Frequently asked questions

Frequently asked questions

General and architecture

What is evadity?

evadity is a cryptographically secure and dedicated single-hop proxy service.

Your devices establish a secure, encrypted tunnel directly to dedicated, ephemeral proxy servers that we provision solely for you on Google Cloud Platform (GCP) or Amazon Web Services (AWS). From there, your traffic is routed through cloud backbones to bypass internet congestion, delivering fast, stable speeds and low latency. The service is designed to prevent traffic interception, IP-based profiling, and local network surveillance, ensuring your connection remains decoupled from your personal identity.

Read more about us and why we started evadity.

Is evadity an invisibility cloak?

No. Because we deploy our proxy servers on Google Cloud Platform (GCP) and Amazon Web Services (AWS), their hypervisors log network connection metadata (your source IP address, connection timestamps, and the volume of data transferred). If you attempt to use evadity to conduct high-profile malicious attacks, authorities will subpoena our cloud providers for those network logs. They will trace that connection back to your local Internet Service Provider (ISP), and your ISP will hand over your real identity. Our database architecturally cannot betray you, but the internet's physical infrastructure can.

If cloud providers log connection metadata, why do you use them?

It's a deliberate engineering trade-off designed to maximize performance and anti-censorship resilience. We deploy proxy servers on Google Cloud Platform (GCP) and Amazon Web Services (AWS) for two distinct advantages:

• The global fiber backbone: They operate the fastest, lowest-latency network infrastructure on the planet. Once your encrypted traffic hits one of our proxy servers, it routes over their dedicated, private fiber lines rather than the congested public internet.
• High-trust cloud IPs: Traditional VPN data centers are heavily fingerprinted and easily blocked by enterprise firewalls and state censors. GCP and AWS IPs host millions of legitimate global businesses. Blocking these subnets causes massive collateral damage to the internet, making your proxy connection significantly harder to single out and drop.

While cloud providers log connection metadata (the source IP, timestamp, and data volume moving between you and our servers), they cannot read the data passing inside that connection. Because your traffic is encrypted between your device and your dedicated proxy server, the data moving between you and our servers is opaque, randomized, and cryptographically unreadable. We isolate the network-level risk through architectural decoupling. The cloud hypervisor sees the secure, encrypted connection, but because our database contains zero personal data and our proxy servers are stripped of OS-level telemetry, there is no structural way to correlate the specific traffic leaving that server with your real-world identity.

If some websites block cloud IPs, why do you use them to bypass censorship?

We use cloud IPs to exploit a cybersecurity concept known as "collateral freedom".

Streaming platforms, websites, and state censors may perform reverse Autonomous System Number (ASN) lookups to preemptively block traffic originating from known networks, such as those belonging to the cloud providers that we use.

Because budget VPNs operate from predictable data centers and known IP addresses, state censors can block their entire IP ranges, knowing it will have zero impact on their national internet infrastructure.

However, state-level censorship faces a different reality when targeting Google Cloud Platform (GCP) or Amazon Web Services (AWS). These cloud providers host millions of legitimate global businesses and vital services. Blocking them outright would cause catastrophic collateral damage to a country's functional internet.

State censors cannot afford to block an entire cloud network, so they target individual IP addresses. With evadity, your proxy server's IP address changes every time you launch a new server, rendering IP-based censorship highly ineffective. We're also actively developing an IP-cycling feature to further neutralize these targeted blocks.

Why do you use Shadowsocks instead of WireGuard or OpenVPN?

Standard VPN protocols like WireGuard and OpenVPN were designed for security, not obfuscation. They broadcast highly recognizable cryptographic handshakes, making it trivial for enterprise firewalls and state censors to identify and drop their packets using Deep Packet Inspection (DPI).

We built our infrastructure on Shadowsocks because it was explicitly engineered to defeat DPI. It operates without a standard handshake, stripping away the structural fingerprints of a VPN.

Does evadity work in countries with extreme internet censorship?

It's highly resilient, but state censorship is a continuous arms race.

We use Shadowsocks provisioned with the SIP022 (AEAD-2022) specification and the 2022-blake3-aes-256-gcm cipher. This specifically neutralizes "active probing". If a state censor intercepts your connection and sends corrupted packets to fingerprint the proxy server, our infrastructure invalidates the packet and drops the connection completely silently. We starve the censor of the network reaction they need to automatically ban the proxy server's IP.

During periods of extreme political censorship, sophisticated state firewalls may deploy heuristic filters that indiscriminately drop traffic. If your connection is interrupted, evadity's architecture allows you to terminate the impacted server and get a fresh, high-trust cloud IP in a new region.

Account, devices, and security

What devices and operating systems does evadity support?

We currently provide apps for devices running macOS, iOS, and Android. We're actively developing Windows and Linux clients.

Do I need to manually reconnect if my network drops?

No. The evadity app reconnects on its own if you lose connectivity, switch networks (like moving from Wi-Fi to cellular), or wake your device from sleep. To stop evadity from auto-reconnecting, manually disconnect in the app.

How many devices can I use at once?

As many as you want. We don't enforce artificial device limits. You can log into your evadity account on your phone, desktop, and tablet simultaneously.

Because we refuse to log hardware MAC addresses or operating system metadata, our system manages your active logins using ephemeral tokens and randomly assigns an anonymous name (e.g., Apple-Tree) to each device. If you ever lose a device, you can simply view your active tokens in your account dashboard and instantly revoke its access.

Note: While your account can be actively logged in on unlimited devices, your specific plan dictates how many proxy servers you can have active at the exact same time.

Can someone guess or randomly generate my account number?

No. We rely on cryptographic entropy and active network defenses to make unauthorized access virtually impossible.

Your 16-digit account number is not sequential; it's generated using a cryptographically secure random number generator. This yields 10 quadrillion (10,000,000,000,000,000) possible combinations. To put that in perspective, even if we had one billion active users, we would have utilized only 0.00001% of the available pool. The mathematical probability of two users independently generating the exact same number is statistically zero. You're more likely to be struck by lightning while winning the lottery.

The only theoretical threat to a system like this is a "brute-force" attack, where a malicious bot attempts thousands of random numbers per second on our login page to see if one works. We neutralize this at the edge network layer. Our authentication endpoints are protected by algorithmic rate limiting. Any IP attempting to rapidly guess account numbers is instantly banned from accessing our public API and web application.

What happens if I lose my 16-digit account number?

You lose your account. Because we explicitly refuse to ask for an email address, username, phone number, or backup authentication method, we have absolutely no way to verify who you are.

Treat your 16-digit account number like a private cryptographic key. If you lose it, your account, access tokens, and any remaining data allowances are permanently inaccessible. We cannot recover it for you.

Usage and policies

Will my proxy server be shut down if I abuse the network?

Yes, and it will happen automatically.

While we do not monitor your traffic, our proxy servers are deployed on Google Cloud Platform (GCP) and Amazon Web Services (AWS), which employ automated defenses to protect their network reputation.

If you attempt to use an evadity proxy server to conduct high-volume malicious activity (such as outbound DDoS attacks or mass port scanning), our cloud provider's underlying hypervisors will flag the anomalous outbound traffic and null-route the IP address or terminate the server directly at the infrastructure level, completely independent of us.

How do you enforce data limits if you don't log traffic?

We count bytes, not contents. The usage metric in our database is a blind integer counter.

Our network layer simply tallies the total volume of data passing through your secure tunnel to enforce your plan's data allowance. We do not inspect where the data is going, what payload it contains, or what DNS requests it makes. At the end of your monthly data cycle, an automated function sweeps the database and resets this counter to zero, permanently erasing your historical usage volume.

Do you block torrenting, P2P, specific ports, or websites?

We enforce zero network-layer restrictions. We do not monitor your payload, and we do not care what protocols you run through your secure tunnel.

We act as a blind, encrypted router. However, data transfer is a finite commodity. If you use your proxy server for heavy P2P file sharing, you will rapidly exhaust your data allowance. We do not throttle your speed; you simply consume your purchased data cap faster.

The only exception is port 25 (SMTP). To prevent email spam, our cloud providers, Google Cloud Platform (GCP) and Amazon Web Services (AWS), drop all outbound traffic to external mail servers on port 25. Additionally, if you configure your proxy server to listen on port 25, AWS will throttle the traffic until the connection stalls.

How do you handle DMCA or copyright infringement notices?

We architecturally cannot comply with them.

If a copyright holder flags a file-sharing event and sends a DMCA or copyright infringement notice to Google Cloud Platform (GCP) or Amazon Web Services (AWS) regarding one of our proxy server IPs, the cloud provider forwards that notice to us.

Because our servers are stripped of OS-level logging, it's impossible to cross-reference that IP and timestamp with a specific 16-digit account number. We cannot forward the notice to you, we cannot issue a warning, and we cannot suspend your account. The notice is a dead end.

What happens if evadity is hacked or subpoenaed?

We architected evadity under the assumption that our infrastructure could eventually be targeted by a state actor, a hacker, or a rogue employee. By entirely eliminating Personally Identifiable Information (PII) from our systems, we eliminated ourselves as a point of failure.

• If a hacker dumps our database: They retrieve nothing but 16-digit account numbers, blind Stripe IDs, and AES-encrypted server keys. There are no names, email addresses, or user IP addresses to leak.
• If a rogue employee attempts to dox a user: It's structurally impossible. Our internal databases contain no underlying identity data to expose.
• If we receive a subpoena: We cannot comply. If law enforcement demands the real-world identity behind Account 8472948271639482, we literally possess nothing to surrender.

What happens when I terminate a proxy server?

Your server is permanently destroyed through a process called cryptographic erasure (or crypto-shredding).

Because all storage volumes attached to our cloud instances are encrypted at rest, we don't need to overwrite a drive to erase data. When a proxy server is terminated, the unique data encryption key associated with the volume is permanently deleted.

Without this key, the encrypted data residing on the drive is permanently rendered into high-entropy cryptographic static. Even if a forensic team seized the physical hardware immediately after termination, they would recover nothing but irretrievable noise.

The compute and network layers are also dismantled. The cloud provider reclaims and zeroes out the active memory, and the ephemeral IP address is detached and discarded back into the provider's regional pool. Every functional component of your proxy server environment ceases to exist.

Billing and plans

What if I lose my account number but have an active plan?

If you lose your 16-digit account number, your account access is permanently lost. We will not, under any circumstances, recover or hand over an account number.

However, we will not hold your payment method hostage. If you have an active plan you can no longer access, you can contact us and provide the exact transaction date and the receipt number found on your bank statement. We'll use this strictly to locate the active plan in our payment processor and permanently cancel all future charges.

To protect the anonymity of our network, this is a blind cancellation. We'll stop the billing, but we will refuse to disclose the 16-digit account number associated with the charge, even to the owner of the card.

How do payments and refunds work if you don't know who I am?

We enforce strict, physical isolation between our core database and our payment processor. When you purchase a plan, your transaction is processed entirely by Stripe's secure infrastructure.

We do not capture, process, or store your card number, and we never ask for your billing address or name. We explicitly refuse to hold or show any information regarding your actual payment method anywhere on our systems. Instead, our database captures a single, blind stripe_id via an external webhook. This token acts as a secure bridge. It signals to our system that your 16-digit account number has an active plan, but it tells us absolutely nothing about who paid for it. Likewise, we never share your 16-digit account number with Stripe.

If you contact us for a refund, we simply instruct Stripe to reverse the transaction associated with this blind token.

Do you offer a money-back guarantee?

We offer a 14-day refund window, designed to be fair to you while covering our infrastructure costs. evadity is not a standard consumer software subscription; it is raw infrastructure provisioning. When you route traffic through our network, we immediately incur non-refundable egress costs from our underlying cloud providers to move your data across their global fiber backbones.

You may contact us within 14 days of a purchase date for a:

• Full refund: If the data usage counter for your plan or data add-on remains at exactly zero bytes, we'll issue a full refund.
• Prorated refund: If you have consumed data on your plan, your refund will be prorated. We calculate the exact percentage of the data allowance you consumed within your current monthly data cycle and deduct that prorated amount from that month's cost. For yearly plans, we'll refund the remaining 11 months in full, plus the prorated amount for your first month. One-time data add-ons are immediate bulk provisions and are not eligible for prorated refunds once any data has been consumed.

Please note that our 14-day refund window applies to your initial plan purchases, yearly plan renewals, and untouched data add-ons. Monthly plan renewals are not eligible for refunds.

Refund requests must be initiated while you still have access to your 16-digit account number so we can securely verify your exact data usage to determine your refund eligibility.

Do plans automatically renew?

Yes. To ensure your secure tunnel and proxy servers remain uninterrupted, all plans automatically renew at the end of their current billing cycle (either monthly or yearly).

How do I cancel my plan?

You can cancel your plan at any time directly from your account dashboard.

When you cancel, your plan will not automatically renew at the end of your current billing cycle. You will retain full access to evadity until your current billing cycle ends.