Mullvad VPN – European VPN
No-logs VPN with anonymous accounts. No email needed to sign up, just a number.
Quick facts
A random numbered account is all you need to sign up – no email required – and you can pay in cash by post if you want to stay fully anonymous. The apps are open source and audited.
There's no free trial to test the service first, and the flat €5/month pricing means no discount for paying further ahead – it's the same rate whether you commit or not.
Why does it score 100?
Incorporated in Gothenburg, Sweden – a full EU member state, the strongest legal footing available.
Fully independent and self-funded, with no outside investors, VC money or parent company involved.
Mullvad owns most of its own server hardware in Sweden rather than leasing capacity from a third-party cloud.
The apps are fully open source, GDPR-compliant, and have been through independent no-logs audits – about as accountable as a VPN gets.
See how they compare
Mullvad VPNWhat does it replace?
Expressvpn More European VPN & privacy tools alternatives
Privacy-focused VPN registered in Malta. No logs, fully open-source apps, no email required to sign up.
Swedish VPN with strict no-logs policy and in-house owned servers. WireGuard-first with fully transparent operations.
Swiss VPN by Proton AG with a strict no-logs policy independently audited annually. 11,496 servers across 117 countries, all owned and operated by Proton. Open-source apps on all platforms. Unique Secure Core architecture routes traffic through privacy-friendly countries first.
VPN from Nord Security, a Lithuanian-founded cybersecurity company. Runs its own RAM-only (diskless) server fleet and markets a no-logs policy that has been repeatedly audited by PwC and Deloitte. Caveat: the no-logs claim is framed around Panama's jurisdiction as a legal/marketing choice – the company itself is Lithuanian and EU-based.
VPN founded in 2018 and headquartered in the Netherlands, which merged into Lithuania's Nord Security in 2022 (the two brands still operate separately). Runs its own RAM-only servers, has passed Deloitte no-logs audits, and operates under Dutch/EU jurisdiction.