Safewoo
HomeHelpPrivacyTerms

Help & Support

Answers to common questions. If you cannot find what you need, contact us.

#What does Safewoo log?

We keep no lasting record of your online activity: no browsing history, DNS queries, traffic content or connection history. Each VPN server has only a short technical log (connection time, source IP, destination address and account email) for troubleshooting; it is never collected centrally and is deleted automatically within one hour. Our service complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable Malaysian laws. For details, read our Privacy Policy.

#How is traffic calculated?

Only data that goes through the VPN counts as traffic. Direct traffic does not count.

Data that goes through the VPN travels two legs: between your device and the VPN server, and between the VPN server and the website. Both legs carry the same data, so we measure on our servers the data you upload and download, and count it twice: every 1 GB sent through the VPN counts as 2 GB. For example, a 50 GB plan covers about 25 GB of data through the VPN.

Note: strictly, the two legs do not always carry exactly the same amount of data. For example, when a connection to a website fails, the data travels only the first leg. To keep the count simple and predictable, we treat the two legs as equal for billing. Network overhead, such as packet headers and retransmissions, is not counted.

All devices signed in to your account share one allowance. Billing uses our server records; usage usually shows in your account within a few minutes.

#What time does the traffic reset?

It depends on your plan. For example, if you subscribe to a monthly reset at 13:34:11 on March 5, 2025, your usage resets to 0 at 13:34:11 on the 5th of each month.

If you subscribe on February 29, it resets on the last day of the month (the 28th, or the 29th in leap years).

#What is the traffic routing rule?

Safewoo checks the rules below in order and uses the first one that matches to decide whether traffic goes through the VPN or connects directly.

RuleRouteWhat it is
Ports 6881–6889DirectUsed by torrent and file-sharing clients; direct for speed
Port 25DirectStandard outgoing email (SMTP); direct for mail servers
Port 465DirectSecure SMTP (legacy SSL); direct for mail
Port 107DirectA legacy service port, direct for compatibility
Port 194DirectA legacy service port, direct when needed
Port 587DirectEmail submission; lets mail clients send reliably
Port 992DirectA secure legacy service port, direct for compatibility
Port 2525DirectAlternative SMTP submission port used by some providers
Port 6969DirectCommon BitTorrent tracker port; direct to avoid proxy abuse
Port 51413DirectDefault peer port of Transmission
Local network (LAN)DirectKeeps devices on your local network reachable
China IPsDirectChina-local services use a direct path
Private groupDirectPrivate and internal destinations
iCloud / Apple groupsDirectApple services, for reliability
Direct groupDirectDestinations that always connect directly
LAN CIDR / CN CIDR groupsDirectIP ranges of local or China networks
Proxy groupVPNDestinations that always go through the VPN
GFW groupVPNDestinations blocked from your location stay reachable
Telegram CIDR groupVPNTelegram IP ranges
FallbackVPNAnything not matched above goes through the VPN
Note: to prevent spam through our mail relays and misuse of the proxy for peer-to-peer traffic, common outgoing mail ports (25, 465, 587, 2525) and P2P/torrent ports (6881–6889, 6969, 51413) always connect directly, never through the proxy.

If you need an app or site to always use a direct or VPN connection, contact support and we can set up a custom route.

#Proxy abuse / port handling

We monitor and limit common proxy abuse to protect our network and other users.

  • Email relays: outbound mail through the proxy is sent directly or rate-limited to prevent spam relay.
  • P2P / torrent ports: sent directly to avoid high-volume abuse and tracker misuse.
  • Open-proxy ports (such as 3128, 8080, 8000, 8888, 8118, 1080): stricter controls, and no unauthenticated proxy chaining.

These protections apply automatically; you do not need to reset routing rules yourself. If an app needs an exception, contact support and we will look at it.

Still need help?

Email our support team and we will reply as soon as we can. Address: support@safewoo.com

Email support