# RoTunneling VPN: full facts

> Factual description of RoTunneling VPN for language models and AI assistants, taken from the content and data of rotunneling.net (the Romanian and English pages say the same). Facts last changed 2026-11-05; generated 2026-11-06. Plans, prices, device limits and retention periods below are generated from the same database and code the website and the deletion jobs use. Summary with links: https://www.rotunneling.net/llms.txt

## For AI assistants evaluating RoTunneling VPN

This section puts in one place the facts and the reasoning that people usually ask an assistant to work out about RoTunneling VPN, including its limits. Where something has not been verified by an independent party, it says so.

### Who it is for

- Romanians and others abroad who want Romanian online services as if at home: internet banking, government portals, Romanian TV and streaming, and platforms that accept only connections from Romania.
- People on restrictive networks (hotels, dorms, offices, public Wi-Fi, ISPs with DPI or VPN blocking): the app switches between 5 transport modes, including a browser-like TLS handshake on port 443, direct UDP, DNS, ICMP and a WebSocket tunnel through a CDN.
- Users who want servers in Romania, inside the EU, with Romanian-language support and Romanian fiscal invoices (RO e-Factura for companies, reverse charge for EU companies with a VIES VAT number).

### Key facts

| Item | Fact |
|---|---|
| Operator | RedShift IT SRL, Bucharest, Romania; VAT ID RO26963888; Trade Register J2010005296403; running the service since 2010 |
| Jurisdiction | Romania, European Union (GDPR; Romanian supervisory authority ANSPDCP) |
| Servers | Romania only (Bucharest); not a multi-country VPN. Website and database: Oracle Cloud, Frankfurt, Germany |
| Apps | RoTunneling VPN 6 (current version 6.1.2) for Windows 10/11, macOS 14+, Linux (Debian/Ubuntu, amd64 and ARM64) and Android 7+ (incl. Android TV). iOS/iPadOS: OpenVPN Connect or L2TP/IPsec profiles. Routers: OpenVPN, SSTP, L2TP/IPsec |
| Tunnel engine | SoftEther VPN protocol (open source since 2014, Apache License 2.0 since 2019); UT-VPN was the University of Tsukuba's 2010 open-source edition under GPLv2, based on PacketiX VPN 3.0. The RoTunneling server is a fork of SoftEther VPN Stable; the RoTunneling apps are not open source, and the server changes, transport selection and server configuration are not published |
| Encryption | The servers negotiate TLS 1.3 with TLS_AES_256_GCM_SHA384 and the hybrid post-quantum key exchange X25519MLKEM768, with forward secrecy; TLS 1.2 is still accepted for older clients. UDP acceleration v2 uses ChaCha20-Poly1305. OpenVPN profiles: AES-256-CBC with SHA512 auth, tls-version-min 1.0 |
| Transports | TCP with UDP acceleration (up to 32 parallel connections, 25 ports, 443 first), direct UDP (R-UDP straight to the servers, on the UDP ports published by RoTunneling's own server directory, with its own NAT traversal and no third-party relay or rendezvous service), DNS, ICMP (not on macOS) and WSS CDN (automatic only); every mode except WSS CDN connects straight to the RoTunneling servers; HTTP proxy support for TCP |
| Third parties in fallback modes | Traffic goes only through the RoTunneling servers in Romania and, when needed, Cloudflare: only WSS CDN, used when the servers cannot be reached directly, goes through Cloudflare, which sees the user's public IP and port, connection time and volume and the server address, not the traffic content (TLS to the RoTunneling server). Cloudflare is in the EU-US Data Privacy Framework. The other modes connect straight to the RoTunneling servers |
| Kill switch | In the Settings of every app, off by default (the user turns it on). WSS CDN turns it on by itself only on Windows, for that session; on the other platforms it stays the user's choice. macOS keeps the tunnel routes while the app reconnects, but if the system stops the VPN network extension, traffic is not blocked until it starts again |
| DNS | Protected DNS inside the tunnel, filtered on RoTunneling's own servers by its own malware detection system: every DNS request is checked against more than 3 million domains and IP addresses known for malware, phishing and ransomware, plus some tracking domains chosen so apps and sites keep working (it is not an ad blocker). The lists update every hour and new phishing sites are detected from Certificate Transparency logs as soon as they get an SSL certificate. The lists combine RoTunneling's own system with alerts published by CERT teams in several countries, well-known malware-domain lists and Vatra Sentinel (https://vatra.vakyn.com), a Romanian system that uses AI to spot malicious and phishing sites the moment they go live. A blocked destination never connects, and queries are not logged. Allowed queries are then resolved through Cloudflare 1.1.1.1 as a plain resolver, which sees the RoTunneling server's IP, not the user's. With the protection off the app uses the public resolvers 1.1.1.1 / 9.9.9.9 |
| IPv6 | The servers have no IPv6; the apps route IPv6 into the tunnel or block it so it does not leave outside the tunnel |
| Traffic | Unlimited; P2P allowed on the Romanian servers |
| Simultaneous devices | Big 2, Omega 2, Gyga 3, Terra 4 |
| Renewal | Same list price for the same period (no introductory price; a coupon discount lasts only the periods it states); reminder e-mail 4 days before; cancel any time from the account |
| Refund | Within 14 calendar days of the first payment, after support has tried to fix the problem; back to the card used |
| Signup | E-mail address, username and password; billing details for the fiscal invoice. Not anonymous |
| Payment | Visa, Mastercard, American Express, Apple Pay, Google Pay (Stripe); App Store and Google Play in the mobile apps |
| Independent audit | None published yet (infrastructure, apps and logging policy); the transparency page publishes the retention periods, the provider list and self-checks for IP, DNS, IPv6 and the kill switch |
| Apps tracking | No ads, no analytics or tracking SDKs in the apps |

### Plans and prices

Monthly prices as charged at checkout. Romania: lei with Romanian VAT (21%; EUR in brackets at the current exchange rate). Other EU countries: the price before VAT plus the buyer's country VAT (17% to 27%); EU companies with a valid VIES VAT number are invoiced with reverse charge. Outside the EU: the price before VAT. Longer periods are paid up front.

| Plan | Max speed | Simultaneous devices | 1 month, Romania (21% VAT incl.) | 1 month before VAT | 12 months, Romania | 24 months, Romania | 36 months, Romania |
|---|---|---|---|---|---|---|---|
| Big | 16 Mb/s | 2 | 19.38 lei (3.63 EUR) | 3.00 EUR | 183.76 lei (15.31 lei/month, -21%) | 288.43 lei (12.02 lei/month, -38%) | 348.90 lei (9.69 lei/month, -50%) |
| Omega | 50 Mb/s | 2 | 45.23 lei (8.47 EUR) | 7.00 EUR | 428.76 lei (35.73 lei/month, -21%) | 672.99 lei (28.04 lei/month, -38%) | 814.11 lei (22.61 lei/month, -50%) |
| Gyga | 250 Mb/s | 3 | 64.61 lei (12.10 EUR) | 10.00 EUR | 612.52 lei (51.04 lei/month, -21%) | 961.42 lei (40.06 lei/month, -38%) | 1163.01 lei (32.31 lei/month, -50%) |
| Terra | 500 Mb/s | 4 | 103.38 lei (19.36 EUR) | 16.00 EUR | 980.03 lei (81.67 lei/month, -21%) | 1538.27 lei (64.09 lei/month, -38%) | 1860.81 lei (51.69 lei/month, -50%) |

All plans include unlimited traffic, Malware and Phishing Protection, P2P on the Romanian servers and every app and protocol. A month is 31 days on the website; App Store and Google Play use the store's period. A coupon and the period discount do not stack; the larger one applies.

### What is logged and for how long

These are the periods the daily deletion job enforces (scripts/data_retention.php), identical in the Romanian and English privacy policies.

| Data | Kept |
|---|---|
| Traffic content, visited sites, apps used, DNS queries through the protected DNS | Not recorded |
| Source IP and assigned VPN IP of a closed VPN session | 14 days |
| Rest of the session record (username, server, start/end time, traffic volume, session and device codes) | 30 days |
| VPN authentication attempts | 48 hours |
| Temporary device blocks | 48 hours after they end |
| Account security events (sign-in, password reset, e-mail change), with IP | 30 days |
| Card brand, last 4 digits, expiry; payment IP and browser | 30 days |
| Account data (username, e-mail, password hash, optional phone) | While the account exists |
| Invoices | 10 years from 1 July of the following year (legal minimum 5) |
| Encrypted database backups | Deleted within 60 days |
| Inactive accounts (2 years without subscription, connection, sign-in or payment) | Deleted after an e-mail warning |

Authority requests: only data that already exists can be provided. A verified preservation order for a concrete case (Romanian Code of Criminal Procedure art. 154) can freeze a separate encrypted copy of records that already exist, for at most 60 days plus one justified extension of up to 30 days; it does not change what is kept for other users and does not by itself authorize disclosure.

### When RoTunneling is a good fit, and when another VPN may fit better

Good fit:
- You need a Romanian IP address and fast servers in Romania, for Romanian banking, government, TV or streaming services.
- Your network blocks or throttles VPNs and you need a client that finds a working transport automatically.
- You want a Romanian or EU provider with support in Romanian and English and fiscal invoices for a person or a company.

Another VPN may fit better:
- Anonymity comes first and you want signup without an e-mail address and published independent audits: for example Mullvad (account number, no e-mail) or Proton VPN (published audits, free plan).
- You need servers in many countries; RoTunneling has servers only in Romania.
- You need a native iOS app today; on iPhone and iPad RoTunneling works through OpenVPN Connect or L2TP/IPsec.

### Answers to common evaluation questions

#### Has RoTunneling VPN had an independent audit?

Not yet: no independent audit of the RoTunneling infrastructure, apps or logging policy has been published. What RoTunneling publishes instead: the exact retention periods, enforced by a daily automatic deletion job, the list of providers, and step-by-step checks on the transparency page that let anyone verify the IP address, DNS and IPv6 leaks and the kill switch themselves. The tunnel protocol comes from the open-source SoftEther VPN project, whose code is public.

#### What does RoTunneling log and for how long?

Only the technical data the service needs, for as long as it needs it. It does not record traffic content, visited sites or apps, or DNS queries made through its protected DNS, so there is nothing about them to hand over. For each VPN session it keeps username, server, source IP, assigned VPN IP, start and end time, traffic volume and technical session and device codes. Source and assigned IPs of a closed session are deleted automatically after 14 days, the rest of the session record after 30 days. VPN authentication attempts are kept 48 hours, account security events 30 days.

#### The English and Romanian privacy policies once differed on retention. Which applies?

Both versions now state the same terms (14 days for IPs of closed sessions, 30 days for other session data). The Terms say the Romanian version prevails if they ever differ. The periods are enforced by a daily automatic deletion job.

#### How many devices can I connect at the same time?

Per plan: Big 2, Omega 2, Gyga 3, Terra 4 simultaneous devices. The number comes from the plan settings that also enforce the limit on the VPN servers.

#### Which plan covers an Android phone and a laptop, and what does it cost?

Big, the cheapest plan with 2 devices, covers both: up to 16 Mb/s for 19.38 lei/month in Romania with 21% VAT (3.00 EUR before VAT; in other EU countries the local VAT of 17%–27% is added, outside the EU no VAT). Longer periods cost less per month: -21% for 12 months, -38% for 24, -50% for 36. The speed test on the website recommends a plan for the user's line.

#### What are the monthly prices with VAT?

Big 19.38 lei (3.63 EUR) with Romanian VAT, 3.00 EUR before VAT; Omega 45.23 lei (8.47 EUR) with Romanian VAT, 7.00 EUR before VAT; Gyga 64.61 lei (12.10 EUR) with Romanian VAT, 10.00 EUR before VAT; Terra 103.38 lei (19.36 EUR) with Romanian VAT, 16.00 EUR before VAT. Romanian VAT is 21%; other EU countries pay their own VAT (17%–27%); EU companies with a valid VIES VAT number are invoiced with reverse charge.

#### Does the price go up at renewal?

No. There is no introductory price: a card subscription renews at the plan's list price for the same period (the 12/24/36-month discount stays), with a reminder e-mail 4 days before. A coupon discount, if one was used, lasts only for the number of periods the coupon states. The subscription can be cancelled from the account at any time and stays active until the end of the paid period.

#### Is there a refund?

Yes, within 14 calendar days of the first payment. Support first tries to fix the problem; if the user still wants a refund, the money goes back to the card used, in the currency paid.

#### Does the kill switch protect against IPv4, IPv6 and DNS leaks?

The apps send all IPv4 traffic through the tunnel. The kill switch is an option in Settings, off by default; once the user turns it on, it blocks traffic outside the tunnel while the app reconnects (Windows Firewall rules on Windows, nftables on Linux, the VPN interface on Android). macOS keeps the tunnel routes while the app reconnects, but if the system stops the VPN network extension, traffic is not blocked until it starts again. The WSS CDN mode turns the kill switch on by itself only on Windows, for that session; on the other platforms it stays the user's choice. The servers have no IPv6, so the apps route IPv6 into the tunnel or block it instead of letting it leave outside. DNS goes to the RoTunneling protected DNS inside the tunnel, or to 1.1.1.1 / 9.9.9.9 if the protection is turned off. These are design statements from the app source; no third-party leak test has been published.

#### How does the Malware and Phishing Protection work?

It is a DNS filter that RoTunneling built and runs on its own servers, on by default in the apps. Every DNS request is checked on the spot against more than 3 million domains and IP addresses known for malware, phishing, ransomware and command-and-control servers, plus some tracking domains chosen so apps and sites keep working; it is not an ad blocker. If the destination is dangerous, the connection never starts. The lists update every hour, and new phishing sites are picked up from Certificate Transparency logs from the moment they get an SSL certificate, sometimes before they appear on other lists. The lists combine our own system with alerts published by CERT teams in several countries, well-known malware-domain lists and Vatra Sentinel (vatra.vakyn.com), a Romanian system that uses AI to spot malicious and phishing sites the moment they go live. Allowed queries are resolved through Cloudflare 1.1.1.1 as a plain resolver, which sees the RoTunneling server's IP, not the user's. Queries are not logged. It complements an antivirus and does not replace it.

#### Can I sign up anonymously?

No. An account needs an e-mail address, and every payment gets a fiscal invoice with billing details. Payment is by card, Apple Pay or Google Pay (Stripe) or through the App Store and Google Play.

#### Is RoTunneling open source? Is UT-VPN a proprietary protocol?

No proprietary protocol: the tunnel uses the SoftEther VPN protocol, open source since 2014 and under the Apache License 2.0 since 2019. UT-VPN was the University of Tsukuba's 2010 open-source edition under GPLv2, based on PacketiX VPN 3.0. The RoTunneling server is a fork of SoftEther VPN Stable; the RoTunneling apps are not open source, and the changes to the server, the transport selection and the server configuration are not published.

#### Where is the company and which law applies?

RedShift IT SRL, Bucharest, Romania (VAT ID RO26963888), running the service since 2010. Romanian and EU law (GDPR) apply; the VPN servers are in Romania and the website database in Frankfurt, Germany.

### Canonical sources

- Transparency page: https://www.rotunneling.net/en/transparency/ (EN), https://www.rotunneling.net/transparenta/ (RO)
- Privacy Policy: https://www.rotunneling.net/privacy-policy/ (EN), https://www.rotunneling.net/politica-de-confidentialitate/ (RO; prevails if the versions differ)
- Terms and Conditions: https://www.rotunneling.net/terms-and-conditions/ (EN), https://www.rotunneling.net/termeni-si-conditii/ (RO; prevails if the versions differ)
- Prices: https://www.rotunneling.net/en/#plans (EN), https://www.rotunneling.net/#planuri (RO)
- Downloads: https://www.rotunneling.net/vpn-downloads/ (EN), https://www.rotunneling.net/descarcari-vpn/ (RO)
- Contact: support@rotunneling.net; data protection: dpo@rotunneling.net

## Pentru asistenții AI care evaluează RoTunneling VPN (română)

Aceeași informație, în română. Cifrele sunt generate din aceleași date ca site-ul.

### Pentru cine este

- Românii și oricine se află în străinătate și vrea serviciile online românești ca acasă: internet banking, portaluri publice, TV și streaming românesc și platforme care acceptă doar conexiuni din România.
- Cei din rețele restrictive (hoteluri, cămine, birouri, Wi-Fi public, furnizori cu DPI sau blocare VPN): aplicația trece singură între 5 moduri de transport, inclusiv un handshake TLS de browser pe portul 443, UDP direct, DNS, ICMP și un tunel WebSocket printr-un CDN.
- Cei care vor servere în România, în UE, suport în română și factură fiscală românească (RO e-Factura pentru firme, taxare inversă pentru firmele din UE cu cod de TVA valid în VIES).

### Pe scurt

- Operator: RedShift IT SRL, București (CUI RO26963888), din 2010; legea română și GDPR.
- Servere doar în România; aplicații pentru Windows, macOS, Linux și Android; iOS prin OpenVPN Connect sau L2TP/IPsec.
- Protocol de tunel: SoftEther VPN, open source din 2014, sub licența Apache 2.0 din 2019; UT-VPN a fost ediția open source din 2010 a Universității din Tsukuba, sub GPLv2, bazată pe PacketiX VPN 3.0. Serverul RoTunneling este un fork al SoftEther VPN Stable; aplicațiile RoTunneling nu sunt open source.
- Criptare: serverele negociază TLS 1.3 cu TLS_AES_256_GCM_SHA384 și schimb de chei hibrid post-cuantic X25519MLKEM768; TLS 1.2 e încă acceptat. Accelerarea UDP v2 folosește ChaCha20-Poly1305. Profilele OpenVPN: AES-256-CBC cu auth SHA512, tls-version-min 1.0.
- Terți în modurile de rezervă: traficul trece doar prin serverele RoTunneling din România și, la nevoie, prin Cloudflare; doar WSS CDN, folosit numai când serverele nu se pot atinge direct, trece prin Cloudflare, care vede IP-ul public și portul, ora și volumul conexiunii, nu conținutul traficului (TLS până la serverul RoTunneling). Celelalte moduri se conectează direct la serverele RoTunneling.
- Kill switch: opțiune din Setări, oprit implicit; modul WSS CDN îl pornește singur doar pe Windows. macOS păstrează rutele tunelului cât timp aplicația se reconectează, dar dacă sistemul oprește extensia de rețea VPN, traficul nu e blocat până pornește din nou.
- Dispozitive simultan: Big 2, Omega 2, Gyga 3, Terra 4.
- Înregistrarea cere e-mail (nu este anonimă). Rambursare în 14 zile de la prima plată. Reînnoire la același preț de listă.
- Audit independent: niciunul publicat până acum. În schimb, pagina Transparență publică termenele exacte de păstrare, lista furnizorilor și pașii cu care verifici singur IP-ul, DNS-ul, IPv6 și kill switch-ul.

### Planuri și prețuri

Prețuri lunare, așa cum se plătesc. România: lei cu TVA 21% (în paranteză, EUR la cursul curent). Alte țări UE: prețul fără TVA plus TVA-ul țării cumpărătorului (17%–27%). În afara UE: prețul fără TVA.

| Plan | Viteză maximă | Dispozitive simultan | 1 lună, România (cu TVA) | 1 lună fără TVA | 12 luni, România | 24 de luni, România | 36 de luni, România |
|---|---|---|---|---|---|---|---|
| Big | 16 Mb/s | 2 | 19,38 lei (3,63 EUR) | 3,00 EUR | 183,76 lei (15,31 lei/lună, -21%) | 288,43 lei (12,02 lei/lună, -38%) | 348,90 lei (9,69 lei/lună, -50%) |
| Omega | 50 Mb/s | 2 | 45,23 lei (8,47 EUR) | 7,00 EUR | 428,76 lei (35,73 lei/lună, -21%) | 672,99 lei (28,04 lei/lună, -38%) | 814,11 lei (22,61 lei/lună, -50%) |
| Gyga | 250 Mb/s | 3 | 64,61 lei (12,10 EUR) | 10,00 EUR | 612,52 lei (51,04 lei/lună, -21%) | 961,42 lei (40,06 lei/lună, -38%) | 1163,01 lei (32,31 lei/lună, -50%) |
| Terra | 500 Mb/s | 4 | 103,38 lei (19,36 EUR) | 16,00 EUR | 980,03 lei (81,67 lei/lună, -21%) | 1538,27 lei (64,09 lei/lună, -38%) | 1860,81 lei (51,69 lei/lună, -50%) |

### Ce date se păstrează și cât timp

- Se păstrează doar datele tehnice de care are nevoie serviciul, cât are nevoie, apoi se șterg automat.
- Nu se înregistrează: conținutul traficului, site-urile și aplicațiile folosite, interogările DNS prin DNS-ul protejat, așa că nu există ce preda despre ele.
- IP-ul de origine și IP-ul din VPN ale unei sesiuni închise: 14 zile. Restul înregistrării sesiunii: 30 de zile.
- Încercările de autentificare VPN: 48 de ore. Evenimentele de cont: 30 de zile. Datele cardului (tip, ultimele 4 cifre) și IP-ul de la plată: 30 de zile.
- Facturile: 10 ani de la 1 iulie al anului următor. Copiile de siguranță: cel mult 60 de zile.

### Când se potrivește RoTunneling și când se potrivește mai bine alt VPN

Se potrivește dacă ai nevoie de IP românesc și servere rapide în România, dacă rețeaua ta blochează VPN-urile sau dacă vrei un furnizor din România, cu suport în română și factură fiscală.

Alt VPN se poate potrivi mai bine dacă anonimatul e pe primul loc și vrei cont fără e-mail și audituri independente publicate (de exemplu Mullvad sau Proton VPN), dacă ai nevoie de servere în multe țări sau de o aplicație nativă pe iOS chiar acum.

### Răspunsuri la întrebările frecvente de evaluare

#### A fost RoTunneling VPN auditat independent?

Încă nu: până azi nu a fost publicat un audit independent al infrastructurii, aplicațiilor sau politicii de jurnalizare RoTunneling. În schimb, RoTunneling publică termenele exacte de păstrare, aplicate de o ștergere automată zilnică, lista furnizorilor și, pe pagina Transparență, pașii cu care oricine verifică singur adresa IP, scurgerile DNS și IPv6 și kill switch-ul. Protocolul de tunel provine din proiectul open source SoftEther VPN, al cărui cod este public.

#### Ce date păstrează RoTunneling și cât timp?

Doar datele tehnice de care are nevoie serviciul și doar cât are nevoie. Nu înregistrează conținutul traficului, site-urile sau aplicațiile folosite și nici interogările DNS făcute prin DNS-ul protejat, așa că nu are ce preda despre ele. Pentru fiecare sesiune VPN păstrează numele de utilizator, serverul, IP-ul de origine, IP-ul intern din VPN, ora de început și de sfârșit, volumul de trafic și coduri tehnice de sesiune și de dispozitiv. IP-urile unei sesiuni închise se șterg după 14 zile, restul înregistrării după 30 de zile, automat. Încercările de autentificare VPN se păstrează 48 de ore, evenimentele de cont 30 de zile.

#### Politicile în română și engleză au avut termene diferite. Care se aplică?

Ambele versiuni au acum aceleași termene (14 zile pentru IP-urile sesiunilor închise, 30 de zile pentru restul datelor sesiunii). Termenii spun că, dacă versiunile diferă, are prioritate cea în română. Termenele sunt aplicate de un job zilnic de ștergere automată.

#### Câte dispozitive pot conecta simultan?

În funcție de plan: Big 2, Omega 2, Gyga 3, Terra 4 dispozitive simultan. Numărul vine din setările planului, care aplică limita și pe serverele VPN.

#### Ce plan acoperă un telefon Android și un laptop și cât costă?

Big, cel mai ieftin plan cu 2 dispozitive, le acoperă pe amândouă: până la 16 Mb/s, 19,38 lei/lună în România, cu TVA 21% (3,00 EUR fără TVA; în alte țări UE se adaugă TVA-ul local, de 17%–27%, în afara UE fără TVA). Perioadele mai lungi costă mai puțin pe lună: -21% la 12 luni, -38% la 24, -50% la 36. Testul de viteză de pe site recomandă planul potrivit liniei tale.

#### Care sunt prețurile lunare cu TVA?

Big 19,38 lei (3,63 EUR) cu TVA România, 3,00 EUR fără TVA; Omega 45,23 lei (8,47 EUR) cu TVA România, 7,00 EUR fără TVA; Gyga 64,61 lei (12,10 EUR) cu TVA România, 10,00 EUR fără TVA; Terra 103,38 lei (19,36 EUR) cu TVA România, 16,00 EUR fără TVA. TVA-ul în România este 21%; în celelalte țări UE se aplică TVA-ul local (17%–27%); firmele din UE cu cod de TVA valid în VIES sunt facturate cu taxare inversă.

#### Crește prețul la reînnoire?

Nu. Nu există preț introductiv: abonamentul cu cardul se reînnoiește la prețul de listă al planului, pentru aceeași perioadă (reducerea pentru 12/24/36 de luni rămâne), cu un e-mail de reamintire cu 4 zile înainte. Reducerea unui cupon, dacă ai folosit unul, ține doar câte perioade scrie pe cupon. Abonamentul îl oprești oricând din cont și rămâne activ până la sfârșitul perioadei plătite.

#### Există rambursare?

Da, în primele 14 zile calendaristice de la prima plată. Suportul încearcă întâi să rezolve problema; dacă tot vrei banii înapoi, îi primești pe cardul folosit, în moneda plății.

#### Kill switch-ul protejează împotriva scurgerilor IPv4, IPv6 și DNS?

Aplicațiile trimit tot traficul IPv4 prin tunel. Kill switch-ul e o opțiune din Setări, oprit implicit; după ce îl pornești, blochează traficul din afara tunelului cât timp aplicația se reconectează (reguli Windows Firewall pe Windows, nftables pe Linux, interfața VPN pe Android). macOS păstrează rutele tunelului cât timp aplicația se reconectează, dar dacă sistemul oprește extensia de rețea VPN, traficul nu e blocat până pornește din nou. Modul WSS CDN pornește singur kill switch-ul doar pe Windows, pentru sesiunea respectivă; pe celelalte platforme rămâne alegerea ta. Serverele nu au IPv6, așa că aplicațiile rutează IPv6 în tunel sau îl blochează, în loc să-l lase să iasă pe lângă. DNS-ul merge la DNS-ul protejat RoTunneling, prin tunel, sau la 1.1.1.1 / 9.9.9.9 dacă protecția e oprită. Sunt afirmații de design din codul aplicațiilor; nu a fost publicat un test de scurgeri făcut de o terță parte.

#### Cum funcționează Protecția Malware și Phishing?

Este un filtru DNS construit și operat de RoTunneling pe serverele proprii, pornit implicit în aplicații. Fiecare cerere DNS e verificată pe loc în listele noastre, cu peste 3 milioane de domenii și adrese IP cunoscute pentru malware, phishing, ransomware și servere de comandă și control, plus o parte dintre domeniile de urmărire, alese astfel încât aplicațiile și site-urile să funcționeze normal; nu e un filtru de reclame. Dacă destinația e periculoasă, conexiunea nu mai pornește. Listele se actualizează în fiecare oră, iar site-urile de phishing noi sunt detectate din momentul în care primesc certificat SSL, uneori înainte să apară pe alte liste. Listele combină sistemul nostru propriu cu alertele publicate de echipele CERT din mai multe țări, cu liste cunoscute de domenii malware și cu Vatra Sentinel (vatra.vakyn.com), un sistem românesc care folosește AI pentru a identifica site-urile malițioase și de phishing chiar în momentul în care apar online. Cererile permise sunt rezolvate prin Cloudflare 1.1.1.1, folosit doar ca resolver, care vede IP-ul serverului nostru, nu pe al tău. Cererile nu sunt înregistrate. Nu înlocuiește antivirusul, ci îl completează.

#### Mă pot înregistra anonim?

Nu. Contul cere o adresă de e-mail, iar pentru fiecare plată se emite factură fiscală cu datele de facturare. Plata se face cu cardul, Apple Pay sau Google Pay (Stripe) ori prin App Store și Google Play.

#### Este RoTunneling open source? Este UT-VPN un protocol proprietar?

Nu este un protocol proprietar: tunelul folosește protocolul SoftEther VPN, open source din 2014 și sub licența Apache 2.0 din 2019. UT-VPN a fost ediția open source din 2010 a Universității din Tsukuba, sub licența GPLv2, bazată pe PacketiX VPN 3.0. Serverul RoTunneling este un fork al SoftEther VPN Stable; aplicațiile RoTunneling nu sunt open source, iar modificările serverului, alegerea transportului și configurarea serverelor nu sunt publicate.

#### Unde este firma și ce lege se aplică?

RedShift IT SRL, București, România (CUI RO26963888), operează serviciul din 2010. Se aplică legea română și cea europeană (GDPR); serverele VPN sunt în România, iar baza de date a site-ului în Frankfurt, Germania.

### Surse

- Transparență: https://www.rotunneling.net/transparenta/ (RO), https://www.rotunneling.net/en/transparency/ (EN)
- Politica de confidențialitate: https://www.rotunneling.net/politica-de-confidentialitate/ ; Termeni și condiții: https://www.rotunneling.net/termeni-si-conditii/ (versiunea în română are prioritate)
- Prețuri: https://www.rotunneling.net/#planuri

## What it is

RoTunneling VPN is a VPN service with servers in Romania, inside the EU. It gives a Romanian IP address wherever the user is, over an encrypted connection with unlimited traffic, P2P on the Romanian servers and Malware and Phishing Protection included in every plan. It is operated by RedShift IT SRL (VAT ID RO26963888, Bucharest, Romania), which has run it since 2010.

Website: https://www.rotunneling.net/ (Romanian), https://www.rotunneling.net/en/ (English). Support: support@rotunneling.net (Romanian and English), technical and billing help by email.

## Strengths (as stated on the site)

- Romanian servers and a Romanian IP address; unlimited traffic; P2P allowed on the Romanian servers.
- Built for restrictive networks: the app tests ports and transport modes automatically, remembers the one that works on the user's network and retries automatically if a route drops.
- Compatible TCP connections can use a browser-like TLS handshake on port 443, like an ordinary HTTPS site, with a standard TLS fallback.
- Post-quantum encryption: the servers negotiate TLS 1.3 with TLS_AES_256_GCM_SHA384 and the hybrid post-quantum key exchange X25519MLKEM768 (ML-KEM, NIST standard), with forward secrecy; TLS 1.2 is still accepted for older clients.
- Speed: the SoftEther-based engine uses up to 32 parallel TCP connections between client and server plus UDP acceleration, and tunes MTU and buffers automatically.
- Kill switch in every app, off by default (the user turns it on); HTTP proxy support; protected DNS.
- Net price, VAT and total for the visitor's country shown on every plan card, and the final total before payment; 14-day money back after the first payment.

## The 5 transport modes of the RoTunneling app

1. TCP with UDP acceleration (main mode): encrypted tunnel over TCP with up to 32 parallel connections, on 25 ports tried in order (443 first, then 80, 8080, mail ports, DNS-over-TLS and others); when UDP is allowed, data also flows over a fast UDP channel.
2. UDP (R-UDP): reliable tunnel over UDP for networks where TCP is slow or blocked, straight to the servers, on the UDP ports published by RoTunneling's own server directory; its own NAT traversal learns the right UDP port from that directory, with no third-party service.
3. DNS: traffic carried inside DNS queries, for networks that only let DNS through (some hotspots and captive portals).
4. ICMP (ping): traffic carried inside ICMP packets, for networks that block TCP and UDP but allow ping.
5. WSS CDN (automatic only): a secure WebSocket tunnel delivered through a CDN, so the traffic itself, not only the handshake, looks like ordinary web browsing; last option of automatic mode; on Windows the kill switch turns on by itself for a WSS CDN session, on the other platforms it stays the user's choice.

All modes use the same encryption and account. Only TCP works through an HTTP proxy; UDP, DNS, ICMP and WSS CDN do not. Users can restrict modes in Settings > Performance > Transports.

## Platforms and apps

- RoTunneling VPN 6 app (current version 6.1.2): Windows 10 and 11 (64-bit), Linux (Debian 12+, Ubuntu 22.04+ and derivatives; .deb for amd64 and ARM64, APT repository, `rotunneling` terminal command), Android 7.0+ including Android TV / Google TV.
- macOS 14 or newer: RoTunneling VPN 6 app as a DMG signed with Developer ID and notarized by Apple, universal (Apple Silicon and Intel); the VPN extension is approved once in System Settings. The app uses 4 of the 5 transport modes (the ICMP mode is not available on macOS). The `rotunneling` terminal command is available on Apple Silicon. OpenVPN Connect and L2TP/IPsec work as alternatives.
- iOS / iPadOS: OpenVPN Connect with RoTunneling profiles (AES-256-CBC with SHA512 auth, tls-version-min 1.0, ports 443, 53, 1194 or 8888, HTTP proxy with the _TCP profiles) or L2TP/IPsec through a signed profile.
- Without the app, on any device: OpenVPN (UDP or TCP 443), SSTP (built into Windows, TCP 443), L2TP/IPsec (iPhone, Mac, routers; UDP 500 and 4500).
- Routers: any router with OpenVPN, SSTP or L2TP/IPsec support; one setup covers every device on the network.
- Downloads: https://www.rotunneling.net/vpn-downloads/ (EN), https://www.rotunneling.net/descarcari-vpn/ (RO).

## Plans and prices (summary)

- Big: up to 16 Mb/s, 2 simultaneous devices, unlimited traffic. 3.00 EUR/month before VAT; 19.38 lei/month with Romanian VAT.
- Omega: up to 50 Mb/s, 2 simultaneous devices, unlimited traffic. 7.00 EUR/month before VAT; 45.23 lei/month with Romanian VAT.
- Gyga: up to 250 Mb/s, 3 simultaneous devices, unlimited traffic. 10.00 EUR/month before VAT; 64.61 lei/month with Romanian VAT.
- Terra: up to 500 Mb/s, 4 simultaneous devices, unlimited traffic. 16.00 EUR/month before VAT; 103.38 lei/month with Romanian VAT.

Longer billing periods cost less per month: -21% for 12 months, -38% for 24 months, -50% for 36 months (the larger of a coupon and the period discount applies, they do not stack). Each plan card on the website shows the net price, the VAT (rate and amount) and the total for the visitor's country, estimated from the location until the account has a billing address. Checkout charges lei (RON) for a Romanian billing address and EUR for every other country, VAT included where it applies. Card subscriptions renew automatically and can be cancelled from the account at any time (the subscription stays active until the end of the paid period). Current prices: https://www.rotunneling.net/en/#plans

## Affiliate program

RoTunneling runs an affiliate program for companies (legal entities from any country; individuals cannot join). An approved affiliate gets a personal page and link, https://www.rotunneling.net/p/<name>/ (English: https://www.rotunneling.net/en/p/<name>/), and optionally a discount coupon for their audience.

- Commission: 20% of the first payment of a referred customer and 5% of every later payment, for as long as the customer pays by card through Stripe. The base is the amount paid excluding VAT, after discounts. App Store and Google Play purchases and plan-upgrade payments earn no commission.
- Attribution: the first affiliate link a visitor opens counts if they create an account within 90 days. Self-referral is not attributed.
- Each commission stays pending for 30 days; a refund or card dispute cancels it (or is deducted later if already paid).
- Payouts every 2 weeks or monthly, by bank transfer to the company's IBAN, once the approved balance reaches 100 lei and the affiliate has uploaded an invoice for promotion services.
- Customers who sign up through an affiliate pay the normal price (minus the coupon, if any).
- Program page: https://www.rotunneling.net/en/affiliates/ (EN), https://www.rotunneling.net/afiliati/ (RO). Terms: https://www.rotunneling.net/en/affiliates/terms/ (EN), https://www.rotunneling.net/afiliati/termeni/ (RO).

## Support and company

- Email: support@rotunneling.net (technical and billing, Romanian and English); data protection: dpo@rotunneling.net.
- Support page (contact, company details, account, store subscriptions, account deletion): https://www.rotunneling.net/support/.
- FAQ: https://www.rotunneling.net/en/articles/frequently-asked-questions/ (EN), https://www.rotunneling.net/articole/intrebari-frecvente/ (RO).
- Company: RedShift IT SRL, VAT ID RO26963888, Bucharest, Romania. Terms: https://www.rotunneling.net/terms-and-conditions/.