Is Mysterium VPN safe? Logging policy, audits and jurisdiction

Mysterium VPN scores 2.7 out of 10 for privacy and 5.0 for security. The technical side is fine: WireGuard with ChaCha20 encryption, a kill switch, DNS leak protection and perfect forward secrecy. The weak spot lies elsewhere: nobody has independently verified the logging promises.

What "no logs" means here

The website says "No logs whatsoever". At the same time, the privacy policy lists what the service collects: session times, traffic volume, device model and operating system, app analytics via Firebase and ConfigCat, and crash reports via Sentry. Connection data, according to the service, is deleted a few minutes after a session ends. There is no way to check this: there is no independent no-logs audit, and the policy mentions "regular audits" without any details. Open-source apps are claimed, but the service gives no link to a repository. The site runs Microsoft Clarity, Hotjar and advertising pixels from Meta, LinkedIn, Reddit and X.

Who can see your traffic

Mysterium VPN has no servers of its own; traffic exits through devices run by independent node operators, often on residential IP addresses. The exit node operator may see which sites connections go to, and traffic without HTTPS is fully visible to them. For getting around IP blocks this is convenient; for sensitive tasks it adds an extra participant to the chain.

Jurisdiction and government requests

UAB "MN Intelligence" has a Lithuanian legal form, although the service does not name the country outright. Lithuania is not part of the 5/9/14 Eyes, while the terms of use are governed by the law of Panama. The documents do not say how the service responds to police requests, and there is no warrant canary or transparency report. Services whose promises have been verified are listed in our rating of audited no-logs VPNs.