ Silver $၁,၀၀၀၊ Gold $၁၀,၀၀၀၊ Diamond $၁၀၀,၀၀၀) နှင့် ကိုက်ညီသော်လည်း ထိုအဆင့်များသည် စီစဉ်ဆဲမျှသာဖြစ်သည်။ ယနေ့အချိန်တွင် တံဆိပ်၊ လက်မှတ် သို့မဟုတ် အဆင့်တစ်စုံတစ်ရာ မရှိသေးဘဲ ယခုလှူဒါန်းသော အလှူသည် ၎င်းတို့ကို ရရှိစေမည်မဟုတ်ပါ။

ကန့်သတ်ချက်များ၊ သယ်ဆောင်သုံးခွင့်နှင့် သင်လိုအပ်သော လက်ခံဖြတ်ပိုင်း

သင့်၏ဝင်ငွေပေါ်အခြေခံသော ကန့်သတ်ချက်။ Win’s VPN Inc. ကဲ့သို့သော အများပြည်သူဆိုင်ရာ ပရဟိတအဖွဲ့သို့ ပေးသော ငွေသားအလှူများအတွက် နုတ်ယူခွင့်သည် ယေဘုယျအားဖြင့် ပြုပြင်ထားသော စုစုပေါင်းဝင်ငွေ၏ ၆၀% ထက် မကျော်လွန်နိုင်ဘဲ အခြားအလှူအမျိုးအစားများအတွက် ၅၀%၊ ၃၀% သို့မဟုတ် ၂၀% ကန့်သတ်ချက်များ သက်ရောက်သည်။ ကန့်သတ်ချက်ထက် ပိုနေသောပမာဏသည် ပျောက်သွားခြင်းမဟုတ်ဘဲ နောင် ၅ နှစ်အတွင်းသို့ သယ်ဆောင်သုံးခွင့် ရှိသည်။ (IRS Publication 526။)

$၂၅၀ သို့မဟုတ် ထို့ထက်ပိုသော အလှူများသည် ကျွန်ုပ်တို့၏ စာဖြင့်ရေးသားသော အသိအမှတ်ပြုလွှာ လိုအပ်သည်။ IRS သည် $၂၅၀ သို့မဟုတ် ထို့ထက်ပိုသော အလှူတစ်ခုစီအတွက် ပရဟိတအဖွဲ့ထံမှ ထိုအချိန်ကာလနှင့် ကိုက်ညီသည့် စာဖြင့်ရေးသားသော အသိအမှတ်ပြုလွှာမပါဘဲ နုတ်ယူခွင့်ကို ခွင့်မပြုပါ။ ထိုလွှာသည် (က) ထိုနှစ်၏အခွန်စာရင်းကို သင်တင်သွင်းသည့်နေ့ နှင့် (ခ) သက်တမ်းတိုးမှုများအပါအဝင် ထိုစာရင်း၏ နောက်ဆုံးထားနေ့ တို့အနက် စောသောနေ့တွင် သင့်ထံသို့ ရောက်ရှိရမည်ဖြစ်သည်။ သင်က $၂၅၀ သို့မဟုတ် ထို့ထက်ပို လှူဒါန်းခဲ့ပြီး ကျွန်ုပ်တို့ထံမှ ထိုလွှာကို မရရှိခဲ့ပါက support@winsvpn.org သို့ အီးမေးလ်ပို့ပါ။ ကျွန်ုပ်တို့က ထုတ်ပေးပါမည်။ (IRS Publication 1771။)

ဤစာက သင့်အား မပြောနိုင်သည့်အရာများ

နုတ်ယူခွင့်ရှိမရှိမှာ သင့်၏ကိုယ်ပိုင်အခြေအနေများပေါ် မူတည်သည်- သင့်တင်သွင်းသည့်အဆင့်အတန်း၊ သင့်၏ ပြုပြင်ထားသော စုစုပေါင်းဝင်ငွေ၊ သင်တစ်ခုချင်းနုတ်ယူခြင်း ရှိမရှိ၊ သင်အခြားမည်သည့်အရာများ နုတ်ယူခဲ့သည်၊ ထိုနှစ်တွင် အခြားမည်သည့်အလှူများ လှူဒါန်းခဲ့သည်တို့ ဖြစ်သည်။ ပရဟိတအလှူများနှင့်ပတ်သက်သော ပြည်နယ်နှင့် ဒေသန္တရ ဆက်ဆံမှုသည် ပြည်နယ်အလိုက် ကွဲပြားပြီး ပြည်ထောင်စုစည်းမျဉ်းများအတိုင်း မဟုတ်ပါ။ Win’s VPN Inc. သည် အခွန်ဆိုင်ရာ အကြံပေးခြင်း မပြုဘဲ အလှူတစ်ခုသည် သင့်အတွက် မည်မျှတန်ဖိုးရှိမည်ကို ပြောပြနိုင်ခြင်း မရှိပါ။ အခွန်ပညာရှင်တစ်ဦးကို မေးမြန်းပြီး irs.gov တွင် စည်းမျဉ်းများကို သင်ကိုယ်တိုင် စစ်ဆေးပါ။

ရိုသေလေးစားစွာဖြင့်၊
Win’s VPN Inc.
· 501(c)(3) အခွန်ကင်းလွတ်ခွင့်ရ အများပြည်သူဆိုင်ရာ ပရဟိတအဖွဲ့

Win’s VPN Inc. သည် Internal Revenue Code ပုဒ်မ 501(c)(3) အရ ပြည်ထောင်စုဝင်ငွေခွန်မှ ကင်းလွတ်ခွင့်ရသည်။ အဆုံးအဖြတ်စာ၏ ရက်စွဲမှာ ၂၀၂၆ ခုနှစ် ဇူလိုင်လ ၂၁ ရက်ဖြစ်ပြီး အခွန်ကင်းလွတ်ခွင့် စတင်သက်ရောက်သည့်နေ့မှာ ၂၀၂၆ ခုနှစ် ဇွန်လ ၁၁ ရက်ဖြစ်သောကြောင့် ထိုနေ့ သို့မဟုတ် နောက်ပိုင်းတွင် ပြုလုပ်သော လှူဒါန်းမှုသည် ကင်းလွတ်ခွင့်ကာလအတွင်း ကျရောက်သည်။ ၎င်းကို ပုဂ္ဂလိကဖောင်ဒေးရှင်းအဖြစ်မဟုတ်ဘဲ ပုဒ်မ 509(a)(2) အရ အများပြည်သူဆိုင်ရာ ပရဟိတအဖွဲ့အဖြစ် အမျိုးအစားသတ်မှတ်ထားပြီး ဒီဇင်ဘာ ၃၁ ရက် စာရင်းကာလကို အသုံးပြုကာ နှစ်စဉ် Form 990 စီးရီးစာရင်းကို တင်သွင်းသည်။ လှူဒါန်းမှုများသည် ဥပဒေက ခွင့်ပြုသည့်အတိုင်းအတာအထိ IRC ပုဒ်မ 170 အရ နုတ်ယူနိုင်ပြီး ပုဒ်မ 2055၊ 2106 သို့မဟုတ် 2522 အရ အခွန်နုတ်ယူနိုင်သော အမွေအနှစ်များ၊ ပိုင်ဆိုင်မှုလွှဲပြောင်းမှုများ သို့မဟုတ် လက်ဆောင်များကို လက်ခံရရှိရန် အရည်အချင်းပြည့်မီသည်။ အခွန်ကင်းလွတ်ခွင့်အဆင့်အတန်းသည် အဖွဲ့အစည်းနှင့်ပတ်သက်သော ဆုံးဖြတ်ချက်သာဖြစ်သည်။ ၎င်းသည် Win’s VPN ဝန်ဆောင်မှု၊ ၎င်း၏လုံခြုံရေး သို့မဟုတ် စွမ်းဆောင်ရည်ကို IRS က စစ်ဆေးခြင်း၊ အတည်ပြုခြင်း သို့မဟုတ် ထောက်ခံခြင်း မဟုတ်ပါ။ apps.irs.gov/app/eos ရှိ IRS Tax Exempt Organization Search တွင် Win’s VPN Inc. ဟူသော အဖွဲ့အစည်းအမည်ဖြင့် ရှာဖွေ၍ အဆင့်အတန်းကို သင်ကိုယ်တိုင် စစ်ဆေးပါ။ မကြာသေးမီက အတည်ပြုခံရသော အဖွဲ့အစည်းများသည် ထိုနေရာတွင် ပေါ်လာရန် အချိန်ယူရနိုင်သောကြောင့် စာရင်းတွင် မတွေ့ရသေးခြင်းသည် သတိပေးလက္ခဏာထက် မျှော်လင့်ထားသင့်သည့်အရာဖြစ်သည်။ ရင်းမြစ်များ- IRS Publication 526 နှင့် 1771၊ IRS Topic no. 506 နှင့် Rev. Proc. 2025-32။ ဒေါ်လာပမာဏများသည် ၂၀၂၆ အခွန်နှစ်အတွက်ဖြစ်ပြီး နှစ်စဉ်ပြောင်းလဲသည်။ ၂၀၂၆ ခုနှစ် ဩဂုတ်လ ၃ ရက်တွင် ထုတ်ပြန်သည်။

winsvpn.org

Win’s VPN Inc. စာတွဲပေါ်ရှိ တစ်မျက်နှာတည်း အလှူရှင်စာကို ၂၀၂၆ အခွန်နှစ်အတွက် ရေးသားထားပြီး မြန်မာမူအဖြစ် ပုံဖြင့်မဟုတ်ဘဲ စာသားအဖြစ် ဖော်ပြထားသည်။ ဤမူကို ပိုင်ရှင်၏ အတည်ပြုချက်ဖြင့် ဘာသာပြန်ထုတ်ဝေထားပြီး အင်္ဂလိပ်မူက အာဏာသက်ရောက်သည်။ ၎င်းသည် အစိုးရမှတ်တမ်းမဟုတ်ဘဲ ကျွန်ုပ်တို့ကိုယ်တိုင် ရေးသားထားသော စာရွက်စာတမ်းဖြစ်ပြီး အခွန်အကြံပေးချက်မဟုတ်ဘဲ ဥပဒေဆိုင်ရာ အထွေထွေအချက်အလက်ဖြစ်သည်။

Check All of It Yourself

Nothing on this page asks you to trust a screenshot. Every document above was issued by a government agency that keeps its own public record, and that record is the thing actually worth checking. An image can be edited by anyone. A state and federal registry cannot be edited by us.

The sequence, with the date on each document. Employer Identification Number assigned by the IRS on June 17, 2026. Form 1023 user fee of $600.00 paid through Pay.gov on July 13, 2026. IRS determination letter recognizing 501(c)(3) status issued July 21, 2026, effective back to June 11, 2026.

Where to check. Federal tax-exempt status and EIN: IRS Tax Exempt Organization Search. Recently approved organizations can take time to appear in the IRS database, so a delay there is expected rather than a warning sign.

Our certificate. Win’s VPN Inc. holds an extended-validation certificate issued by Sectigo, which means a certificate authority verified the identity of the organization behind this domain before issuing it. Note what you will actually see if you open the padlock: this site sits behind Cloudflare, which terminates TLS at its own edge and presents its certificate to your browser, so the issuer shown there is Cloudflare’s, not Sectigo’s. Browsers also stopped displaying extended-validation identity in the address bar several years ago. We would rather tell you that than let a badge imply something the padlock does not show.

What none of this proves. These records establish that Win's VPN Inc. exists and is recognized by the IRS as a tax-exempt public charity. They say nothing about the speed, security, or reliability of the VPN service itself. No government agency has reviewed, approved, or endorsed the Win's VPN product, and we are not suggesting otherwise.

Get Win's VPN

Simple plans, reliable access, and receipt emails after donation or payment.

Windows Android Linux MacBook (macOS) iPhone (iOS)

Payments are processed by PayPal. Card data is entered on PayPal-hosted payment pages and handled by PayPal's PCI DSS compliant payment infrastructure, so Win's VPN does not store card numbers or process raw card data on our servers.

1 Month

$0.99

Monthly access with 99% reliability target.

Choose Monthly

1 Year

$11.88

One year of Win's VPN protection and Winn Protocol™ access.

Choose Yearly

Lifetime + Support

10 Years

Lifetime pass means 10 years of account validity with tech support.

Get Support Pass

Lifetime

10 Years

Lifetime pass means 10 years of account validity without tech support.

Get Lifetime Pass

Redeem a Prepaid Card

Redemption code

Enter the code from under the scratch panel on your Win's VPN prepaid card. Redemption is instant, and each code can be used once. Your account number and setup key are shown on screen after redeeming — the card itself never carries them. Your 6-digit PIN is chosen by you inside the app and is never printed on the card.

Email (optional, for account recovery email)

Optional. If you add an email, your account details are also sent there as a second channel. The card itself has no buyer identity by design.

Donations expand access to cybersecurity.

Your donation helps Win's VPN fight scams, improve filtering, add servers in more countries, and build physically guarded USA infrastructure for future Double VPN. Depending on donations received, we plan to start offering cybersecurity audit services to local nonprofits in 2027. The more donations we receive, the faster we can expand more servers for everyone. You can comment which VPN location you would like in the donation note so we can prioritize it. Donation receipts are sent by email after payment. Win's VPN Inc. is a 501(c)(3) tax-exempt organization and contributions are tax-deductible to the extent allowed by law. Exemption is effective June 11, 2026, so donations made on or after that date fall inside the exempt period.

Donor badges are coming. We are preparing digital recognition badges in four tiers — Bronze from $100, Silver from $1,000, Gold from $10,000 and Diamond from $100,000 — each valid for one tax year, which we intend to issue through Credly. They are not live yet, so a donation today does not come with one, and a badge is recognition rather than anything purchased: it buys no VPN account, plan or support tier, and does not change how much of your gift is deductible.

Donate

Android Demo

See activation, secure connection, and malicious-link blocking in the Android app.

Android demo video

Our Story

Built by philanthropists and experienced professionals who believe secure access to information is a basic requirement for liberty and justice.

The founder's most beloved parent was assassinated by the Myanmar (Burmese) junta in 2025. Since then, my mission has been to help people keep their freedom by providing essential cybersecurity and access to uncensored news and education because I have nothing to lose anymore.

Our founder is disabled. That is worth saying plainly, because it shapes what to expect from us. We are a small non-profit, not a large provider with a support department: replies can take longer, and features arrive when they are ready rather than on a schedule. It has not changed the standard the security work is held to, and it has not stopped a year of work and thousands of dollars going into this. We would rather you knew that now than discovered it during an outage.

Win's VPN is designed to keep operating for years through resilient infrastructure and defense in depth. Our subscription and donation fees are set up to automatically pay for ongoing server cost and maintenance. Access controls are built so no individual can casually expose or compromise the server network.

Our engineers hold gold-standard industry certifications such as CISSP, OSCP, CEH, CySA+, and other US Department of War (formerly Department of Defense) baseline certifications. We encourage users to research atrocities and censorship after the Myanmar 2021 coup, Russia's war against Ukraine, and other events around the world that may not appear on your local news. Help us bring peace and defeat dictatorship through transparency by sharing this app with your friends!

Leadership

Win's VPN is governed as a mission-continuity project, not a single-person dependency.

CEO / Strategist & Cybersecurity Engineer

Mr / Mrs X

Anonymized for safety of our founder. Retired from the private sector after working for 5+ years as an IT and cybersecurity consultant at well-known global Fortune companies due to unforeseen circumstances. Future US military veteran because the US military is the only one stopping certain powerful greedy countries from taking over the world.

GRC Compliance & IT Manager

Ye Yint Myint Mo

Founder of USIRD.org, a 501(c) nonprofit focused on civil rights protection frameworks. Retired after working as an IT Manager at Cookie's in NYC. As a very young and talented guy surrounded by politicians, he is in a unique position to help lead Myanmar to glory one day.

CISA CISSP SecurityX CySA+ Security+ Network+ A+

Ethical Hacker, Offensive Security

Aung Phone Myint

Seasoned hacker specialized in penetrating networks and maintaining the global top 50 position on HackTheBox, a respected realistic CTF challenge platform. Currently working as an IT manager in NYC.

HTB CWES HTB CPTS CCSP CISSP PenTest+ SSCP Security+ Network+ A+

Continuity by Design

Win's VPN is built to continue operating even if the founder or board members are assassinated, detained, threatened, tortured, or otherwise coerced. Donation processing, backups, rebuild procedures, prepaid operating runway, and succession controls are designed to keep the service alive for at least a decade.

Zero-Knowledge Administration

We cannot provide server access under threat because privileged access is compartmentalized, rotated, root-owned, and protected by Zero Trust controls. No board member is intended to carry a simple master password or backdoor that can unlock the infrastructure on demand.

Message to Intelligence Agencies

Assassinating or coercing our leadership will not stop Win's VPN and will not produce usable server access. The remaining realistic attacks are physical attacks against infrastructure, such as missile strikes. The architecture includes a deadman switch for continuity, evidence preservation, hot-site disaster recovery, regional redundancy, backups, and prepaid replacement planning.

Referral Program

Share Win's VPN with someone who needs safer, more open internet access. When a paid plan is bought through your referral link, both accounts gain the same bonus: 20% of the term that purchase covers, added as whole days.

How Referrals Work

Paid accounts get a referral link inside the app. Free access is not tied to a personal account, so it cannot earn or grant referral time, though free users can still share the Win's VPN website. When someone buys a paid plan through your link and that payment settles, we add the same number of days to both accounts: 20% of the term that purchase covers, rounded up to whole days. A one-month plan works out to roughly 6 or 7 days each, a one-year plan to about 73 days each, and a 10-year lifetime pass to about 731 days each. The bonus is a set number of days taken from the purchase you referred, not a percentage of your own remaining time, so referring a one-month buyer adds about a week to your account whichever plan you are on.

Each referred account can earn this once. Later renewals by the same person do not pay again, you cannot refer yourself, and a code only counts while the referring account is still active; if it has lapsed, neither side gets the bonus. There is no limit on how many different people you can refer. The days are added as soon as the payment settles rather than after a waiting period. If that payment is later refunded, reversed, cancelled, suspended, or fails, the bonus days are taken back off the referring account and the referred account loses the access that payment funded.

If someone sent you a referral link, download Win's VPN, choose a plan, and complete the purchase through that link. The code travels with the payment and is applied to both accounts once the payment settles.

Privacy Policy

This Privacy Policy explains how Win's VPN handles user data. English is the controlling legal version; translations are provided for convenience only.

Version 2026-08-20.v1

Privacy Policy, Terms, Acceptable Use, and Liability

Company identity. Win's VPN Inc. operates the Win's VPN service. Win Empire LLC designs and builds the software, websites, scripts, and infrastructure used by the service. Win's VPN Inc. is a Florida nonprofit corporation filing, document number N26000008302, with business phone (424) 946-7876 and principal operations in Florida. The Internal Revenue Service determined, in a letter dated July 21, 2026, that Win's VPN Inc. is exempt from federal income tax under Internal Revenue Code Section 501(c)(3), with an effective date of exemption of June 11, 2026, and classified Win's VPN Inc. as a public charity under Section 509(a)(2) rather than a private foundation. Donors can deduct contributions under IRC Section 170, and Win's VPN Inc. is qualified to receive tax-deductible bequests, devises, transfers, or gifts under Section 2055, 2106, or 2522. Contributions are deductible to the extent allowed by law, deductibility depends on each donor's own circumstances, and Win's VPN Inc. does not provide tax advice. Win's VPN Inc. uses a December 31 accounting period and is required to file an annual Form 990-series return. Tax-exempt status is a determination about the organization; it is not an IRS review, approval, or endorsement of the Win's VPN service. Win's VPN is provided as a privacy, cybersecurity, and anti-censorship technology service. Availability, speed, routing, compatibility, server locations, and payment features may vary by region, network, censorship conditions, device, platform, and maintenance status.

Acceptance. By activating or using Win's VPN, you agree to use the service lawfully, not attack or abuse our services or infrastructure, and accept these Terms, the Verified No Log Policy, Acceptable Use Policy, Hold Harmless Agreement, Limitation of Liability, and Electronic Records consent. Account use requires clickwrap acceptance of the current legal terms inside the app before activation.

Payment terms. All payments, subscriptions, lifetime passes, tech-support passes, and donations are final and non-refundable to the maximum extent permitted by law. Canceling a subscription stops future renewals when supported by the payment provider, but it does not create a refund for past charges, lifetime access, donations, or already-issued account access. Card payments are processed by PayPal, and where cryptocurrency payment is offered and enabled it is processed through a BTCPay Server instance or a Monero wallet service. Card data is entered on PayPal-hosted payment pages and handled by PayPal's PCI DSS compliant payment infrastructure, so Win's VPN does not store card numbers or process raw card data on our servers.

Verified No Log policy. Win's VPN does not collect or keep VPN activity logs. We do not log browsing history, DNS query history, traffic contents, raw VPN traffic, or user destination activity. The only limited service metadata we may store is the minimum needed to operate the service, such as account status, payment/referral status, legal acceptance evidence, security/abuse-prevention records, and privacy-preserving device-limit metadata for enforcing the three-device limit. Transient connection/session state is cleared when the VPN disconnects. Device-limit metadata is deleted or overwritten when the device is deactivated, replaced, or no longer needed for active account operation, and app-collected operational data that is no longer needed is deleted or anonymized within 90 days. The public website may use consent-based analytics and ad conversion tracking to measure page visits, downloads, demo views, payment-link clicks, and donation-link clicks; this website marketing tracking is separate from VPN tunnel traffic and does not track what users do through the VPN.

Privacy Policy and user data handling. Win's VPN may access, collect, transmit, or store only the user data needed for app and service functionality: account number, email address when provided for paid/manual accounts or support, app platform and version, device name/model, local split-tunneling package selections, device identifier bucket, source IP bucket, legal acceptance records, payment confirmation metadata received from PayPal, referral/account-validity metadata including which account referred a new account, prepaid redemption codes submitted on this website, security vulnerability reports submitted through our disclosure form, support messages the user sends, security/abuse-prevention events, diagnostics or crash information when provided by the platform, and website analytics or ad-conversion events when consented to on the website. Before the VPN connects, the app may retrieve a coarse public-IP location by querying Cloudflare's network-metadata endpoint (speed.cloudflare.com/meta) or a first-party Win's VPN edge endpoint, and may request a surrounding map from Apple Maps on Apple platforms or an OpenStreetMap-derived tile service on other platforms. The endpoint that derives the coarse location and the map provider necessarily receive the connection IP and ordinary request metadata used for that request; Win's VPN does not request device GPS for this feature or retain the returned IP, city, postal code, or map-view history. Win's VPN does not sell personal or sensitive user data.

Device or other ID disclosure. After the user accepts the bundled Privacy Policy, the app generates a random app-install identifier on the device and transmits it to Win's VPN with account or free-access identity and device details. The identifier is created locally on first run and is not derived from a device hardware identifier or an advertising identifier. On Android, Windows, and Linux it is kept in the app's private storage and reinstalling the app produces a new one; on Apple platforms it is kept in the device keychain and can survive a reinstall on the same device. It may be linked to the account for app functionality, account management, the three-device limit, fraud prevention, security, and abuse prevention. It is not used for advertising or tracking, sold, or shared for advertising. The hub protects the retained device-limit value; it is deleted or overwritten when the device is deactivated, replaced, or no longer needed.

Device cryptographic identity. In addition to the random install identifier, the app generates a long-lived cryptographic key pair on first use of each account and derives a public key from it. That public key is transmitted to Win's VPN with every account verification and configuration renewal request, not only at activation, and is used as one of the persistent identifiers that identifies this device to the service for connection provisioning, the three-device limit, and abuse prevention. It is a long-lived linkable identifier: it stays the same across app relaunches and reconnects and therefore functions as a repeatable device marker, not a one-time token. It is not derived from hardware identifiers or advertising identifiers. The private key itself never leaves the device; only the derived public key is transmitted. The key pair is stored locally in the app's private storage or the platform keychain, and the corresponding account-side record is deleted or overwritten when the device is deactivated, replaced, or no longer needed.

Live public-IP display. After the user accepts the bundled Privacy Policy, and while the app is disconnected, it may query the third-party service api.ipify.org to display the device's current public IP address next to the connection status indicator. That service necessarily receives the connection IP and ordinary request metadata for each such request; no account number, device identifier, or other app data is sent. The request is made to improve the connection-status UI and is never made while a VPN tunnel is active.

Speed-test endpoints. When the user starts the in-app speed test, the app measures throughput by downloading from and uploading to third-party test servers. The measured hosts are speed.cloudflare.com and cachefly.cachefly.net for every region, and, for nodes in the western United States, losangeles.ca.speedtest.frontier.com, lsanca-speedtest-ookla-02.st.charter.com, and speedtest.lax2.sonic.net. Each server receives the connection IP, ordinary request metadata, and the transferred measurement traffic; no account number, device identifier, or other app data is included. These requests occur only while the user is running the speed test.

Gateway recovery and third-party connections. So that the app can still reach a working gateway when the usual DNS or CDN paths are censored, it also requests a small gateway-recovery file hosted on GitHub at raw.githubusercontent.com. GitHub necessarily receives the connection IP and ordinary request metadata for that request. The file can only select among gateways already built into the signed app, and no account number, device identifier, or other user data is sent with the request. This request is made only after the user accepts the bundled Privacy Policy.

Abuse prevention and rate limiting. To throttle repeated failed attempts and protect accounts, gateways, and infrastructure, the service keeps short-lived request counters and security-event records keyed to a hashed form of the source IP address, device identifier, or account number rather than to the address itself. These records exist only for security, fraud prevention, abuse response, and device-limit enforcement. They are not used to profile a user, are not used for advertising, and never contain VPN traffic, browsing history, DNS query history, or destination activity.

Prepaid redemption codes. When a prepaid card code is entered on this website, the code is sent to Win's VPN so it can be checked and exchanged for account credentials. A redemption code is a bearer credential until it is used: it is submitted in the request body rather than in the page address, and each code can be redeemed only once. The card itself never carries an account number or PIN. A redeemed code is treated as account and payment provisioning data and is handled under the retention terms below.

Referral program data. Referral links take the form /referral/<code>. The code is read from the link address in the browser and passed to Win's VPN when a plan is purchased through it. If an account is created that way, the referring account is recorded against the referred account so the 20% account-validity bonus can be granted to both, and reversed if the funding payment is later refunded, cancelled, or reversed. Referral records are account-to-account only; they do not record what either person does through the VPN.

Security vulnerability reports. Our Vulnerability Disclosure Program page invites security researchers to report weaknesses. Submitting the form sends the name or handle, reply email address, one-line summary, the report detail, and an optional credit preference to our security team. This information is used to triage, reproduce, fix, and credit the reported issue, and to correspond with the reporter. Reporting is voluntary, and a researcher who does not want to be named can say so in the form. Our machine-readable security contact is published at /.well-known/security.txt.

Data use and sharing. User data is used to activate accounts, enforce the three-device limit, provide free and paid VPN access, operate split tunneling, process payments, donations, and prepaid redemptions, credit referrals, send account/service emails, document legal acceptance, detect abuse or attacks, triage and answer security vulnerability reports, answer support requests, improve reliability, and comply with lawful obligations. Data may be shared only with service providers that support those purposes, such as PayPal for payment processing, SMTP2GO for transactional email, Google Play or other app stores for store review and platform services, hosting/CDN/security providers for infrastructure and attack defense, and legal or governmental authorities only when required by valid legal process. GitHub hosts the gateway-recovery file described above and therefore receives the connection IP and ordinary request metadata when the app fetches it; Win's VPN sends GitHub no account, device, or user data. Win's VPN does not share VPN browsing history, DNS query history, traffic contents, or destination activity because it is not designed to collect those records.

Secure handling, retention, and deletion. App-to-service and website communications use encrypted transport where supported, VPN traffic is encrypted from the device to the tunnel endpoint, production secrets are stored outside public source in root-owned server configuration, and operational identifiers are hashed or bucketed where practical. Access to production systems is limited to authorized administrators, and backups/security logs are protected by server access controls. App-collected operational data that is no longer needed for active service operation is deleted or anonymized within 90 days. Account, payment, prepaid redemption, referral, and legal acceptance records are retained only while needed to operate the account, satisfy accounting/legal obligations, prevent fraud or abuse, resolve disputes, or document customer acceptance. Users may request account deletion or privacy help by contacting privacy@winsvpn.org or support@winsvpn.org; some records may be retained longer only where required for payment, legal, security, fraud-prevention, or dispute-resolution reasons.

Acceptable use. Customers may use Win's VPN for lawful privacy, security, education, and anti-censorship purposes. Customers may not use the service for attacks, unauthorized access, fraud, spam, malware, harassment, child exploitation, copyright infringement, torrenting, payment or device-limit evasion, or any activity that violates applicable law or harms people, networks, platforms, or infrastructure. We may suspend access, preserve evidence, cooperate with lawful process when required, and seek recovery of damages, costs, and fees caused by misuse, abuse, attacks, or unlawful conduct. Please note that our VPN is designed in a way we cannot store your data.

Android safety mode. Android camouflage mode is an optional user-safety feature for high-risk censorship environments, including Burma/Myanmar, where visible VPN apps can expose users to retaliation; it does not hide malicious activity, and the Android VPN notification remains user-controlled.

Android VpnService disclosure. On Android, Win's VPN uses Android VpnService as a core user-facing VPN function. After the user starts a connection and approves Android's standard VPN permission prompt, VpnService creates an encrypted device-level tunnel to a Win's VPN endpoint, routes selected device traffic through that tunnel, supports user-selected split-tunneling exclusions, and shows the Android VPN indicator/notification while active. Win's VPN does not use VpnService to inject ads, monetize traffic, manipulate advertising, sell traffic data, or collect browsing history, DNS query history, traffic contents, or destination activity.

Android installed-app visibility for split tunneling. When an Android user opens Exclude Apps From VPN (Split Tunneling), Win's VPN first shows a separate installed-app access disclosure. The app accesses installed application names, icons, and package identifiers only after the user affirmatively chooses Continue; choosing Not now leaves the inventory untouched and the VPN remains usable without per-app exclusions. The installed-app inventory is used locally so the user can search for and select apps to exclude from the VPN. The full inventory is not uploaded to Win's VPN, shared with third parties, sold, or used for advertising or analytics. Only the package identifiers the user selects are retained in local app settings and passed locally to Android VpnService to apply those exclusions. The user can remove selections in the split-tunneling picker, or delete all locally retained selections by clearing Win's VPN app data or uninstalling the app.

Free, trial, donated, and administrator-granted access. These access types are discretionary, non-paid, and revocable. To the maximum extent permitted by law, users of free, trial, donated, or administrator-granted access receive the service without paid-service remedies, waive claims against Win's VPN Inc. and Win Empire LLC arising from that discretionary access, and remain responsible for their own conduct, local-law compliance, and third-party claims.

Software ownership, open-source notices, and quality control. Win's VPN uses Win Empire LLC proprietary code, configuration, deployment automation, and third-party open-source components. We do not claim ownership of upstream third-party projects. Required third-party notices are preserved where applicable. Win Empire LLC maintains internal IP and open-source license compliance, written quality control, release testing, change management, customer acceptance, and company signoff procedures for production releases.

Insurance and risk transfer. Win's VPN Inc. and Win Empire LLC maintain insurance-readiness controls and active cyber insurance through Coalition Inc. to support responsible operations and underwriting requirements. Any insurance coverage is governed only by the issued policy and is for the named insureds only. Insurance does not create a service warranty, direct claim right, third-party beneficiary status, guaranteed recovery, or higher liability cap for any customer or third party.

Hold harmless. To the maximum extent permitted by law, the customer agrees to defend, indemnify, and hold harmless Win's VPN Inc., Win Empire LLC, and their owners, officers, employees, contractors, and affiliates from claims, losses, damages, liabilities, fees, penalties, and expenses arising from the customer's misuse of the service, violation of these terms, unlawful activity, or violation of third-party rights.

Limitation of liability. To the maximum extent permitted by law, Win's VPN Inc. and Win Empire LLC disclaim indirect, incidental, special, consequential, exemplary, punitive, lost-profit, lost-data, business-interruption, censorship, connectivity, speed, geolocation, payment-provider, app-store, and third-party-service damages. The service is provided without a guarantee that every network, country, website, app, streaming service, device, or censorship system will be reachable at all times.

Governing law. These terms are governed by the laws of the State of Florida, United States, without regard to conflict-of-law principles, except where non-waivable consumer protection laws require otherwise.

Electronic records and customer acceptance. By checking the required boxes in the app and continuing activation, the customer consents to electronic records and agrees that the clickwrap acceptance, timestamp, document version, document hash, account or free-access identity, device bucket, source IP bucket, platform, app version, and server HMAC certificate form the service acceptance record. Company signoff is represented by a server-generated acceptance certificate ID and HMAC signature.