ExpressVPN vs NordVPN

ExpressVPN's no-logs commitment for VPN traffic is genuine and KPMG-audited, anonymous payment is available, and its BVI jurisdiction keeps legal requests demanding, but the service is ultimately owned by Kape Technologies PLC (a UK company with a controversial history) — and while the policy explicitly firewalls your data from Kape, an aggressive marketing cookie stack including Facebook Pixel, DoubleClick Ad, and Microsoft Advertising runs on the website, essential cookies including Google Analytics cannot be disabled, and transactional data is retained for ten years.

NordVPN genuinely doesn't log your VPN activity — that part of the privacy pitch holds up — but outside the tunnel it runs a large advertising and analytics infrastructure full of US-based trackers, shares data within a broad corporate group, markets to you for a year after you cancel, and retains billing records for a decade.