Plain-language summary: GlassBox VPN is a curated VPN for US adults. By subscribing, you agree to the eligibility rules, the acceptable use policies, the bandwidth cap, and the no-resell policy. Violating these is grounds for immediate termination without refund. We keep these terms direct on purpose: there are no hidden gotchas, but the rules are real.
1. Overview
These Terms of Service ("Terms") govern your use of GlassBox VPN ("GlassBox VPN" or "the Service"), provided by Open Source Security, Inc. ("OSS," "we," "us," or "our"), a Delaware S-Corporation. By subscribing to GlassBox VPN, you agree to these Terms.
If you do not agree to any part of these Terms, do not subscribe. If you subscribe and later violate these Terms, your subscription will be terminated.
2. Eligibility
GlassBox VPN has hard eligibility requirements. By subscribing, you represent and warrant:
- You are at least 21 years of age.
- You are a resident of the United States with a US billing address. Stripe enforces this at checkout.
- You have legal capacity to enter into a binding agreement.
- You are not currently subject to a GlassBox VPN ejection for prior violations of these Terms.
If any of these representations is false, the subscription is void and may be terminated at any time without refund.
3. The Service
GlassBox VPN provides:
- One WireGuard VPN peer assigned to one of our four US locations (Chicago, LA, Dallas, or Ashburn).
- One static tunnel IP address for the duration of the subscription.
- Access to a customer dashboard reachable through the tunnel only.
- DNS filtering via the OSS blocklist (~2 million domains, ~50,000 IPs).
- Signed configuration delivery at signup.
GlassBox VPN does not provide a custom mobile application. You will use the official WireGuard client, which is free and open source, to connect.
4. Acceptable Use
GlassBox VPN is for everyday connected use: web browsing, mobile apps, video calls, messaging, email, work tools, music, and similar traffic.
Prohibited Use
The following are not permitted on GlassBox VPN:
Blocked at the Network Level
- Streaming services (Netflix, Hulu, Disney+, Max, etc.)
- Torrenting and P2P file sharing
- Usenet (NNTP)
- Bulk download hosts
Grounds for Ejection
- Reselling or sharing your peer access
- Using GlassBox VPN from outside the US
- Activity illegal under US law
- Network attacks, spam, or abuse
- Attempts to circumvent the cap or filters
Ejections are at OSS discretion. The customer dashboard, the public abuse-ejection log (when published), and the warrant canary cycle are how the curated nature of GlassBox VPN is maintained operationally.
5. Bandwidth Policy
Each GlassBox VPN peer is capped at 100 Mbps, enforced at the WireGuard interface using standard Linux traffic control (tc HTB). The cap is non-negotiable and not subject to per-customer exceptions. Custom speed tiers are not offered.
Three-Layer Enforcement
To protect overall server performance for all peers on a node, GlassBox VPN applies a published three-layer bandwidth enforcement system. The complete mechanism is documented on the public website at /how-it-works and reproduced here in summary form.
| Layer | Mechanism |
|---|---|
| Layer 1: Per-peer cap | Every peer is capped at 100 Mbps using Linux tc HTB at the WireGuard interface. |
| Layer 2: Saturation throttle | If a peer holds 90% or more of the 100 Mbps cap for the entire duration of a 10-minute rolling window, the peer is throttled to 25 Mbps. The throttle releases automatically at 04:00 UTC the following day. |
| Layer 3: Strike review | Three throttle trips within a rolling 30-day period flags the subscription for manual review. OSS will contact the subscriber via the email alias on file to determine the cause and appropriate resolution. |
Throttle status, trip count, and active enforcement state are surfaced live on the customer dashboard. There is no hidden enforcement: every peer can see exactly what the server sees about their own usage.
Protocol-Level Restrictions
Certain traffic types are blocked at the firewall or DNS layer and never reach the bandwidth enforcement system. These include BitTorrent and DHT, FTP, NNTP (Usenet), known bulk download hosts, and streaming services. Cross-tunnel peer-to-peer traffic between GlassBox VPN peers is also blocked at the firewall.
Use Cases Outside the Cap
If your use case requires sustained throughput above 100 Mbps or sustained throughput at the cap for periods exceeding 10 minutes, GlassBox VPN is not the appropriate service. The right tool for sustained high-bandwidth transfer is your direct ISP connection without a VPN. Repeated attempts to circumvent the cap or the throttle constitute a violation of these Terms.
6. Pricing, Billing, and Refunds
Annual Billing
GlassBox VPN is $60 USD per year, billed annually through Stripe. There is no monthly billing option. There are no prorated cancellations.
Refund Policy
Refunds are available within 7 days of initial subscription if the service is not what you expected. After 7 days, no refunds are issued.
To request a refund within the 7-day window, email support@opensourcesecurity.net from the email alias used at signup, including your tunnel IP or WireGuard public key. Refunds are processed through Stripe within 5 to 10 business days. Upon refund, the peer is deactivated immediately and the public key is removed from the WireGuard configuration.
No Refunds for Termination
If your subscription is terminated for violating these Terms, no refund will be issued for the unused portion of the annual period.
Payment Processing
All payments are handled by Stripe. GlassBox VPN does not receive, store, or process card information directly. See the privacy policy for details on what payment data lives where.
7. Cancellation
You may cancel your subscription at any time through Stripe. Cancellation stops auto-renewal at the next billing cycle. The peer remains active for the remainder of the paid annual period unless terminated for cause.
Upon cancellation or termination, your peer entry is removed from the WireGuard configuration. The public key associated with your subscription is deleted. There is no offboarding process beyond this.
8. Termination by OSS
We may terminate your subscription, with or without notice, for:
- Material violation of these Terms
- Use of the service from outside the US
- Reselling or sharing peer access
- Network abuse, attacks, or activity that endangers other customers
- Activity illegal under US law
- Any conduct OSS reasonably determines harms the service or its customers
Termination is permanent. A terminated customer may not subscribe again under a different identity, payment method, or public key. Doing so is itself a violation of these Terms.
9. No Warranties
GlassBox VPN is provided "as is" without warranty of any kind, express or implied. OSS does not guarantee:
- Uninterrupted or error-free service
- Specific bandwidth or latency at any given moment
- Compatibility with any particular device, network, or use case
- Protection against any specific class of threat
- That the service will meet your specific requirements
GlassBox VPN is a curated browsing VPN with capped bandwidth. It is not a managed security service, an anonymity service, or a circumvention tool.
10. Limitation of Liability
To the maximum extent permitted by law, OSS's total liability for any claim arising out of or related to these Terms or the Service is limited to the fees paid for the Service during the 12 months preceding the claim.
OSS is not liable for indirect, incidental, special, consequential, or punitive damages of any kind, including but not limited to lost profits, lost data, or service interruption.
11. Indemnification
You agree to indemnify and hold harmless OSS, its officers, employees, and affiliates from any claim, demand, or damages arising out of your use of GlassBox VPN in violation of these Terms or applicable law.
12. Governing Law
These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any dispute arising under these Terms shall be resolved in the state or federal courts located in Delaware.
13. Changes to These Terms
We may update these Terms from time to time. Material changes will be reflected in the "Last updated" date below and, where significant, communicated via subscriber notice. Your continued use of GlassBox VPN after a Terms update constitutes acceptance of the updated Terms.
If you do not agree to an updated Terms document, your remedy is to cancel your subscription. There are no other remedies for disagreement with the Terms.
14. Severability
If any provision of these Terms is held unenforceable, the remaining provisions remain in full effect. The unenforceable provision shall be reformed to the minimum extent necessary to make it enforceable while preserving its intent.
Last updated: May 2026