On the record as a whole.
Psiphon is a circumvention tool before it is a privacy product, and it is filed as one. The network exists to get people past national blocking, its clients are open source, and its privacy policy is the most candid document in this catalogue. None of that changes what the model measures. C01 is activity, and it comes from Psiphon's own words.
The policy states: "While a user's device is tunneled through Psiphon, we collect some information about how they're using it. We record what protocol Psiphon used to connect, how long the device was connected, how many bytes were transferred during the session, and some geographical and ISP information.
the rest of what is open — 1014 more words
For some domains (but very few, and only popular ones) or server IP addresses (e.g., known malware servers) that are visited, we also record how many bytes were transferred to it." The user's city, country and ISP are derived from the IP, which is then discarded, and the data is kept "at most 90 days" before aggregation.
The C01 vocabulary reads activity as "what was reached: sites, destinations or content", and per-domain byte counts are exactly that. R29's session-state carve-out does not reach it: ninety days is not a session. Psiphon itself calls this User Activity Data and "the most sensitive category of data", and says it is never shared with third parties.
So this is the record where candour and score point in opposite directions, and that is the model working rather than failing. Every other record's C01 rests on the same kind of document - a published policy - and the catalogue cannot start reading some policies as confessions and others as marketing.
What Psiphon earns for its frankness it earns in X09 and in the fields that other providers leave blank, not by having its retention rung softened. U06 is proven, and this is the first record to occupy it.
The evidence is not Psiphon's: OONI publishes aggregate results for its psiphon nettest, which measures whether the client bootstraps from inside a network. For 2026-02-01 to 2026-08-30 the counts are Iran 21,409 measurements with 9,449 successful, Russia 703,891 with 171,103 successful, China 10,289 with 6,996 successful.
Read it honestly in both directions: in Iran and Russia it fails more often than it works. proven here means independently measured to work under active censorship, not measured to work reliably. Every other record in the catalogue sits at claimed, on a vendor page.
U07 is the first list to carry a legacy transport. The FAQ answers two separate questions: the default tunnel is "SSH with the addition of an obfuscation layer on top of the SSH handshake to defend against protocol fingerprinting", and "Psiphon uses the L2TP/IPsec VPN protocol" for Psiphon on Windows in VPN mode - which the troubleshooting section corroborates with an entry for failing to connect in L2TP/IPsec mode.
