Based on our analysis, Mullvad VPN is the more privacy-respecting choice overall.
BACK →Overall
Mullvad VPN
A · 93/100Surfshark
C+ · 63/100What they collect
Mullvad VPN
Positive (95)
Surfshark
Mixed (62)
Who they share it with
Mullvad VPN
Positive (92)
Surfshark
Mixed (60)
What you can do
Mullvad VPN
Positive (85)
Surfshark
Mixed (67)
What they promise
Mullvad VPN
Positive (90)
Surfshark
Mixed (62)
| Category | Mullvad VPN | Surfshark |
|---|---|---|
| Overall | A · 93/100 | C+ · 63/100 |
| What they collect | Positive (95) | Mixed (62) |
| Who they share it with | Positive (92) | Mixed (60) |
| What you can do | Positive (85) | Mixed (67) |
| What they promise | Positive (90) | Mixed (62) |
Mullvad collects almost nothing — no account names, no activity logs, no IP retention — and the policy is short because there's genuinely very little to say; what little data does get processed (payments, support emails) has hard, specific deletion windows and never leaves the EU.
View full analysis →Surfshark is notably transparent — it publishes specific data retention windows for every processing activity, a warrant canary, and a transparency report — but it temporarily stores your IP address during VPN sessions (deleted within 15 minutes of disconnection), is incorporated in the Netherlands (Nine Eyes jurisdiction), shares data with Nord Security group companies including US entities, stores data in Google BigQuery, and its Alternative Number feature sends call and SMS content to Telnyx in the United States.
View full analysis →You might also want to compare