i am using Mullvad and I don’t have problems with it, I even recommend it and I like it.
I have a question concerning the no-log policy. Today I read this on a german site. I translate it:
One of the main criticisms we had in our test was that Mullvad VPN recommends itself as “anonymizing” and pretending not to use log files. But unfortunately that is not the reality. In our test, we were able to demonstrate the use of central databases that are also intended to prevent use on unlimited devices at the same time. In addition, Mullvad saves user log data, which includes the real IP address as well as the VPN IP addresses used and the start and end times. In addition, the amount of data that is transmitted. In practice, this information is sufficient to satisfactorily answer requests from authorities. Therefore, the reports that log files are stored, which indicate the identity of the user, are simply lies.
I have to say that I don’t think that Mullvad needs to safe the IP addresses to prevent unlimited devices at the same time! Thats for me not plausible!
Gonna copy my comment from when you posted to r/privacyguides
Well this page makes my skeptical of their site as they are recommending VPNs that they have affiliate links to which really does make you wonder what the real reasons they have for recommending them, maybe because they really think they are the best, or maybe it’s because they get paid for everyone they sign up.
They also say this
No own apps or applications, you have to resort to standard clients
Which isn’t true
They also don’t detail what “testing” they did to come to the conclusion that a central DB must be used.
All in all I’m gonna need some solid proof before I take anything on this site seriously.
Realistically this site has zero credibility, is just a VPN affiliate seller and should be ignored
You could also contact Mullvad support and see what they say. They publish reports every two years. One was just released on security issues. They’re pretty open about testing and all of that.
Mullvad actually answered this on their website:
“Question: How can you limit the maximum number of simultaneous connections if you’re not logging that information?
Answer: Each VPN server reports to a central service. When a customer connects to a VPN server, the server asks the central service to validate the account number, whether or not the account has any remaining time, if the account has reached its allowed number of connections, and so on. Everything is performed in temporary memory only; none of this information is permanently stored to disk.”
I will however quite their final words (especially regarding privacy, Mullvad is #1):
Of the 16 VPNs we analyzed, Mullvad, PIA, IVPN, and Mozilla VPN (which runs on Mullvad’s
servers) —in that order—were among the highest ranked in both privacy and security. However,
PIA has never had a public third-party security audit. Additionally, in our opinion, only IVPN,
Mozilla VPN, and Mullvad—along with one other VPN (TunnelBear)—accurately represent their
services and technology without any broad, sweeping, or potentially misleading statements
If you look at their NordVPN and Surfshark tests you can just close their site and never open it again. They probably get some goood stacks of money to put those ““tests”” up.
-300 Credibility