TunnelBear safety check: audited apps, Canadian law and what the policy keeps

TunnelBear is safe enough for everyday use: the apps, backend and APIs go through an outside white-box audit every year, traffic runs over WireGuard, OpenVPN or IKEv2 with AES-256, and the privacy policy keeps no connection IP and no session timestamps. Anonymity is where it stumbles. The no-logs promise is self-declared, since TunnelBear has not published an independent audit of that claim, Canada belongs to the Five Eyes alliance, and the account is tied to an email plus a card payment. Privacy scores 3.0 out of 10 for those reasons.

Who runs TunnelBear and what Canadian law means for your data

TunnelBear LLC is registered in Canada, its address is in Toronto, and its own blog describes the service as part of the McAfee family since the 2018 acquisition. Canadian registration puts the company under Canadian law and inside the intelligence-sharing arrangement between the Five Eyes states, which costs the service all 2 alliance points in our privacy rating. The policy does add that personal data is stored only inside Canada and processed under Canadian law, no matter where the user lives.

What the privacy policy says TunnelBear collects

Nothing in the kept list links a VPN session to a home address or a moment in time. The monthly bandwidth figure is a running total, not a usage history. Data goes to service providers only, and the policy was last revised on 11 May 2026; the full text is on the TunnelBear site. One nuance: the marketing site itself loads Google Analytics, Hotjar, LinkedIn Insight, Cloudflare and an affiliate tracker. Those follow your visit to tunnelbear.com, not the traffic inside the tunnel.

Yearly security audits: what they check and what they leave open

Cure53 runs the audit as a white-box assessment with access to source code, configurations and internal documentation, covering the apps, backend systems, public APIs, data handling and encryption. TunnelBear publishes the results on its blog, including the 8th annual report, and says the findings were addressed or mitigated.

An audit answers whether attackers can break the code. It does not answer what the company stores. The site data records no independent review of the no-logs claim, so that promise stays self-declared, and the 3 points for an external no-logs audit remain unearned. TunnelBear also does not publish DNS leak protection, open-source clients, two-factor sign-in or RAM-only servers, which holds security at 3.9 despite the annual check.

How the 3.0 privacy and 3.9 security scores add up

Security sits well above the median for consumer VPNs, mostly because of the yearly audit, the VigilantBear kill switch and WireGuard support. Privacy loses points in one place above all: the unverified no-logs claim costs 3 points, Five Eyes another 2, and the absence of published no-email sign-up or login-by-account-number options takes 2 more. No transparency report or warrant canary is on record either. VigilantBear matters in concrete terms: on hotel Wi-Fi it is what cuts the connection when the tunnel drops, instead of letting traffic leak outside it.

Is the free 2 GB plan as safe as Unlimited?

Free accounts fall under the same privacy policy as paid ones. The free tier caps you at 2 GB a month, hides country selection and leaves SplitBear, the split tunnelling feature, to paying users. Unlimited runs $69.99 a year or $10.99 monthly, with unlimited devices; the full 30-day refund applies to a first-year annual subscription only, so monthly, Teams and App Store or Google Play purchases are not eligible for it.

TunnelBear safety FAQ

Does TunnelBear sell or share what you do online?

The policy names service providers as the only recipients and stores no browsing records to share.

Can you pay for TunnelBear without revealing who you are?

Not really. Checkout accepts bank cards through Stripe or Link, and the processor may keep transaction data outside Canada. No crypto or cash option is listed.

Will TunnelBear get through networks that block VPNs?

GhostBear obfuscation is the only bypass tool in the data, so strict DPI filtering may still win.

Is TunnelBear safe for torrenting?

P2P servers exist, though the terms ban distributing copyrighted material.

Who TunnelBear is safe enough for

Choose TunnelBear if you want audited apps for public Wi-Fi and travel and are fine being identified by your account. Look elsewhere, perhaps among VPNs with an audited no-logs policy, if anonymity or censorship bypass is the goal: the 1.9 bypass score and the card-only checkout tell you where it falls short.