NordVPN vs 1Password
Side-by-side comparison of the Terms of Service and Privacy Policy of NordVPN and 1Password.
Strong privacy positioning and deletion controls are offset by auto-renewal, broad sharing/disclosure language, liability limits, and terms that give Nord substantial control over accounts and permitted use.
NordVPN presents a mixed but generally privacy-forward legal posture. It emphasizes a no-logs approach and provides clear account deletion and privacy-rights processes, but it also collects identifying data needed for service delivery, shares data with providers and partners, and uses cookies/tracking for advertising that users must opt out of. The terms include automatic renewal, broad usage restrictions, liability limits, and unilateral updates by continued use.
Points of interest
-
negative ●●●●○ termsAuto-renews by default
Paid plans renew automatically unless you cancel before the renewal date. Users need to watch cancellation timing to avoid unwanted charges.
-
positive ●●●●○ privacyNo-logs approach
Nord says it does not record your online activity or IP addresses for NordVPN services. That is a meaningful privacy benefit if you want a VPN provider that minimizes activity logging.
-
positive ●●●●○ privacyAccount deletion available
You can delete your account in the Nord Account settings or through the apps, and deletion removes access to linked Nord products. This gives users a clear off-ramp if they want to leave the service.
-
negative ●●●○○ privacyBroad data sharing
Nord shares personal data with service providers, other Nord companies, partners, and third parties for bundled services. Even where the policy is controlled, this expands the number of entities that may process your information.
-
negative ●●●○○ privacyAdvertising cookies shared
Nord says it does not sell personal data, but it does share cookie and tracking data with analytics and advertising partners for advertising. Users must opt out through cookie controls to reduce that sharing.
-
negative ●●●○○ privacyConsent needed for third-party services
If you buy bundled or standalone third-party services through Nord, your data is shared with those providers to activate and administer the service. That means those services can bring their own privacy policies and controllers into the mix.
-
positive ●●●○○ privacyPrivacy rights access
The policy says you can request privacy actions and appeal decisions on privacy-rights requests, subject to verification. That makes its rights process more transparent than many services.
-
positive ●●○○○ privacyMinimal data claim
Nord states it collects and uses only the bare minimum of information needed. In practice, that suggests a narrower data collection approach, although it still collects email and payment details.
Documents
The documents contain several user-friendly privacy commitments, especially around encrypted vault data, ownership, export, deletion, and transparency. However, the terms still include mandatory arbitration, liability caps, auto-renewal, nonrefundability, and unilateral changes, which reduce user leverage.
1Password’s legal terms are relatively privacy-forward for a security service: it says vault contents remain yours and are encrypted so the company cannot read them unencrypted, and it offers export, deletion, and user-rights mechanisms. Still, it uses automatic renewal, broad warranty/liability disclaimers, mandatory arbitration for individual users, and allows policy/terms changes, while also sharing some personal data with affiliates, service providers, and marketing partners.
Points of interest
-
negative ●●●●● termsMandatory binding arbitration
Individual users must resolve disputes through binding arbitration in Toronto under Ontario law, and the decision is final. This limits your ability to sue in court or pursue appeals.
-
positive ●●●●● privacyEncrypted vaults unreadable
1Password states your secure vault data is encrypted with keys only users or admins control, and that it cannot access readable vault contents. For a password manager, this is a major privacy and security benefit.
-
negative ●●●●○ termsLiability tightly capped
1Password broadly disclaims warranties and limits most monetary liability to the fees you paid in the prior six months. If something goes badly wrong, available compensation may be quite limited.
-
positive ●●●●○ termsYou keep data ownership
The terms and privacy policy both say your stored data remains your property. The service license is limited to what is needed to operate the service, rather than a broad commercial content license.
-
positive ●●●●○ privacyExport and deletion rights
Users can export their data and request permanent deletion, with an authenticated deletion flow described in the privacy policy. This reduces lock-in and gives users meaningful control over their information.
-
negative ●●●○○ termsAuto-renewal and trial conversion
Subscriptions renew automatically unless canceled, and free trials can turn into paid plans if you entered billing information and do not cancel in time. Users need to actively manage cancellation.
-
negative ●●●○○ termsNonrefundable by default
The terms say amounts paid are generally nonrefundable, with refunds only considered case by case. That makes mistaken renewals or unused service harder to recover financially.
-
negative ●●●○○ termsTerms can change
1Password reserves the right to modify or discontinue services and to change the terms, with continued use counting as acceptance. Although it says it will try to give notice for material changes, the discretion remains largely theirs.
-
negative ●●●○○ privacyMarketing data sharing
The privacy policy allows sharing personal information with marketing partners for advertising, and says this may be considered a sale or sharing under some privacy laws. Privacy-conscious users may want to opt out where available.
-
neutral ●●●○○ privacyBusiness admins control accounts
For employer-managed accounts, administrators may access account-related data, recover vaults, and delete or restrict access. This is expected for enterprise products, but employees should understand their organization may control the account.
-
positive ●●●○○ termsNotice before termination
If 1Password plans to terminate an account for breach or harmful use, it usually says it will give notice and a chance to fix the issue. It also says it will work to let users keep copies of their data where possible.
-
negative ●●○○○ privacyRetention not time-limited
The privacy policy keeps personal information as long as needed for stated purposes or legal requirements, and deleted information may persist in systems for some time. That is common, but it is not a tight or specific retention limit.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.