Enterprise-Grade Security
Protecting Your Privacy
GalePass employs industry-leading security technology and strict privacy measures to protect user security and privacy from architecture to operations.
Multi-Layer Security
Comprehensive protection from encrypted transmission to privacy safeguards
Proprietary Encryption Protocol
Built on industry-standard protocols with AES-256-GCM encryption, providing enterprise-grade security.
- End-to-end encrypted transmission
- Perfect Forward Secrecy (PFS)
- Quantum-resistant design
- Regular security audits and updates
Strict No-Log Policy
We ensure at the architectural level that no personally identifiable information is ever recorded.
- No browsing history or content logs
- No source IP address logs
- No DNS query logs
- No connection timestamp logs
Secure Infrastructure
All servers run on security-hardened operating systems with multi-layer protection.
- Full-disk server encryption
- Automatic security updates
- DDoS protection
- Physical security measures
DNS Leak Protection
Built-in DNS leak protection ensures all DNS requests travel through the encrypted tunnel.
- Private DNS servers
- DNS over HTTPS (DoH)
- DNS over TLS (DoT)
- IPv6 leak protection
Kill Switch
Kill Switch automatically blocks network traffic when the VPN connection drops unexpectedly, preventing data leaks.
- Automatic disconnect protection
- App-level whitelist
- Auto-reconnect
- Real-time connection monitoring
Privacy Protection
Multiple technical measures to protect user privacy and prevent tracking.
- IP address obfuscation
- WebRTC leak protection
- Browser fingerprint protection
- Ad and tracker blocking
Military-Grade Encryption
Using the highest industry security standards to ensure data transmission safety
AES-256 Encryption
Military-grade AES-256-GCM encryption algorithm
RSA-4096
4096-bit RSA key handshake
SHA-512
SHA-512 hash algorithm for data integrity verification
TLS 1.3
Support for the latest TLS 1.3 protocol
Privacy Commitment
Our privacy principles are embedded in every aspect of product design and operations
Data Minimization
We collect only the minimum information required for the service, such as account email and payment info (processed by third-party providers).
Transparency
We clearly inform users about data collection and usage, and publish regular transparency reports.
User Control
Users can view, modify, or delete their account information at any time.
Regulatory Compliance
Strict compliance with GDPR and other international privacy regulations to protect user rights.
Continuous Security Audits
We believe transparency and third-party audits are the foundation of trust
Regular Security Audits
Quarterly internal security audits and annual third-party security assessments.
Bug Bounty Program
We welcome security researchers to report vulnerabilities and offer bounty rewards.
Transparency Reports
Regular transparency reports disclosing government requests and data access.
Technical Implementation
Encryption Protocol
Our proprietary protocol is built on industry-standard WireGuard and Shadowsocks, combining the strengths of both for better performance and security.
- ChaCha20-Poly1305 or AES-256-GCM symmetric encryption
- Curve25519 key exchange with Perfect Forward Secrecy
- Custom obfuscation layer for enhanced censorship resistance
Data Storage
We store only the minimum information required to operate the service. User account data (email, password hash) is stored in an encrypted database. All sensitive data is encrypted before storage, and database access is strictly controlled.
Contact Security Team
If you discover any security issues or have security-related questions, please contact our security team at security@galepass.com We will respond to your email within 24 hours.
Experience Enterprise-Grade Security
Register a GalePass account and get a 3-day free trial