KRYPT VPN
Terms of Use, Risk Disclaimer and Privacy Notice — version 1
Effective 2026-08-21

Krypt VPN is free and open source, licensed under the GNU General Public
License v3 or later. Accepting here is agreement to the terms below, which
govern your use of the software; it does not limit the rights that licence
grants you. Krypt will ask you to accept them again, and record that you did,
before it will connect anything.

==============================================================================
RISK DISCLAIMER
==============================================================================

1. Krypt is a client, not a VPN service

Krypt does not operate, own, rent, sponsor or control any of the servers this
software connects to, and does not carry your traffic. Krypt VPN is a client
program that collects server details other people have published for public
use, measures which of them work, and configures your machine to route traffic
through one of them. When you connect, the arrangement is between you and
whoever runs that server. Krypt is not a party to it, has no agreement with
that operator, and can make no promise on their behalf.

2. The servers are run by strangers

Nodes are gathered from public subscription feeds, public proxy lists,
volunteer directories such as VPN Gate, and similar openly published sources.
Nobody vets them. Their operators are usually anonymous, are in jurisdictions
you did not choose, and owe you nothing. An operator may be a hobbyist, a
research project, a commercial provider advertising a free tier, or somebody
running a server specifically to watch what passes through it.

Assume as the default, and without exception, that the operator of the server
you exit through is able to do all of the following:

* See the source, destination, timing and size of everything you send —
including for traffic they cannot read.
* Read, record, retain and disclose in full any traffic that is not already
encrypted end to end before it leaves your machine.
* Alter unencrypted traffic in transit, including injecting content into web
pages and redirecting connections.
* Attempt to intercept encrypted traffic by presenting false certificates,
which your software will usually but not always reject.
* Log the IP address you connect from and correlate it with all of the
above.
* Pass any of that to somebody else, whether under legal compulsion or
voluntarily.
* Disappear, change hands, or become hostile between one connection and the
next.

This is inherent in routing traffic through infrastructure you do not control.
It is not a defect in Krypt, and no setting in Krypt removes it.

3. No anonymity, and no guarantee of privacy

Krypt changes which IP address a website sees. That is not the same as being
anonymous and must not be relied on as though it were. You can still be
identified through accounts you log into, browser and device fingerprinting,
cookies, timing and volume correlation, what you upload, and records held by
the node operator.

Krypt is not built to withstand a determined or well-resourced adversary, and
must not be used where being discovered would put somebody in danger —
including journalism, activism, whistleblowing, or evading a state authority
where that carries risk. If your safety depends on it, this is the wrong tool.

4. Protection is best-effort and can fail

Krypt takes real measures to narrow the exposure: DNS queries go through the
tunnel so lookups cannot leak to your provider, IPv6 is handled so it cannot
slip past the tunnel, an optional kill switch blocks traffic outright rather
than letting it fall back onto your own connection if the tunnel dies, and a
built-in leak test lets you check the result yourself.

None of that is guaranteed. Each of those depends on your operating system,
network hardware, drivers and other security software, and each can be
defeated by a bug in Krypt or in anything it relies on. Traffic may leak
outside the tunnel, the tunnel may fail open, the kill switch may not engage,
and your real IP address may be exposed at any time and without warning. Run
the leak test and verify rather than assuming.

5. Speed, availability and stability

Free public nodes are unreliable by nature. They go offline without notice,
saturate, throttle or block particular protocols and destinations, and vary
enormously in speed. Krypt measures and ranks them and can move you when one
fails, but there is no service level here of any kind and none is offered. Do
not use Krypt where a dropped or slow connection would matter, and never rely
on it for emergency communications.

6. Using a VPN may itself be restricted where you are

Some countries restrict, license or prohibit VPNs and similar software, and
many employers, schools and network operators forbid them on their networks.
Penalties in some places are severe. Whether you may lawfully run this
software, on this network, in this country, is yours to establish before you
connect. Krypt does not know where you are and offers no view on whether it is
lawful for you to proceed.

7. Somebody else is paying for the bandwidth

Every node you use costs its operator money and capacity they are giving away.
Sustained heavy transfer, aggressive scanning, or anything that draws abuse
complaints to their address takes a free resource away from everybody else,
and usually gets the node shut down. Use it the way you would use a stranger’s
hospitality.

==============================================================================
TERMS OF USE
==============================================================================

1. Agreement, and who may use this

These Terms of Use are a binding agreement between you and Krypt (“we”, “us”)
covering the Krypt VPN client software, its engine and its documentation
(together, “the Software”). By accepting them, installing or using the
Software you agree to them, and to the Risk Disclaimer and Privacy Notice,
which form part of them. If you do not agree, do not use the Software and
remove it.

You confirm that you are at least 18 years old, or the age of majority where
you live if that is higher, and that you have the legal capacity to enter into
this agreement. If you are accepting on behalf of an organisation, you confirm
you are authorised to bind it, and “you” means that organisation.

2. What the Software does, and what it is not

The Software finds, tests and ranks VPN and proxy servers that third parties
have published for public use, and configures your device to route traffic
through the one you or it selects. We do not provide a VPN service, do not
operate any of those servers, do not carry, route, inspect or store your
traffic, and have no control over, relationship with, or responsibility for
the people who do.

The Risk Disclaimer sets out what follows from that. You confirm you have read
it and that you accept those risks yourself.

3. Licence

The Software is free and open source, licensed under the GNU General Public
License version 3 or later. That licence governs your rights to use, study,
modify and redistribute the source code, and nothing in these Terms limits the
rights it grants you. Where these Terms and the GPL conflict on the subject of
the code itself, the GPL prevails.

These Terms govern your use of the Software as a service to yourself — the
conduct expected of you, and the allocation of risk between us — which the GPL
does not address. If you redistribute or modify the Software, you must not
represent your version as ours or use our names or marks to endorse it, and
you take on responsibility for what your version does.

4. Your responsibilities

You are responsible for everything done through the Software on your device.
You agree:

* To comply with all laws that apply to you — in your own country, in any
country whose network you route through, and in any country you connect to.
* To satisfy yourself that using VPN or circumvention software is lawful
where you are, before you connect.
* To comply with the acceptable-use rules, terms and network policies of any
node operator, employer, school, internet provider or service you reach
through the tunnel.
* To keep the privileged parts of the Software from being misused on shared
machines. Krypt needs administrator or root access to create a tunnel device
and to manage firewall rules, and whoever controls those controls the
traffic of everybody on that machine.
* To make your own judgement about whether the protection the Software
offers is adequate for what you are about to do, and to verify it with the
leak test rather than assume it.

5. Prohibited uses

You must not use the Software, or any connection made through it, to:

* Break any law, regulation or sanctions regime that applies to you.
* Access, damage, probe or interfere with any computer, network, account or
data without authorisation, including scanning, brute-forcing credentials,
or denial-of-service attacks of any kind.
* Send spam or bulk unsolicited messages, commit fraud, phish, or
impersonate anyone.
* Distribute malware, ransomware, botnet infrastructure, or
command-and-control traffic.
* Produce, obtain or distribute child sexual abuse material, or anything
that sexually exploits a child, under any circumstances.
* Harass, stalk, threaten, defame or incite violence against anyone.
* Infringe copyright, trade marks, trade secrets or any other intellectual
property or privacy right.
* Evade a ban, a court order, a law-enforcement measure, or a lawful
investigation.
* Circumvent export controls or trade sanctions, or use the Software where
you are a sanctioned person or in an embargoed territory to the extent that
is prohibited by law applicable to you.
* Resell, rent or commercially redistribute access as though it were a
service you provide, or represent that any server reached through the
Software is yours or ours.
* Place an unreasonable load on any node — sustained bulk transfer,
automated abuse, or anything likely to draw complaints to its operator.

These prohibitions exist for two reasons: much of it is unlawful, and all of
it lands on somebody who is giving away bandwidth for free.

6. No warranty

THE SOFTWARE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OR
CONDITION OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY. TO THE FULLEST EXTENT
PERMITTED BY LAW WE DISCLAIM ALL IMPLIED WARRANTIES, INCLUDING
MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE,
TITLE, ACCURACY, AND NON-INFRINGEMENT.

In particular, and without limiting the above, we do not warrant that the
Software will be available, uninterrupted, secure or error-free; that any node
will work, be fast, be honest, be in the country it claims, or remain
available; that your traffic will be private, unread, unaltered or unlogged;
that your real IP address, DNS queries or other identifying information will
not be exposed; that the kill switch, leak test or any other protective
feature will work as intended in your environment; or that using the Software
is lawful where you are.

7. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER WE NOR ANY CONTRIBUTOR TO THE
SOFTWARE WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL,
PUNITIVE OR EXEMPLARY DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA,
GOODWILL, PRIVACY, ANONYMITY OR REPUTATION, ARISING OUT OF OR CONNECTED WITH
THE SOFTWARE OR ITS USE, ON ANY THEORY OF LIABILITY, EVEN IF WE HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

THIS INCLUDES, WITHOUT LIMITATION, ANY LOSS ARISING FROM THE CONDUCT OF A NODE
OPERATOR OR ANY OTHER THIRD PARTY; FROM INTERCEPTION, LOGGING, DISCLOSURE OR
ALTERATION OF YOUR TRAFFIC; FROM EXPOSURE OF YOUR IP ADDRESS OR IDENTITY; FROM
A FAILURE OF THE TUNNEL, THE KILL SWITCH OR ANY OTHER FEATURE; FROM
INTERRUPTION OF YOUR NETWORK ACCESS OR CHANGES THE SOFTWARE MAKES TO YOUR
SYSTEM CONFIGURATION; OR FROM ANY LEGAL CONSEQUENCE OF YOUR USE OF A VPN.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SOFTWARE IS
LIMITED TO THE GREATER OF THE AMOUNT YOU PAID US FOR IT (WHICH IS ZERO) AND
TWENTY POUNDS STERLING.

Nothing in these Terms excludes or limits liability that cannot lawfully be
excluded or limited — including liability for death or personal injury caused
by negligence, for fraud or fraudulent misrepresentation, or any other
liability that applicable law does not permit to be excluded. Some
jurisdictions do not allow certain exclusions, so parts of the two paragraphs
above may not apply to you; where that is so, they apply to the maximum extent
the law allows. Nothing here affects your statutory rights as a consumer.

8. Indemnity

To the fullest extent permitted by law, you agree to indemnify and hold
harmless Krypt, its contributors and maintainers from any claim, demand, loss,
liability, damage, fine or expense (including reasonable legal fees) brought
by a third party — including a node operator, a network provider, a rights
holder or a public authority — and arising out of your use of the Software,
your breach of these Terms, or your violation of any law or of anybody else’s
rights. This does not apply where the claim arises from our own fraud or
wilful misconduct, and it does not apply to the extent your local law does not
permit it.

9. Third-party components and services

The Software downloads and runs third-party components, including the sing-box
engine and, on Windows, a TUN driver, and it fetches node lists from
third-party sources over the public internet. Those components and sources are
governed by their own licences and terms, are provided by their own authors,
and are not warranted by us. Fetching a node list discloses your IP address to
the source, exactly as visiting a web page would.

10. Changes, suspension and termination

We may change, suspend or discontinue the Software, any feature of it, or the
sources it draws on, at any time and without notice. We may update these
documents; when the substance changes the Software will ask you to accept the
new version before it will connect again, and continuing to use it after that
means you accept them. The version and date in force are shown in Settings.

You may end this agreement at any time by uninstalling the Software. Sections
6, 7, 8, 11 and 12, and any other clause which by its nature should survive,
survive termination.

11. Governing law and disputes

These Terms and any dispute arising out of them or the Software are governed
by the law of England and Wales, without regard to its conflict-of-laws rules,
and the courts of England and Wales have exclusive jurisdiction. If you are a
consumer, this does not deprive you of the protection of mandatory rules of
law of the country where you live, or of the right to bring proceedings there
where your local law gives you that right.

12. General

If any provision of these Terms is held unenforceable, it is to be modified to
the least extent necessary to make it enforceable, or severed if it cannot be,
and the rest remains in force. Our failure to enforce a provision is not a
waiver of it. You may not assign this agreement; we may assign it to a
successor of the project. These Terms, together with the Risk Disclaimer and
Privacy Notice, are the entire agreement between us about the Software and
replace any earlier understanding. Nothing here creates a partnership, agency
or employment relationship.

Questions or legal notices: hi@krypt.cc.

==============================================================================
PRIVACY NOTICE
==============================================================================

1. We collect nothing

Krypt operates no server that your copy of the Software reports to. There is
no account, no sign-up, no licence key, no telemetry, no analytics, no crash
reporting and no usage statistics. We do not receive your IP address, your
browsing, your settings, your node list or any identifier for your device or
installation, because nothing is sent to us at all.

2. What stays on your device

Settings, the node pool, measurement results, recent countries and diagnostic
logs are written to Krypt’s data directory on your own machine and are never
transmitted anywhere. The path is shown in Settings, and the logs folder opens
from there. Deleting that directory erases everything Krypt knows. Note that
log files may contain node addresses, your exit IP addresses and timestamps —
check before you attach one to a bug report.

3. What necessarily leaves your device

Using the Software requires talking to other people’s machines:

* Node sources. Fetching subscription feeds and proxy lists discloses your
IP address and the time of the request to whoever hosts them, as visiting
any web page does.
* Nodes themselves. Testing and connecting discloses your IP address to the
node, along with everything described in the Risk Disclaimer.
* Connectivity and leak checks. These contact a small number of public
endpoints to establish what your apparent IP address and DNS resolver are,
which discloses your address to them.
* The engine download. Installing sing-box fetches it from its official
release host.

Each of those parties has its own privacy practices, which we do not control
and cannot vouch for.

4. Node operators are not us

The most important privacy fact about this software is in the Risk Disclaimer
rather than here: the operator of the server you exit through can observe your
traffic and may log or disclose it. Our collecting nothing does not make you
unobserved.

5. Children

The Software is not intended for anyone under 18, and we knowingly collect no
information from anyone, of any age.

6. Contact

Questions about this notice: hi@krypt.cc. Since we hold no data about you,
there is nothing for us to produce, correct or erase on request — the copy on
your machine is the only copy.

Questions or legal notices: hi@krypt.cc.
