Halmist
Hidden in ordinary traffic.
Halmist is a VPN for iOS and Android, built in Berlin. Its tunnel looks like an ordinary HTTPS connection to the network around it — where classic VPN protocols get detected and blocked, Halmist doesn't stand out.
A product of A&D Media und Data GbR, Berlin.
What ships at launch
Only features that will actually be in the first release. What's still missing is listed further down — on this same page.
Traffic that doesn't stand out
The tunnel runs over TLS 1.3 and is indistinguishable from normal HTTPS traffic. That's why it still works on networks that detect and block VPN connections.
Kill switch
If the tunnel drops, traffic is blocked rather than passed on unprotected.
Own DNS, no logs
Names are resolved through our own DNS inside the tunnel. Protection against DNS and IPv6 leaks is built in.
Split tunnelling
On Android you can route individual apps around the tunnel. On iOS only websites and IP addresses can be excluded — Apple doesn't allow per-app exclusions at system level.
Connects by itself
Halmist connects on device start and whenever you join an open Wi-Fi network.
Up to 10 devices
iOS and Android at launch. How many devices may be connected at once depends on your plan.
The technical part, without marketing
These details match what is actually being built — not what's customary in this industry.
VLESS + Reality
A modern transport with traffic masking. Deliberately not WireGuard and not OpenVPN: their signature is recognisable on the network and gets filtered.
TLS 1.3
Key exchange over X25519, ciphers ChaCha20-Poly1305 and AES-128-GCM.
Rented servers
Rented VPS and dedicated machines, not hardware of our own. Disks are encrypted with LUKS, connection logging is switched off in the configuration, and nodes are deployed automatically from a template.
Operated from the EU
The controller under GDPR is A&D Media und Data GbR in Berlin. Servers, domains and the store accounts are held by the company.
We won't quote speeds until we've measured them on our own infrastructure. No independent security audit has taken place so far — it's on the roadmap, without a date.
Locations
Three to five locations across the EU and the US at launch. The final list is only settled once the servers are up and measured — which is why we're not naming cities yet.
Servers set up specifically for streaming services are not part of the launch, and we make no promises about access to them.
What we store — and what we don't
For us, "no logs" doesn't mean "nothing at all". An account and a billing relationship inevitably produce data. Here's exactly which.
- The account's e-mail address
- Subscription status
- Device identifiers — needed to enforce your plan's device limit
- Total data volume transferred, for billing
- Sites visited and browsing history
- DNS queries
- The contents of your traffic
- Connection IP addresses with timestamps
Before release we verify every line of this against the running system. Anything we can't demonstrate there won't appear here, nor in the app's privacy policy. Read the full app privacy policy →
What isn't there at launch
We'd rather list it ourselves than bury it in the small print.
- Windows, macOS, Linux, routers, smart TVs and browser extensions — iOS and Android only at launch.
- WireGuard and OpenVPN — Halmist uses a different transport.
- Multi-hop, also known as double VPN.
- Servers optimised for streaming services.
- Payment on the website and payment in cryptocurrency.
- An independent security audit.
Most of it is on the roadmap — but without a date, as long as we can't give a reliable one. As soon as something ships, it will be listed here.
Subscription through the store
At launch, Halmist is available only as an in-app subscription through the App Store and Google Play.
- All locations and features are included in the subscription
- Device count depends on the plan, up to 10 at once
- Cancel any time in your Apple or Google account settings
- No purchase on this website — billing runs through the store
Pricing and any trial period will be announced at launch. Subscriptions renew automatically until cancelled. Refunds are handled by Apple and Google under their store policies; consumers in the EU may additionally have a statutory right of withdrawal.
Frequently asked questions
Everything worth knowing before launch.
Do you store what I do online?
No. Browsing history, DNS queries, traffic contents and timestamped connection IPs are not stored. What is stored — account, subscription status, device identifiers and data volume for billing — is listed in full in the "What we store" section.
Why not WireGuard or OpenVPN?
Because both are recognisable on the network. Networks that filter VPNs spot these protocols by their signature and block them. Halmist uses a transport with traffic masking instead: from the outside the connection looks like ordinary HTTPS.
Where are the servers, and do you own them?
Three to five locations in the EU and the US at launch. The machines are rented, not hardware of our own — we say so plainly, because plenty of providers claim "our own infrastructure" when it isn't true. Disks are encrypted and connection logging is switched off.
How many devices can I use Halmist on?
Between one and ten at once, depending on your plan. We can't quote a single number here, because it differs from plan to plan.
Is there a Halmist app for Windows or macOS?
Not at launch. iOS and Android first. Desktop, Linux, routers and browser extensions are planned, but without a date.
How fast is it?
We're not saying yet. The servers are still being set up and we haven't measured anything — numbers without measurements would be guesswork. Once we have reliable figures, they'll be here.
When does it launch?
Halmist is in active development and not yet released. Drop us a line and we'll get in touch the moment the app is in the stores.
Tell me when it's ready
Halmist is still in development. A short message is enough — we'll let you know as soon as the app is available.
Notify me