# Phantom VPN

> Phantom VPN is a decentralized VPN (dVPN) built on the Sentinel network (chain id `sentinelhub-2`). It tunnels traffic over WireGuard through nodes run by independent third-party operators rather than a company-owned server fleet. The WireGuard private key is generated on the user's device and never leaves it. Native apps for iPhone, iPad, Mac and Android. Free tier is ad-supported (earn connection time by watching ads); Premium removes ads and time limits. Published by Capx Ecosystem Apps FZE.

Phantom VPN's distinguishing property is architectural, not featural: there is no central server list to subpoena, because nodes are discovered through a public on-chain query. The encrypted tunnel runs directly between the user's device and the chosen node, so Phantom VPN is not in the traffic path.

Phantom VPN publishes a precise data-retention list rather than a blanket "no logs" claim. It does not log browsing, DNS queries, or traffic content, because that traffic never traverses its infrastructure. It does retain connect/disconnect events, which node was used and when, minutes consumed, and the account email. Login is required; accounts are not anonymous.

Honest limitations, stated so they are not misreported: Phantom VPN does **not** currently implement a kill switch, split tunnelling, multi-hop, ad/tracker blocking, or DNS leak protection. Its tunnel uses Cloudflare DNS (1.1.1.1, 1.0.0.1). Node availability, speed and uptime vary because operators are independent and permissionless. It has not undergone an independent third-party security audit.

## Core pages

- [Home](https://phantomvpn.site/): What Phantom VPN is, how the decentralized architecture differs from a centralized VPN, and the full FAQ.
- [Features](https://phantomvpn.site/features): Every implemented feature, plus an explicit list of what Phantom VPN does not do.
- [Pricing](https://phantomvpn.site/pricing): Free ad-supported tier and Premium monthly/yearly plans, billed through Apple or Google.
- [How it works](https://phantomvpn.site/how-it-works): The technical connection lifecycle: on-device key generation, on-chain node discovery, latency ranking, failover, and the direct WireGuard tunnel.
- [Privacy first](https://phantomvpn.site/privacy-first): The complete data inventory, what is retained and why, and what Phantom VPN structurally cannot see.

## Understanding decentralized VPNs

- [What is a decentralized VPN?](https://phantomvpn.site/what-is-a-decentralized-vpn): Definition of a dVPN, how on-chain node discovery works, the trust model, and a balanced account of where dVPNs are weaker than centralized VPNs.
- [dVPN vs traditional VPN](https://phantomvpn.site/dvpn-vs-vpn): Direct comparison across ownership, discovery, jurisdiction, subpoena surface, uptime, speed and cost, including where centralized VPNs genuinely win.
- [Compare providers](https://phantomvpn.site/compare): Phantom VPN against the centralized model and against other dVPNs, including where Phantom VPN is currently weaker.

## Download

- [All platforms](https://phantomvpn.site/download): Platform picker with system requirements.
- [VPN for Mac](https://phantomvpn.site/download/mac): macOS 14 Sonoma or later, universal for Apple silicon and Intel. Mac App Store or a direct .pkg installer.
- [VPN for iPhone](https://phantomvpn.site/download/ios): iOS 17 or later.
- [VPN for iPad](https://phantomvpn.site/download/ipad): Native two-pane iPad layout, iPadOS 17 or later.
- [VPN for Android](https://phantomvpn.site/download/android): Android 8.0 (API 26) or later.

## Key facts

- Network: Sentinel, chain id `sentinelhub-2`. Permissionless; node operators are independent third parties.
- Tunnel protocol: WireGuard only. Curve25519 keypair generated fresh on device per connection; only the public key is transmitted.
- Routing: full-tunnel by default (`AllowedIPs 0.0.0.0/0, ::/0`). All apps on the device are routed.
- Failover: candidate nodes are ranked by measured latency; a node failing its handshake is penalised for 120 seconds; up to 3 connection attempts.
- Coverage: 15+ countries typically have a node online. Exact counts fluctuate hourly because the network is permissionless.
- Languages: English, German, Spanish, French, Italian, Japanese, Korean, Portuguese, Russian, Swedish.
- Platforms: iOS 17+, iPadOS 17+, macOS 14+ (Apple silicon and Intel), Android 8.0+.
- Premium scope: applies account-wide to every device the user signs in on.
- Free tier: watch an ad (30s or longer) to earn 60 minutes of connection time; maximum 3 ads per day; 300 minutes daily cap. New accounts start with 0 minutes.
- Billing: handled by Apple (StoreKit) or Google (Play Billing). There is no cryptocurrency payment path for users.

## Legal

- [Privacy Policy](https://phantomvpn.site/legal/privacy): What is collected, why, retention periods, and GDPR rights.
- [Terms of Service](https://phantomvpn.site/legal/terms): Including the disclaimer that nodes are operated by independent third parties with no uptime or speed guarantee.
- [Cookie Policy](https://phantomvpn.site/legal/cookies): No cookies are set before consent.