CyberGhost VPN Review: Privacy Engineering vs. Real-World Experience
CyberGhost is operated by CyberGhost S.R.L. in Bucharest, Romania, and has been part of Kape Technologies' VPN portfolio — which also includes ExpressVPN and Private Internet Access — for nearly a decade now. Rather than take the marketing at face value, we read the privacy policy in full, checked what the Deloitte audit actually covers, worked out the real cost of the plans, and cross-referenced all of it against 151 genuine reviews from four platforms.
No-logs policy: what's actually in the document
CyberGhost's privacy policy is specific rather than vague: it states the company does not log incoming/outgoing IP address, browsing history or websites visited, amount of data transferred, VPN servers used, DNS queries, files downloaded, or connection date and duration. It does collect a narrow set of account and billing data — email address, order history, anonymized fraud-detection signals — but explicitly says none of that is linked to activity inside the VPN tunnel. That's a meaningfully stronger commitment than a one-line “we don't keep logs” banner, and it matches the pattern of what a genuinely privacy-focused provider's policy should look like.
The Deloitte audit: what it actually covers
CyberGhost says it invited Deloitte, a global professional-services firm, to inspect its servers and management systems and verify the no-logs claim. An independent audit is a real, meaningful step beyond a self-reported promise — it's the same category of assurance NordVPN and several other major providers now cite. We'd note, as with any vendor-commissioned audit, that the full audit report and its exact scope aren't published in detail on the page we reviewed; the claim itself is genuine, but readers who want the underlying methodology should look for CyberGhost's published transparency reports rather than take the homepage summary as the complete picture.
Jurisdiction: why Romania matters
Romania sits outside the Five/Nine/Fourteen-Eyes intelligence-sharing alliances and has no mandatory data-retention law compelling VPN providers to log user activity — a Romanian constitutional court has in fact struck down data-retention requirements in the past. That makes the jurisdiction a genuine asset for a privacy-focused VPN, on similar footing to Switzerland (Proton VPN, PrivadoVPN) and ahead of countries with active retention regimes. It's a legitimate part of the privacy pitch, not just a marketing footnote.
Encryption, kill switch and leak protection
CyberGhost uses AES 256-bit encryption across WireGuard, OpenVPN and IKEv2, an automatic kill switch that blocks traffic if the tunnel drops, and DNS/IP leak protection. These are the correct, current-generation building blocks — WireGuard in particular is the protocol most competitors now default to for its speed and smaller attack surface. Split tunneling (choosing which apps use the tunnel) and an optional Dedicated IP add-on round out the feature set.
Pricing: what €2.19/month actually means
The advertised “82% off” price is real, but it's an intro rate for the first 26 months of a plan you pay for upfront. The renewal terms, printed in smaller text on the same page, say the plan then autorenews at €56.94 per year — about €4.75/month, more than double the headline figure. That's not unique to CyberGhost (most VPNs discount the intro term and renew higher), but it's exactly the kind of detail worth knowing before you enter payment details, and it's a recurring theme in the negative reviews we read.
What real reviews say: the gap between marketing and sentiment
We pulled 151 reviews across Trustpilot, Google Play, the App Store and the Chrome Web Store, in English, Russian and Chinese, and read every one. The average across that sample is 2.7/5 — notably more mixed than the curated “positive reviews” module on CyberGhost's own homepage. The negative cluster is dominated by two complaints: unexpected renewal charges at the higher rate described above, and connection issues — failed logins, apps that don't reconnect automatically, or servers that time out — particularly on Linux and older Android builds. The positive cluster is just as real: reviewers consistently praise how easy the apps are to set up, genuinely fast connections on nearby servers, and a no-logs policy they say they trust. Neither side of that split is fabricated — you can browse the full, unfiltered set on our user reviews page.
Streaming, speed and everyday use
CyberGhost runs 10-Gbps server hardware and advertises unlimited bandwidth with no caps, and reviewers who mention streaming generally confirm it handles HD/4K without much buffering on a decent connection. As with any VPN, speed varies by server load and distance — the complaints we found were concentrated on specific servers and platforms rather than the service broadly.
Devices and platform support
One subscription covers 7 simultaneous devices — fewer than NordVPN or Proton VPN's paid tier (10 each) and well short of some unlimited-device competitors, but apps exist for essentially every platform: Windows, macOS, Android, iOS, Linux, Fire TV, Android TV, Apple TV, Smart TVs, game consoles, VPN-compatible routers, and Chrome/Firefox browser extensions.
Customer support
24/7 live chat and email support are available in multiple languages. This wasn't a major theme in the reviews either way — a handful of reviewers mention slow ticket responses, but most support-related comments (positive and negative) were incidental to a billing or connection issue rather than about support quality itself.
What we'd flag before you buy
- The €2.19/month price is a 26-month intro rate that autorenews near double — budget for the renewal, not just the headline number.
- The on-site testimonial carousel is explicitly curated to positive reviews; read the full, unfiltered set before deciding.
- The device limit (7) is lower than several competitors — relevant if you're covering a large household.
CyberGhost's privacy engineering is genuinely solid: an independently audited no-logs policy, a favorable Romanian jurisdiction, AES-256 encryption, a kill switch and leak protection are all real and documented, not just marketing. It's best suited to privacy-conscious users who read the renewal terms carefully and don't need more than seven simultaneous devices. If jurisdiction and audits matter most to you and you're willing to pay more, Proton VPN's fully open-source apps or Mullvad's anonymous sign-up are worth comparing — see our full comparisons below.