Based on our analysis, Mullvad VPN is the more privacy-respecting choice overall.
BACK →Overall
Mullvad VPN
A · 93/100ExpressVPN
B- · 70/100What they collect
Mullvad VPN
Positive (95)
ExpressVPN
Mixed (72)
Who they share it with
Mullvad VPN
Positive (92)
ExpressVPN
Mixed (65)
What you can do
Mullvad VPN
Positive (85)
ExpressVPN
Mixed (68)
What they promise
Mullvad VPN
Positive (90)
ExpressVPN
Mixed (73)
| Category | Mullvad VPN | ExpressVPN |
|---|---|---|
| Overall | A · 93/100 | B- · 70/100 |
| What they collect | Positive (95) | Mixed (72) |
| Who they share it with | Positive (92) | Mixed (65) |
| What you can do | Positive (85) | Mixed (68) |
| What they promise | Positive (90) | Mixed (73) |
Mullvad collects almost nothing — no account names, no activity logs, no IP retention — and the policy is short because there's genuinely very little to say; what little data does get processed (payments, support emails) has hard, specific deletion windows and never leaves the EU.
View full analysis →ExpressVPN's no-logs commitment for VPN traffic is genuine and KPMG-audited, anonymous payment is available, and its BVI jurisdiction keeps legal requests demanding, but the service is ultimately owned by Kape Technologies PLC (a UK company with a controversial history) — and while the policy explicitly firewalls your data from Kape, an aggressive marketing cookie stack including Facebook Pixel, DoubleClick Ad, and Microsoft Advertising runs on the website, essential cookies including Google Analytics cannot be disabled, and transactional data is retained for ten years.
View full analysis →You might also want to compare