Transparency
How Tocoro VPN runs, what sustains it, and every data request we receive.
Who runs this
Tocoro VPN is run by Svex Labs LLC, a Florida limited liability company — independent, with no ad investors, no data sales, and no parent conglomerate. The rest of this page is what that means in practice: what we keep, how the service is sustained, and every data request we receive.
How it's sustained
Tocoro VPN runs on a single source of income: subscriptions. They pay for development, the servers, and the sponsored access program. The model is simple on purpose: if subscriptions pay for everything, your data doesn't have to pay for anything.
Protocols
Shadowsocks-2022 and Hysteria2, with automatic switching between them. Chosen for a concrete reason: they perform on packet-loss networks and resist detection and throttling better than classic VPN protocols.
Data requests
| Period | Requests received | Data handed over |
|---|---|---|
| Since July 2026 | 0 | — |
This counter updates with every legal request we receive. We can only hand over what exists: what we keep, exactly.
Commitments
- No analytics or trackers, on the site or in the app.
- Every app release is published once, immutable, with a verifiable fingerprint (verify your download).
- Policy changes are announced with a date, here and in the app.
- The security page lists what Tocoro VPN can't protect, alongside what it can.
On the horizon
- More server locations, as demand grows.
- An independent security audit: our first spending priority once operating costs are covered. We'll publish the scope and the auditor here before it starts.
- Opening the source, evaluated after the audit.