Private. Free. Shared.
A free VPN paid for by privacy-safe ads. Half or more of the ad revenue goes back to the people who use it.
WireGuard · IKEv2 · OpenVPN · No logs · Tor over VPN
iPhone, Mac and Windows use their built-in VPNChecksums
Firefox: until it is in Firefox Add-ons, load it from about:debugging → This Firefox → Load Temporary Add-on.
How it works
Every app, one tunnel
On Android, all of your phone's traffic is encrypted. In Chrome and Edge, the extension routes the browser.
Cumulus ID sign-in
Sign in with your Cumulus ID, or create one in the app. One balance across your devices; VEIL keeps only a hash of the ID.
Honest status
"Protected" appears only after the server has answered through the tunnel, and is checked again every minute.
Kill switch
If the server drops, traffic is held instead of leaking, and VEIL reconnects on its own.
Tor over VPN
One switch sends your traffic from our server into the Tor network, .onion sites included.
Trackers blocked
On by default: ad networks, analytics and data collectors are stopped before they connect, in every app.
Unsafe Wi-Fi alerts
Join Wi-Fi while VEIL is off and your phone tells you, with a stronger warning for open networks.
Ads by location only
One small ad, chosen by the server location you picked. Never by what you browse.
Protocols
WireGuard
The default on Android: fast, modern and light on battery. The private key never leaves your device.
IKEv2 / IPsec
Built into Android, iPhone, Mac and Windows, and it reconnects smoothly between Wi-Fi and mobile data.
OpenVPN
Works almost anywhere, over UDP or TCP, with the OpenVPN app on any computer, phone or router.
HTTPS proxy
What the browser extensions use: the browser's traffic, encrypted to our server over port 443.
To use VEIL on another device, open Other devices in the app and choose a protocol. You get a WireGuard file, an OpenVPN profile or IKEv2 settings, with a login that lasts 7 days.
iPhone, Mac, Windows
1. Make a set-up
In the Android app or the browser extension, open Other devices, pick a location and a protocol. The login lasts 7 days; make a new one when it runs out.
iPhone and iPad
Settings → VPN → Add VPN Configuration → IKEv2. Enter the server, remote ID, username and password from the set-up. Or import the WireGuard file into the WireGuard app.
Mac
System Settings → VPN → Add VPN Configuration → IKEv2, with the same details. Or use the WireGuard or OpenVPN file.
Windows
Settings → Network → VPN → Add VPN: provider Windows (built-in), type IKEv2, sign-in by user name and password. Or import the OpenVPN or WireGuard file.
Linux and routers
Import the WireGuard
.confor the OpenVPN.ovpnfile.
What VEIL can't see
The sites and apps you use
No traffic logs and no DNS logs. Blocked trackers are counted, never named.
What you send
Encrypted from your device to our server. HTTPS sites stay encrypted all the way.
Who you are
Only a hash of your Cumulus ID: no name, email or phone number. Your IP address is never written to disk.
Where Tor takes you
With Tor over VPN on, our server sees only that you use Tor.
What we do keep: a session tied to a hash of your Cumulus ID, minutes connected, ad view counts, a hashed device ID and, if you link one, a wallet address. Privacy policy
Earn $VEIL
0.1 $VEIL per connected minute24 $VEIL daily limit50–65% of ad revenue to the community
One earning account per device, one daily limit per wallet, and no rewards on emulators or rooted phones. $VEIL is claimed to FIRM Wallet™ on Solana. It is a utility token: not equity, income or an investment return, and not a share in Infinitum Corporation.