VPN Service — a Canadian exit you can verify

Most VPNs ask you to trust a company in a country you have no standing in, with owners you cannot name, running code you cannot read. This is the other shape: one gateway in a Montréal datacentre, run by a single person, built from infrastructure published in the open. Your traffic exits in Canada — a local hop from Québec and Ontario, in a jurisdiction a Canadian court can reach, which is the point rather than a side effect.

Who runs the tunnel

Here is what you can check about this one:

• A named operator, in named countries. YMRTECH LLC is a Wyoming company, run by one person, and the gateway your traffic leaves from sits in a Canadian datacentre — no chain of owners between you and the person who answers the email.
• The service is code you can read. The infrastructure is declarative Nix under version control at git.ymrtech.com: nothing is hand-edited on a running machine, so what is published is what runs.
• The tunnel is a public standard, not an app of mine. WireGuard is open, small and built into Windows, macOS, Linux, iOS and Android. You install nothing from me: no bundled browser, no analytics, no helper phoning home.

What you get

A WireGuard tunnel from your devices to a gateway I run, plus a DNS resolver that answers inside it — no client app, no bundled browser, no telemetry SDK. You get a configuration or a QR code and your operating system’s own WireGuard client does the rest: client setup guide.

Verify it, don’t trust it

Every claim on this page is a test you can read — the full dossier: who runs the tunnel, the tier mechanics, what is and is not logged, and the signed infrastructure audit that tests the no-log behaviour instead of asserting it.

The three tiers

The tiers differ in DNS only — never in speed. All three run through the same gateway with the same shaping: up to 1 Gbit/s per connection.

How a tier gets assigned

The tier is chosen per device when you add it in the portal, so one subscription can run a laptop on privacy, a phone on security and a work machine on pipe.

The price

$10/mo (USD), billed monthly by card through Stripe. One subscription covers all three tiers — no data cap, no per-gigabyte billing, no usage-based fees. Cancel any time; access runs to the end of the paid period. The details live in terms & fair use.

Being straight about what this is not: it is a privacy service, not a geo-unblocking one — a single gateway, no rotating exit addresses, no residential proxy pools.

What we do not keep

• No browsing history. No DNS query records. No connection times — on any tier: the resolvers run with query logging and statistics disabled.
• What we do hold: your email and password hash, your Stripe record, your device records and aggregate byte counters per device for fairness. The full list, with retention, is on the what we log page.

Questions

Which devices can I use it on?

Three devices per account, each with its own tier, on any client that speaks WireGuard — the official Windows, macOS, Linux, iOS and Android apps, or a router that supports WireGuard imports.

Can my devices reach each other through the tunnel?

Only if you say so. The portal’s device-to-device page is where you link your own devices — one direction at a time, either all traffic or a named protocol and port list.

Can I bring my own DNS?

Yes — that is the pipe tier. Your device keeps whatever resolver it already has, including in-browser DNS-over-HTTPS.

How do I know my DNS is going through the tunnel?

The DNS leak test mints a unique probe name, has your browser look it up, and then checks whether that lookup reached YMR’s resolver inside the tunnel.

What happens if I cancel?

Access stops at the end of the paid period, and the device records are gone with the account.