Everything you need to know about Arcanum VPN.
Arcanum VPN protects the browser where the extension is installed. All web traffic from that browser profile is routed through our encrypted tunnels to the selected exit location. It does NOT affect other applications or other browsers on your system.
A plain website cannot route your browser traffic through a proxy due to browser sandbox restrictions. The extension uses the chrome.proxy API to configure your browser to send all requests through our authenticated proxy servers. This is the technically correct and honest approach — not a fake "web-only VPN".
Instead of email/password, your identity is your Arcanum wallet address. When you connect, the server issues a nonce (random challenge). Your wallet signs this nonce. The server verifies the signature matches your address. No personal data is collected.
Payment is made with ARC tokens via an on-chain transaction. Monthly plan costs 0.008 ARC, yearly costs 0.08 ARC. The transaction includes metadata (plan_id, duration_type, receipt_id) and is sent to the treasury address. Subscription activates on-chain confirmation.
Our architecture ensures that traffic logs, DNS query logs, destination logs, and content logs are never written to persistent storage. In-memory state is used only for rate limiting and session management. After a service restart, no traffic data survives. This is architecturally enforced, not just a policy promise.
Brave (recommended), Chrome, and all Chromium-based browsers. Safari is not supported in the initial release due to different extension APIs. Firefox support may be added later.
When the extension is active, all DNS resolution is performed by the proxy server, not your local resolver. This prevents your ISP from seeing which domains you visit. Combined with DoH (DNS over HTTPS), this provides strong DNS privacy.
The extension includes WebRTC hardening. For maximum protection in Brave: Settings → Privacy → WebRTC IP Handling Policy → "Disable non-proxied UDP". This prevents WebRTC from revealing your real IP through STUN requests.