NordVPN vs 1Password
Side-by-side comparison of the Terms of Service and Privacy Policy of NordVPN and 1Password.
NordVPN offers several strong user protections, including a stated no-logs policy, minimal-data framing, clear account deletion, privacy rights, and advance notice for significant privacy-policy changes. The main drawbacks are auto-renewal, broad liability disclaimers, indemnity, international transfers, and some marketing/analytics sharing on websites.
NordVPN’s legal documents are relatively privacy-forward for a consumer security service: they emphasize a no-logs VPN policy, limited collection, account deletion, and formal privacy rights. At the same time, the service is subscription-based with auto-renal, broad acceptable-use restrictions, liability limits, indemnity obligations, and some data sharing with providers, partners, and bundled third-party services. Website advertising/cookie-based sharing is also disclosed.
Points of interest
-
positive ●●●●● privacyNo-logs VPN policy
Nord says its VPN does not record your internet activity or IP address while you use the service. Practically, this is a major privacy benefit because it reduces what can be linked back to you later.
-
negative ●●●●○ termsLiability heavily limited
Nord disclaims warranties and limits its liability to the extent allowed by law. If the service fails or causes losses, your practical ability to recover damages may be restricted.
-
negative ●●●●○ termsUser indemnity obligation
You must indemnify Nord for certain claims or losses caused by your misuse or breach. That can shift legal and financial risk onto you if third-party claims arise from your conduct.
-
positive ●●●●○ privacyMinimal data collection
The privacy policy repeatedly says it collects only the minimum information needed, such as email and payment details. For users, that signals a narrower data footprint than many mainstream online services.
-
positive ●●●●○ privacyClear account deletion
You can delete your account through account settings or supported apps, with email verification. That gives users a direct self-service route to cut off access to linked Nord services.
-
negative ●●●○○ termsAuto-renewing subscriptions
Paid plans renew automatically unless you cancel before the renewal date. Users should watch billing dates closely to avoid unwanted charges.
-
negative ●●●○○ privacyBroad third-party sharing
Personal data may be shared with service providers, affiliates, partners, and bundled third-party providers. This expands the number of entities that may handle your information beyond Nord itself.
-
positive ●●●○○ privacyPrivacy rights and appeals
Nord states users may access, delete, object, and appeal decisions about privacy requests, subject to verification. This is a meaningful transparency and control feature for users in multiple jurisdictions.
-
positive ●●●○○ privacyNo sale of personal data
Nord says it does not sell personal data to third parties. That is a meaningful privacy commitment, though it still shares some cookie-based information with analytics and advertising partners.
-
negative ●●○○○ privacyInternational data transfers
Nord may transfer personal data internationally, including to the United States, using safeguards it says are appropriate. This can expose data to jurisdictions with different privacy protections.
-
negative ●●○○○ privacyRetention may continue
Some personal data may be kept as long as needed for service, legal, or business reasons, including after account deletion. That means deletion is not always immediate or absolute for every category of data.
-
neutral ●●○○○ privacyWebsite ad tracking opt-out
Nord says it does not sell personal data, but it does share cookie and tracking data with analytics and advertising partners for advertising. Users can opt out by disabling third-party cookies or adjusting privacy choices.
Documents
The documents contain several user-friendly privacy commitments, especially around encrypted vault data, ownership, export, deletion, and transparency. However, the terms still include mandatory arbitration, liability caps, auto-renewal, nonrefundability, and unilateral changes, which reduce user leverage.
1Password’s legal terms are relatively privacy-forward for a security service: it says vault contents remain yours and are encrypted so the company cannot read them unencrypted, and it offers export, deletion, and user-rights mechanisms. Still, it uses automatic renewal, broad warranty/liability disclaimers, mandatory arbitration for individual users, and allows policy/terms changes, while also sharing some personal data with affiliates, service providers, and marketing partners.
Points of interest
-
negative ●●●●● termsMandatory binding arbitration
Individual users must resolve disputes through binding arbitration in Toronto under Ontario law, and the decision is final. This limits your ability to sue in court or pursue appeals.
-
positive ●●●●● privacyEncrypted vaults unreadable
1Password states your secure vault data is encrypted with keys only users or admins control, and that it cannot access readable vault contents. For a password manager, this is a major privacy and security benefit.
-
negative ●●●●○ termsLiability tightly capped
1Password broadly disclaims warranties and limits most monetary liability to the fees you paid in the prior six months. If something goes badly wrong, available compensation may be quite limited.
-
positive ●●●●○ termsYou keep data ownership
The terms and privacy policy both say your stored data remains your property. The service license is limited to what is needed to operate the service, rather than a broad commercial content license.
-
positive ●●●●○ privacyExport and deletion rights
Users can export their data and request permanent deletion, with an authenticated deletion flow described in the privacy policy. This reduces lock-in and gives users meaningful control over their information.
-
negative ●●●○○ termsAuto-renewal and trial conversion
Subscriptions renew automatically unless canceled, and free trials can turn into paid plans if you entered billing information and do not cancel in time. Users need to actively manage cancellation.
-
negative ●●●○○ termsNonrefundable by default
The terms say amounts paid are generally nonrefundable, with refunds only considered case by case. That makes mistaken renewals or unused service harder to recover financially.
-
negative ●●●○○ termsTerms can change
1Password reserves the right to modify or discontinue services and to change the terms, with continued use counting as acceptance. Although it says it will try to give notice for material changes, the discretion remains largely theirs.
-
negative ●●●○○ privacyMarketing data sharing
The privacy policy allows sharing personal information with marketing partners for advertising, and says this may be considered a sale or sharing under some privacy laws. Privacy-conscious users may want to opt out where available.
-
neutral ●●●○○ privacyBusiness admins control accounts
For employer-managed accounts, administrators may access account-related data, recover vaults, and delete or restrict access. This is expected for enterprise products, but employees should understand their organization may control the account.
-
positive ●●●○○ termsNotice before termination
If 1Password plans to terminate an account for breach or harmful use, it usually says it will give notice and a chance to fix the issue. It also says it will work to let users keep copies of their data where possible.
-
negative ●●○○○ privacyRetention not time-limited
The privacy policy keeps personal information as long as needed for stated purposes or legal requirements, and deleted information may persist in systems for some time. That is common, but it is not a tight or specific retention limit.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.