Field Notes

event

Mullvad donation controversy

StatusStableReviewdue UpdatedStands on4 sourcesSupportsnotes

A 2026 reputational controversy around Mullvad, triggered when a 2025 political donation by co-owner Daniel Berntsson became public. It is a documented case study in a structural risk this wiki tracks elsewhere: a privacy brand cannot fully separate itself from what its owners do with the profits its customers generate.

Timeline

  • 2014: Örebropartiet’s future founders are ousted from the Left Party and later build the municipal party in Örebro.
  • 2025: Berntsson donates five million SEK (roughly half a million US dollars) to Örebropartiet.
  • Mid-2026: Swedish reporting publicizes the donation, roughly a month before the Privacy Guides episode, including an interview in which Mullvad’s CEO distances the company from it.
  • 2026-07-15: The Hated One publishes a video withdrawing his long-standing recommendation of Mullvad.
  • 2026-07-20: Mullvad publishes its official statement, and Berntsson publishes his personal rationale.
  • 2026-07-25: Privacy Guides devotes the lead segment of This Week in Privacy #63 to the fallout.

The positions

Berntsson frames the donation as encouragement of political competition and of the only party naming the “transferiat,” while explicitly disavowing most of the party’s policies and any wish to see it hold much power.

Mullvad frames the donation as a private act it neither condones nor condemns, resting on its narrow political mandate (privacy, free speech, freedom of information) and a culture of “radical tolerance.” The statement concedes the donation “most likely was a bad idea” and notes the founders disagree on it.

Critics, led by The Hated One, reject the private/company distinction as without practical difference: Berntsson owns 50% of the company, so the donated fortune is subscriber revenue one step removed. The sharper argument is about enforcement logic — Örebropartiet’s remigration policy could only be executed through population-scale surveillance — which sits in direct tension with what a privacy company sells. The Hated One adds a technology critique: Mullvad’s margins could have funded per-destination circuits or mixnet decentralization instead of political donations.

Privacy Guides took the middle position: the service’s privacy properties are unchanged, subscribing is a personal values decision, and both staying and leaving are defensible. Community reaction on Mastodon and X included announced cancellations.

Why it matters to the vault

  • Partner due diligence. Mullvad is the planned first partner for Privacy voucher shop. The controversy changes nothing about the voucher architecture, but it shows that a partner’s trust posture includes its owners’ public conduct, and that the venture’s brand can inherit a partner’s political fallout. Supplier selection needs a values-alignment and reputational-contingency check, not only a technical and contractual one.
  • Trust governance. Privacy trust and governance is a set of answers to practical questions; this event adds one: what may the owners do with the profits customers create?
  • No technical lesson. Nothing in the controversy bears on Mullvad’s no-logging design, account model, or voucher program. Mullvad’s technical assessment stands.

Open threads

  • Measurable subscriber impact is unknown; cancellations were announced on social media but no numbers exist in the imported sources.
  • Örebropartiet’s own program has not been imported; its characterization here comes from one supporter and two commentaries.

Built on 4 sources (4 external).

Working out connections…