Mullvad VPN

No activity logs, no metadata, no account names — Mullvad's account system uses random numbers by design, and the policy is short precisely because collection is so minimal.

Data is shared only with payment and email service providers performing services on Mullvad's behalf — no advertising networks, no analytics third parties, and zero data transfers outside the EU/EEA.

GDPR rights apply with honest caveats — Mullvad openly acknowledges it usually can't fulfil data access requests because it doesn't store identifying data in the first place; support emails are hard-deleted on a 70-day schedule.

Swedish law and GDPR jurisdiction, explicit processing purposes with named legal bases for each activity, concrete deletion windows, and a structural no-logging architecture — Mullvad's promises are specific and verifiable rather than aspirational.