NordVPN vs Proton
Side-by-side comparison of the Terms of Service and Privacy Policy of NordVPN and Proton.
Strong privacy positioning and deletion controls are offset by auto-renewal, broad sharing/disclosure language, liability limits, and terms that give Nord substantial control over accounts and permitted use.
NordVPN presents a mixed but generally privacy-forward legal posture. It emphasizes a no-logs approach and provides clear account deletion and privacy-rights processes, but it also collects identifying data needed for service delivery, shares data with providers and partners, and uses cookies/tracking for advertising that users must opt out of. The terms include automatic renewal, broad usage restrictions, liability limits, and unilateral updates by continued use.
Points of interest
-
negative ●●●●○ termsAuto-renews by default
Paid plans renew automatically unless you cancel before the renewal date. Users need to watch cancellation timing to avoid unwanted charges.
-
positive ●●●●○ privacyNo-logs approach
Nord says it does not record your online activity or IP addresses for NordVPN services. That is a meaningful privacy benefit if you want a VPN provider that minimizes activity logging.
-
positive ●●●●○ privacyAccount deletion available
You can delete your account in the Nord Account settings or through the apps, and deletion removes access to linked Nord products. This gives users a clear off-ramp if they want to leave the service.
-
negative ●●●○○ privacyBroad data sharing
Nord shares personal data with service providers, other Nord companies, partners, and third parties for bundled services. Even where the policy is controlled, this expands the number of entities that may process your information.
-
negative ●●●○○ privacyAdvertising cookies shared
Nord says it does not sell personal data, but it does share cookie and tracking data with analytics and advertising partners for advertising. Users must opt out through cookie controls to reduce that sharing.
-
negative ●●●○○ privacyConsent needed for third-party services
If you buy bundled or standalone third-party services through Nord, your data is shared with those providers to activate and administer the service. That means those services can bring their own privacy policies and controllers into the mix.
-
positive ●●●○○ privacyPrivacy rights access
The policy says you can request privacy actions and appeal decisions on privacy-rights requests, subject to verification. That makes its rights process more transparent than many services.
-
positive ●●○○○ privacyMinimal data claim
Nord states it collects and uses only the bare minimum of information needed. In practice, that suggests a narrower data collection approach, although it still collects email and payment details.
Documents
Strong privacy protections and user controls are offset by several standard but significant contract restrictions, including arbitration, auto-renewal, limitation of liability, and account/data deletion rules.
Proton presents a privacy-forward legal posture: it says it collects minimal data, cannot access encrypted content, offers in-account export/delete controls, and limits disclosure to lawful Swiss requests. However, the terms also include automatic renewal, broad liability limits, binding arbitration with a class waiver, unilateral policy changes, and inactivity-based deletion for free accounts.
Points of interest
-
negative ●●●●● termsMandatory arbitration
The terms require individual binding arbitration for most disputes and waive class actions, which limits the ability to sue in court or band together with other users. There is an opt-out window, but only if you act within 30 days.
-
positive ●●●●● privacyMinimal data collection
Proton says it collects as little personal data as possible and does not have the technical means to access encrypted emails, files, calendar events, passwords, or notes. That is a strong privacy benefit for users handling sensitive information.
-
negative ●●●●○ termsAutomatic renewal and upfront cancellation
Subscriptions renew automatically unless you cancel before the renewal date. If you miss the deadline, you can be charged for another term even if you no longer want the service.
-
negative ●●●●○ termsFree inactivity deletion
Free accounts inactive for 12 months can lose emails, files, calendar entries, and passwords, with deletion notices sent in advance. That is a meaningful risk for anyone using the free tier as long-term storage.
-
negative ●●●●○ termsBroad liability waiver
Proton disclaims most warranties, including reliability and data security guarantees, and caps liability at $100 or what you paid, whichever is greater. This makes recovery for service problems or data loss much harder.
-
positive ●●●●○ privacyNo full card storage
Proton says it does not retain full credit card details and keeps only your name and the last four digits of the card number. This reduces the amount of payment data it stores if you pay by card.
-
positive ●●●●○ privacyExport and delete available
You can access, edit, delete, or export personal data through your account interface. That gives users a direct path to data portability and account cleanup without needing to rely only on support.
-
negative ●●●○○ termsTerms can change unilaterally
The company reserves the right to review and change the Terms at any time, and continued use counts as consent. Users need to keep checking for updates to avoid being bound by changes they may not notice.
-
negative ●●●○○ privacyTemporary IP retention for abuse
While Proton does not keep permanent IP logs by default, it may retain IP addresses permanently for serious Terms violations. That means some abuse-related activity can leave lasting account records.
-
positive ●●●○○ privacyNo permanent IP logs by default
Proton says it does not keep permanent IP logs by default, though it may retain them temporarily for abuse prevention. Users concerned about logging get a relatively privacy-friendly default setting.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.