Surfshark Review: Unlimited Devices, 4,500+ Servers, $2.19/Month

8.2 Excellent

Unlimited devices at a rock-bottom price. Good enough for most people, not the best at anything.

Best for: Families and multi-device households on a budget Not for: Privacy purists (Netherlands is 9-Eyes, owned by Nord Security)
Leak Tests No-Logs Audit Kill Switch Split Tunneling

Connect unlimited devices with high, reliable speeds and an impressive array of features, all in one easy-to-use package.

Being relatively new to the VPN market, Surfshark has had to quickly prove it’s reliable, trustworthy, and one of the fastest VPN services around, to make it capable of being one of the best.

With its simple interface amidst proficient privacy and security standards, an extensive list of additional features, and an unlimited number of devices that can be connected.

But just how good is it? Our comprehensive Surfshark review delves deep, to help you decide whether the new provider delivers on its promises and if it can be trusted, as well as investigating how much Surfshark costs and if its features are worth their price tag.

Get Surfshark Now
30 days Money-back guarantee - cancel anytime, no questions asked.

Reviewed by VPNTesting.com Research Team | Fact-checked by Editorial | Last verified: 31 March 2026 | Backed by 44,747+ real-world leak tests | Independently AuditedOwnership Verified | Why trust us?
Jump to section
8.2 Our rating
💰 $1.99/mo Best price
🌐 4,500+ Servers
🌎 100 Countries
💻 Unlimited Devices
🇳🇱 Netherlands Jurisdiction
💳 30 days Money-back

Surfshark Pros & Cons

Surfshark Specifications
Best Price
$1.99/mo
$15.45/mo monthly
Free Trial
7-day free trial on mobile (iOS and Android via app stores)
Refund Policy
30-day money-back guarantee
Devices
Unlimited
Servers
Countries
🇳🇱 Netherlands (outside 14-Eyes)
Founded
2018 (8 years ago)
Encryption
DNS Features
CleanWeb
Support
24/7 live chat and email
Windows · macOS · iOS · Android · Linux
Kill switch · Split tunneling · Open source
What we like
  • Fast connection speeds
  • Unlimited devices
  • No logs policy
  • Private DNS and leak protection
  • 24/7 customer support
What could be better
  • Not all features available on all platforms
  • Antivirus features and dedicated IP cost extra
Best for: Large households or users with many devices - unlimited simultaneous connections on one account
Not ideal for: Users who need a long track record - Surfshark launched in 2018 and has fewer independent audits than established competitors

Surfshark by the Numbers

Our Take
Surfshark's numbers look strong on paper - 4,500+ servers across 100 countries with unlimited devices. The server count trails NordVPN and CyberGhost, but 100 countries gives you solid geographic reach. The unlimited device policy is the real differentiator here: most competitors cap at 5-10.

Surfshark Feature Scores

Scored across 5 dimensions we test
Surfshark Market Average (29 VPN providers)
How we score
Speed
Based on our speed testing: Very Fast = 9, Fast = 7, Moderate = 5, Slow = 3.
Coverage
Number of countries with servers: 100+ = 10, 60+ = 9, 45+ = 7, 30+ = 5, 15+ = 3.
Value
Best available monthly price (inverted): $2/month = 10, $5 = 6, $10+ = 3.
Capacity
Simultaneous device connections: Unlimited = 10, 10+ = 9, 7+ = 7, 5 = 5.
Server Density
Total server count: 10,000+ = 10, 6,000+ = 9, 3,000+ = 7, 1,000+ = 5.
Surfshark vs Typical VPN Compared against the average of 29 VPN providers we track
Our rating 8.2 +1.5
Best price $1.99/mo -$1.42
Servers 4,500 +48%
Countries 100 +31%
Money-back 30 days +2d
Surfshark Industry average
How we score
Our Rating
Editorial score (1-10) based on hands-on testing across speed, privacy, features, and value.
Best Price
Lowest available monthly rate on any plan length. Lower is better.
Servers
Total server count as reported by the provider. More servers generally means less congestion.
Countries
Number of countries with at least one server. Wider coverage means more unblocking options.
Money-back
Length of the money-back guarantee in days. Longer guarantees mean lower risk.

Plans, Products & Prices

Our Take
Surfshark is one of the cheapest premium VPNs on the market if you commit to a 2-year plan. The catch: the "One" and "One+" tiers bundle features like antivirus and data breach monitoring that you may not need. The Starter plan covers the VPN essentials at the lowest price point.

The basic Surfshark plan, Surfshark Starter, offers three types of subscription lengths:

  • 1 month – $15.45
  • 12 months (+3 months free) – $2.79, billed annually
  • 24 months (+3 months free) – $1.99, billed for 24 months

Surfshark’s features are the same, regardless of which subscription length you choose – so all options include the ability to connect an unlimited number of devices. This means the most cost-effective option is to sign up for the 24-month (+3 months free) plan for the price of $1.99.

All plans automatically renew as a yearly plan.

It should be noted that the prices above are excluding tax, so that will be an additional cost at checkout. The tax amount varies as per the US state that you live in.

 

Free Trial

Surfshark offers a seven-day free trial via the Google Play Store and Apple App Store. This means only Android, iOS, or macOS users can benefit. However, once you’ve signed up for the trial on one of these platforms, you can access Surfshark on any other device regardless of its operating system.

To access the free trial, users need to download the app from either of those stores and choose “Start free trial”. You will then need to create an account and select the 12-month option.

Although the first seven days are free, you’ll need to provide a payment method when signing up. This will schedule an automatic renewal for the 12-month subscription at the end of your seven-day free trial.

If you cancel before the end of your free seven days, you won’t be charged. If you forget, you can still request a refund through the 30-day money-back guarantee.

What is Surfshark’s Refund Policy?

All Surfshark subscriptions bought through their official website come with a 30-day money-back guarantee. Monthly subscriptions may be refunded within the first 30 days only after the initial purchase.

Additionally, those who purchase the 12- or 24-month plans (and have the auto-renewal option on) will again be eligible to apply for the 30-day money-back guarantee after each renewal.

To claim a refund, you must contact Surfshark’s Customer Support team via email or live chat within 30 days of the initial purchase.

However, if you paid for a subscription through an Apple or Amazon store (eg Apple App Store), you must contact the specific store for a refund based on their refund policies. Surfshark is unable to refund any purchases made through a third party.

You should also note that prepaid cards or gift cards can not be refunded either.

If you paid using cryptocurrency, the equivalent amount in US Dollars will be refunded in the same cryptocurrency based on the rate of exchange at the time of the refund.

Surfshark One

Surfshark One is a bundle that’s designed to enhance your privacy and security online. It provides four features packaged into a single account to protect yourself from viruses, malware, data leaks, and privacy threats.

In addition to Surfshark’s VPN (and Alternative ID), Surfshark One also includes antivirus protection, search protection, and fraud alerts:

Surfshark Antivirus

Surfshark Antivirus provides real-time scanning and 24/7 protection from viruses and malware, protection against computer camera hacking, and cloud protection.

The antivirus software simultaneously scans all five devices connected via Surfshark VPN at once and, true to the company’s VPN heritage, it doesn’t collect any personal data.

Surfshark Antivirus has picked up some powerful endorsements:

  • Certified by Virus Bulletin, a security benchmarking, testing, and certification firm.
  • Certified by AV-Test, another cybersecurity testing company.
  • Part of Microsoft Virus Initiative (MVI), a team that helps make antivirus/antimalware products integrate better with Windows devices.

Surfshark Search

Surfshark’s search tool doesn’t track or store your data and provides ad-free organic search results only, allowing you to browse in complete privacy. Surfshark Search has no ads, no logs, and no trackers.

Surfshark Alert

Surfshark Alert is a smart tool that automatically monitors your emails, credit cards, and personal IDs, plus scans for breached databases, and notifies you with real-time alerts when it detects  any breaches related to your personal information.

Pricing

The prices for the Surfshark One bundle (excluding tax) are:

  • 1-month plan for $14.99/mo
  • 1-year plan (+3 months free) for $3.19/mo
  • 2-year plan (+3 months free) for $2.69/mo

Surfshark One+

Surfshark One+ offers all the features offered by Surfshark One. These are Surfshark VPN and Alternative ID, Surfshark Antivirus, Surfshark Search, and Surfshark Alert. Additionally, it offers the Incogni product which removes your data from databases.

It removes data from company databases preventing them from sending email campaigns and targeted ads. It also offers data removal from search sites preventing phishing attacks and identity theft.

The prices of the Surfshark One+ bundle (excluding tax) are:

  • 1-month plan for $17.95/mo
  • 1-year (+3 months free) plan for $5.09/mo (billed annually)
  • 2-year (+3 months free) plan for $4.29/mo (billed for 24 months)

How Do the Plan Tiers Compare?

Surfshark Plan Tiers
Starter One Their pick One+
Best rate $2.24/mo $2.80/mo $4.71/mo
Monthly rate $15.45/mo $17.95/mo $20.85/mo
Devices Unlimited Unlimited Unlimited
VPN
Alternative ID
Surfshark Antivirus
Surfshark Alert
Surfshark Search
Incogni
Alternative Number
Bundle premium vs base $0.00 +$0.56/mo +$2.47/mo
See Starter plan See One plan See One+ plan

How Does This Compare to Other VPN Bundles?

How Does Surfshark Compare to Other VPNs?

Provider Best rate Monthly Money-back Rating
Surfshark $1.99/mo Lowest $15.45/mo 30 days ★ 8.2
ExpressVPN $3.49/mo $12.99/mo 30 days ★ 8.6
NordVPN $3.09/mo $12.99/mo 30 days ★ 8.8
CyberGhost $2.19/mo $12.99/mo 45 days ★ 7.4
Private Internet Access $2.19/mo $11.99/mo 30 days ★ 7.2
Prices shown are the best available rate on long-term plans. Monthly rates shown for comparison.
Surfshark's Consumer Offering
Product Type Plan Tier Extra Cost Availability
Alternative ID Identity Protection All plans Included Global
Surfshark Antivirus Antivirus One plan Bundled Global
Surfshark Alert Data Breach Monitor One plan Bundled Global
Surfshark Search Private Search One plan Bundled Global
Incogni Data Removal One+ plan Bundled Global
Alternative Number Virtual Phone Number Add-on only - Global
VPN Bundle Pricing Compared
Provider VPN-Only Price Full Bundle Price Bundle Premium What's in the Bundle Free Alternatives Exist? Bundle Value
PureVPN 3 tiers $2.14/mo Standard $3.48/mo Max +$1.34/mo
  • PureKeep
  • PurePrivacy
  • PureEncrypt
Good value
ProtonVPN 2 tiers $4.49/mo VPN Plus $7.99/mo Proton Unlimited +$3.50/mo
  • Proton Mail
  • Proton Drive (500GB)
  • Proton Pass
  • Proton Calendar
  • Proton Docs
Mixed
NordVPN 4 tiers $3.39/mo Basic $7.39/mo Prime +$4.00/mo
  • NordPass
  • NordLocker (1TB)
  • NordProtect
Mixed
ExpressVPN 3 tiers $3.49/mo Basic $7.49/mo Pro +$4.00/mo
  • ExpressVPN Keys
  • Identity Defender
  • ExpressMailGuard
  • eSIM (holiday.com)
Mixed

Prices shown are the best available rate (typically 2-year plan). "Bundle premium" is the difference between the VPN-only tier and the most expensive bundle tier. "Free alternatives" shows widely available free products that serve the same purpose as the bundled extra.

Ways to Pay

Surfshark Payment Methods

International
Credit/Debit Card PayPal
Digital Wallets
Google Pay Amazon Pay
Cryptocurrency
Bitcoin (BTC) Ethereum (ETH) Litecoin (LTC) Dogecoin (DOGE) Bitcoin Cash (BCH) XRP
7 cryptocurrencies accepted · via CoinGate
Crypto cannot be used on mobile. No auto-renewal with crypto. Payments may take up to 24 hours. Regional methods vary at checkout.
Availability may vary by region. Last verified March 2026.

Streaming TV & Movies With Surfshark

Our Take
Surfshark reliably unblocks most major streaming platforms. It won't match ExpressVPN or NordVPN for consistency across every region, but for the price difference, the gap is small. Smart DNS is missing, which limits options for devices that can't run the app.

How does streaming work with VPNs? Can you use Surfshark to watch Netflix? What about your other favorite streaming services?

Compatible Devices and Services

Surfshark Platform Compatibility
🖥 Desktop
🪟 Windows
🍎 macOS
🐧 Linux
💻 Chromebook
📱 Mobile
🍎 iOS
🤖 Android
📺 TV & Streaming
📺 Android TV
🔥 Amazon Fire TV
🍎 Apple TV
🎮 Gaming
🎮 PlayStation via router
🎮 Xbox via router
🎮 Nintendo Switch via router
🌐 Browser Extensions
🌐 Chrome
🦊 Firefox
🌐 Edge
📡 Router
📡 Install on your router
📡 Pre-configured VPN router

Surfshark is available on all major platforms, including:

Unfortunately, not all the platforms get the same features (see our “Features” section below). Those such as automatic KillSwitch, Camouflage mode, NoBorders, and regular CleanWeb features are available on iOS, Android, macOS, and Windows, while others like Bypasser are only available on Android and Windows.

Surfshark is also available on gaming consoles and any smart TV, with setup guides for:

Surfshark Streaming Compatibility
Service Last Tested Source
Netflix (US) 28 Mar 2026 (outdated) Surfshark confirmed
Netflix (UK) 28 Mar 2026 (outdated) Surfshark confirmed
Amazon Prime Video 28 Mar 2026 (outdated) Surfshark confirmed
Disney+ 28 Mar 2026 (outdated) Surfshark confirmed
Hulu 28 Mar 2026 (outdated) Surfshark confirmed

Streaming compatibility tested by VPNTesting.com. Results may vary by server and region.

Mobile and Desktop Apps

Surfshark has apps for all of the major platforms it’s compatible with. The Surfshark website has download links for each of these, depending on your device and system requirements.

For desktop computers:

For phones and tablets:
  • Android 5.10 and newer
  • iOS 13.0.0 and up

Browser Extensions

Surfshark browser extensions are available for:

VPN extensions are proxies that mask your IP, bypass internet restrictions, but don’t offer the same privacy or protection as a full VPN. However, Surfshark’s browser extensions allow users to use CleanWeb 2.0 – Surfshark’s new, upgraded, four-in-one ad and tracker blocker (see “Features” below for more).

Ease of Use

Since Surfshark has apps for each of its available platforms, setting up and using Surfshark’s VPN is relatively straightforward, as you can access all settings and options through the app’s clean interface.

Surfshark’s website also contains user guides for most of its platforms, explaining how to set up and start using Surfshark on macOS, Windows, iOS, Android, Linux, Chromebook, and Amazon Fire TV. In addition, Surfshark has an entire Help Centre filled with instructions, guides, and FAQs, with videos on most pages to help walk you through any difficulties.

If you’re still having issues, Surfshark has 24/7 customer support via email or live chat, so there’s always someone available to help you out.

Get Surfshark Now
30 days Money-back guarantee - cancel anytime, no questions asked.

Streaming on TV & Other Devices

Surfshark can be used with several devices to stream content. Here are the compatible devices:

Amazon Fire TV and Fire TV Stick

Surfshark has an app for Fire TV devices, making it easy to download and use: simply search for Surfshark on your Fire TV device, install the VPN app, log in, and connect.

Surfshark has more detailed instructions in its Help Centre, including a simple step-by-step guide on how to install Surfshark on Amazon Fire TV and Amazon Fire TV Stick.

Surfshark is currently supported on the following Fire TV devices:

  • 2nd-gen and 3rd gen Fire TV & Fire TV Stick
  • 4K Fire TV & Fire TV Stick

Smart TVs

Surfshark says it’s available on all smart TVs, including Apple TV, Chromecast, Samsung Smart TV, Android TV, and Roku.

If your TV supports apps, then you can simply search for the Surfshark app, download it, and log in to begin using it.

Alternatively, if your TV doesn’t support apps, you can activate Smart DNS and follow the guide for your TV. Smart DNS changes the DNS address (for spoofing your virtual location) on your Smart TV while streaming. Surfshark makes sure to cover even unsupported devices, such as Apple TV.

The Surfshark website contains set-up guides for almost every smart TV option available.

Xbox & PlayStation

Surfshark will work on:

You’ll need to set up the VPN on your router first, which Surfshark provides instructions for. Then, when you connect your game console to the router like you usually would, your device is protected by the VPN.

Performance & Speed

Our Take
Speed test results put Surfshark in the upper mid-range - fast enough for 4K streaming and large downloads, but not the fastest we've tested. WireGuard is the default protocol and the right choice for most users. Expect single-digit percentage speed loss on nearby servers.

Buffering

Surfshark claims you can stream in 4K HD without buffering, thanks to its fast servers and encryption protocol, and by having at least 1Gbps port connected per server (the amount of traffic each server can handle). In addition, its choice of 4,500+ servers means users shouldn’t run into any congestion.

However, due to the encryption being used to keep your connection secure while using a VPN, buffering is sometimes unavoidable. If this happens, it’s often worth trying to connect to a different server, changing your protocol settings, or turning on Surfshark’s multihop feature, as all of these options can help make your VPN faster.

Windows or Android users can also choose to use Surfshark’s Bypasser feature and have slow sites bypass the VPN to transmit via a standard internet connection instead.

Bandwidth

Surfshark doesn’t place any limitations on speed, bandwidth, or data, though it does note you may experience a 20-30% decrease in speed (compared to not using a VPN).

Conversely, Surfshark may increase your speed. Some internet service providers begin to slow down activities like streaming (this is called bandwidth throttling) to encourage users to switch to higher-paid plans. Surfshark mitigates this by hiding your internet traffic from the service provider, ensuring you continue to receive high-speed streaming.

Surfshark also prevents its servers from being overloaded (which would cause them to slow down) by offering more server bandwidths per user in popular locations. This means Surfshark users should enjoy low latency and minimal speed reductions when streaming.

A VPN will most likely slow down your internet speeds, as your traffic is being directed through a secure server in another location. Generally, the closer you are to the server location, the less the decrease in speed is likely to be since your data has less of a distance to travel.

Surfshark has 4,500+ servers across 100 countries, and you can choose to join any of these. However, you can also simply choose “fastest location”, and Surfshark will automatically connect you to the server that will offer you the fastest speeds.

We ran a speed test using the “fastest location” option and found our internet download speed was the same as without a VPN with just a 10% drop in upload speed.

The test results revealed a slight increase in latency too – which is the time it takes for data to pass from one network node to another. The higher your latency, the more likely you are to experience lag, though anything under 100ms is generally considered okay for tasks like gaming.

Speed was around 18% slower when connected to a server on the other side of the world (in our case, Australia), with a much greater latency and slower upload speed. This is to be expected.

We also tried Surfshark’s “MultiHop” option, which sends traffic through two different servers for extra security. This is supposed to slow speeds down, though we found our internet increased. However, latency and upload speeds were affected as predicted.


Privacy & Security

Our Take
Surfshark's privacy setup is solid: Deloitte-audited no-logs policy, RAM-only servers, and AES-256-GCM encryption. The Netherlands jurisdiction (9-Eyes alliance) is a concern for privacy purists, though the audited no-logs policy means there's nothing to hand over. The Nord Security acquisition in 2022 adds corporate credibility but also concentrates market power.
Surfshark's privacy promise

We do not collect IP addresses, browsing history, session information, used bandwidth, connection timestamps, network traffic, or other similar data.

Surfshark Privacy Policy
Our analysis:
  • Independently audited by Deloitte (2 audits)
  • Based in Netherlands (outside Five/Nine/Fourteen Eyes alliances)
Surfshark Transparency Report 🇳🇱 Netherlands
69 government requests (2025) ▲ +53% · 358K DMCA requests · 0 warrants · No browsing data disclosed
Government69
DMCA358K
2024 - 2025
NO LOGS AUDIT ONLY

Does Surfshark Keep Logs?

3/6 verified
Policy No-logs policy independently verified Read policy Verified
Audit Deloitte (Jun 2023) - 2 audits total Verified
Court test No adversarial court test on record Unknown
Jurisdiction 🇳🇱 Netherlands (outside 14-Eyes) Verified
Infrastructure RAM-only Claimed
Ownership Nord Security Inc. - Lithuania / Panama Claimed
Policy updated 3 times since monitoring began. Last: Jun 22, 2026.
Surfshark Infrastructure & Trust
Obfuscated Servers
Tor/Onion Support (manual setup)
Port Forwarding
RAM-Only Servers
Independent Audit Deloitte (2 audits) Jun 2023
Config File Export

We monitor Surfshark's legal documents daily for changes and summarize what changed.

Last checked: 22/06/2026 · 3 changes detected since 29/03/2026

minor Terms of Service 22/06/2026
QUICK LINKS What services does Surfshark provide?Do I have to create an account?What happens if I share or lose my account information?What is Surfshark payment, automatic renewal and refund policy?What age do I have to be to use this Website or your Services?How do I comply with intellectual property laws?What activities are prohibited and how to notify about the possible infringement of these terms?What is Surfshark’s Fair Usage Policy?Does Surfshark link to any third party sites?Disclaimers and Limitations on Liability.Indemnity.What governing law applies?Bundled subscriptions and third party servicesWhom should I contact with questions or concerns?Other termsWhen was the Terms of Service last updated?
QUICK LINKS
What services does Surfshark provide?
Do I have to create an account?
What happens if I share or lose my account information?
What is Surfshark payment, automatic renewal and refund policy?
What age do I have to be to use this Website or your Services?
How do I comply with intellectual property laws?
What activities are prohibited and how to notify about the possible infringement of these terms?
What is Surfshark’s Fair Usage Policy?
Does Surfshark link to any third party sites?
Disclaimers and Limitations on Liability.
Indemnity.
What governing law applies?
Bundled subscriptions and third party services
Whom should I contact with questions or concerns?
Other terms
When was the Terms of Service last updated?
Surfshark Terms Of Service
Since nobody enjoys reading these things, we’re including short blurbs of text to help you understand what each section is about. You should still read the whole thing since this is only a comment and the Terms are the binding document you’re agreeing to if you have a Surfshark account. But we’re not judging.
Thank you for visiting Surfshark! Please read the following information carefully. PLEASE PAY CLOSE ATTENTION TO THE PROVISIONS COVERING AUTOMATIC RENEWAL OF SERVICES AND CHANGE OF THESE TERMS OF SERVICE. These Terms of Service govern your access to and use of all Surfshark Services. This is a binding agreement. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF SERVICE, DO NOT ACCESS OR USE THE WEBSITE OR OUR SERVICES. BY ACCESSING OR USING THE WEBSITE AND OUR SERVICES, YOU AGREE TO BE BOUND BY THE TERMS OF SERVICE. References to ‘you’ in these Terms of Service indicate a person who created Surfshark account and/or whose payment method is charged.
We may change these Terms of Service from time to time. We will post a notice on the Surfshark Site any time these Terms of Service have been amended or updated. It is your responsibility to review these Terms of Service periodically, and if at any time you find these Terms of Service unacceptable, you must immediately leave the Surfshark Site and cease all use of our Services.
When you agree to use our Services, which includes, but is not limited to: the use of our servers, routers, IP addresses, protocols, add-ons, software, applications, extensions, and other equipment, as well as any updates thereof, you agree to accept these Terms.
Thank you for visiting Surfshark! Please read the following information carefully. PLEASE PAY CLOSE ATTENTION TO THE PROVISIONS COVERING AUTOMATIC RENEWAL OF SERVICES AND CHANGE OF THESE TERMS OF SERVICE. These Terms of Service govern your access to and use of all Surfshark Services. This is a binding agreement. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF SERVICE, DO NOT ACCESS OR USE THE WEBSITE OR OUR SERVICES. BY ACCESSING OR USING THE WEBSITE AND OUR SERVICES, YOU AGREE TO BE BOUND BY THE TERMS OF SERVICE. References to ‘you’ in these Terms of Service indicate a person who created Surfshark account and/or whose payment method is charged.
We may change these Terms of Service from time to time. We will post a notice on the Surfshark Site any time these Terms of Service have been amended or updated. It is your responsibility to review these Terms of Service periodically, and if at any time you find these Terms of Service unacceptable, you must immediately leave the Surfshark Site and cease all use of our Services.
When you agree to use our Services, which includes, but is not limited to: the use of our servers, routers, IP addresses, protocols, add-ons, software, applications, extensions, and other equipment, as well as any updates thereof, you agree to accept these Terms.
1. What services does Surfshark provide?
A VPN, plus a bunch of other services that all have to do with privacy and security.
Surfshark provides virtual private network (VPN) services, also other privacy and cyber security related services (“Services”). Services include, but are not limited to VPN and other software, extensions, applications, information and content made available to you by Surfshark. A VPN is a secure way to protect your online activities by encrypting your data connection. Thus, third parties are unable to monitor your network traffic, such as websites, downloaded files, or other used internet services. With Surfshark you can connect to different VPN servers worldwide to ensure the privacy of your location.
Surfshark provides virtual private network (VPN) services, also other privacy and cyber security related services (“Services”). Services include, but are not limited to VPN and other software, extensions, applications, information and content made available to you by Surfshark. A VPN is a secure way to protect your online activities by encrypting your data connection. Thus, third parties are unable to monitor your network traffic, such as websites, downloaded files, or other used internet services. With Surfshark you can connect to different VPN servers worldwide to ensure the privacy of your location.
We don’t collect logs or any other information that’d let us identify you. The only things we do collect are strictly necessary to provide you with our services. If you are using the Dedicated IP service, your online activities could be traced back to your account information as this IP is tied to your email address. However, you may choose using an anonymous Dedicated IP option which will result in a removal of all the information we have in our database about your Dedicated IP address. You can find more details about that in the Privacy Policy.
No-logs Policy is one of the most important features of our VPN service. It means your activities are not in any way logged, retained, or transferred to third parties when you connect to our VPN service. We do not collect any information about what you do online (your visited IP addresses, browsing history, session information, used bandwidth, connection time stamps, network traffic or any other similar data). We can ensure such policy as we are based in the jurisdiction, which does not require data storage or reporting, and processes related to provision of our VPN service are automated. Moreover, only very limited user data collected from or provided by you is processed in order to provide VPN service to you. To prevent service abuse, our servers store your user ID and/or IP address, and connection time stamps, but this information is automatically deleted within 15 minutes after termination of your session.
Please note that if you use a dedicated IP address (a unique internet protocol address assigned exclusively to you), it will encrypt your internet traffic and hide your real IP address and virtual location. However, since it’s tied to your email address, certain online activities can be traced back to your account information as far as you don’t select an anonymous Dedicated IP option after the Dedicated IP installation process. Anonymous Dedicated IP option removes any information we have in our database about your Dedicated IP address. Therefore, after you choose this, you will have to manually set up new devices and retain your own information as we will not have any links about who and how uses your Dedicated IP address.
More information on what information is collected about you and how it is used can be found in our Privacy Policy at https://surfshark.com/privacy
No-logs Policy is one of the most important features of our VPN service. It means your activities are not in any way logged, retained, or transferred to third parties when you connect to our VPN service. We do not collect any information about what you do online (your visited IP addresses, browsing history, session information, used bandwidth, connection time stamps, network traffic or any other similar data). We can ensure such policy as we are based in the jurisdiction, which does not require data storage or reporting, and processes related to provision of our VPN service are automated. Moreover, only very limited user data collected from or provided by you is processed in order to provide VPN service to you. To prevent service abuse, our servers store your user ID and/or IP address, and connection time stamps, but this information is automatically deleted within 15 minutes after termination of your session.
Please note that if you use a dedicated IP address (a unique internet protocol address assigned exclusively to you), it will encrypt your internet traffic and hide your real IP address and virtual location. However, since it’s tied to your email address, certain online activities can be traced back to your account information as far as you don’t select an anonymous Dedicated IP option after the Dedicated IP installation process. Anonymous Dedicated IP option removes any information we have in our database about your Dedicated IP address. Therefore, after you choose this, you will have to manually set up new devices and retain your own information as we will not have any links about who and how uses your Dedicated IP address.
More information on what information is collected about you and how it is used can be found in our Privacy Policy at https://surfshark.com/privacy
No shady stuff, please.
We do not approve any unlawful, illicit, criminal or fraudulent activities committed by using Surfshark Services. Surfshark will not be liable in any way or form for illegal actions done by you arising through or from the use of our Services.
We do not approve any unlawful, illicit, criminal or fraudulent activities committed by using Surfshark Services. Surfshark will not be liable in any way or form for illegal actions done by you arising through or from the use of our Services.
2. Do I have to create an account?
Yup. And you’re responsible for it.
In order to use some of the Surfshark Services, you will be asked to set up an account. You are solely responsible for all usage or activity on your account including, but not limited to, use of the account by any person who uses your account, with or without authorization, or who has access to any computer on which your account resides or is accessible.
In order to use some of the Surfshark Services, you will be asked to set up an account. You are solely responsible for all usage or activity on your account including, but not limited to, use of the account by any person who uses your account, with or without authorization, or who has access to any computer on which your account resides or is accessible.
3. What happens if I share or lose my account information?
Please take care of your information. If you tell us about losing it right away, we may be able to help you out.
If you open an account to use or access the Services, you must complete the registration process by providing the complete and accurate information requested on the registration form. You may be asked to provide an e-mail address and password. You are entirely responsible for maintaining the confidentiality of your password. You may not sell, or trade that Account to any other person.
You agree to notify us immediately of any unauthorized use of your account, e-mail address, or password. We are not liable for any loss that you or any third party incur as a result of someone else using your password, either with or without your knowledge. We reserve the right to terminate your account at any time.
If you open an account to use or access the Services, you must complete the registration process by providing the complete and accurate information requested on the registration form. You may be asked to provide an e-mail address and password. You are entirely responsible for maintaining the confidentiality of your password. You may not sell, or trade that Account to any other person.
You agree to notify us immediately of any unauthorized use of your account, e-mail address, or password. We are not liable for any loss that you or any third party incur as a result of someone else using your password, either with or without your knowledge. We reserve the right to terminate your account at any time.
4. What is Surfshark payment, automatic renewal and refund policy?
To keep you secured, Surfshark Services renew automatically. You can cancel automatic renewal at any time.
You can subscribe to Surfshark Services on a service period basis. After signing up for Surfshark Services you may choose a payment method. Only some of our Services are free of charge.
Paid Surfshark Services renew automatically at the end of each service period and your chosen payment method is charged again, unless you decide to cancel your automatic payments before the automatic renewal. By entering your payment details you agree with the automatic renewal. We will inform you in advance by email about the automatic renewal of your subscription (if it is longer than one month).
Prior to the conclusion of your current subscription period, we may initiate a pre-authorization transaction on the credit card provided. A nominal amount may be temporarily charged to validate your payment method's status. Upon successful verification, this amount will be promptly reversed and will not reflect as a permanent transaction on your account. This practice helps ensure uninterrupted access to our services and confirms the ongoing validity of your payment method for future billing cycles.
We will send the first receipt for your purchased Services to your email. All later receipts will be sent to your Surfshark account (to see those receipts please log in to your account, click on “My account”, select “Subscriptions” and then see the receipts in the “Invoices & receipts” section).
Surfshark may change the price for the subscriptions, including recurring subscription fees, or other subscription terms from time to time and will communicate any price or other changes to you in advance. Subject to applicable law, you accept the new price and terms by continuing to use the Services after the changes take effect. Please see currently applicable recurring subscription fees here.
If you purchased the Services directly from us you can cancel your automatic payments (i.e., turn off auto-renewals for the upcoming Service period) at any time from your Surfshark account. If you purchased the Services from a third party your possibilities to cancel automatic payments are subject to its terms. You can also contact us at any time at [email protected] and your automatic payments will be canceled by our support team.
You can subscribe to Surfshark Services on a service period basis. After signing up for Surfshark Services you may choose a payment method. Only some of our Services are free of charge.
Paid Surfshark Services renew automatically at the end of each service period and your chosen payment method is charged again, unless you decide to cancel your automatic payments before the automatic renewal. By entering your payment details you agree with the automatic renewal. We will inform you in advance by email about the automatic renewal of your subscription (if it is longer than one month).
Prior to the conclusion of your current subscription period, we may initiate a pre-authorization transaction on the credit card provided. A nominal amount may be temporarily charged to validate your payment method's status. Upon successful verification, this amount will be promptly reversed and will not reflect as a permanent transaction on your account. This practice helps ensure uninterrupted access to our services and confirms the ongoing validity of your payment method for future billing cycles.
We will send the first receipt for your purchased Services to your email. All later receipts will be sent to your Surfshark account (to see those receipts please log in to your account, click on “My account”, select “Subscriptions” and then see the receipts in the “Invoices & receipts” section).
Surfshark may change the price for the subscriptions, including recurring subscription fees, or other subscription terms from time to time and will communicate any price or other changes to you in advance. Subject to applicable law, you accept the new price and terms by continuing to use the Services after the changes take effect. Please see currently applicable recurring subscription fees here.
If you purchased the Services directly from us you can cancel your automatic payments (i.e., turn off auto-renewals for the upcoming Service period) at any time from your Surfshark account. If you purchased the Services from a third party your possibilities to cancel automatic payments are subject to its terms. You can also contact us at any time at [email protected] and your automatic payments will be canceled by our support team.
We can refund you on the basis of our 30-day money-back guarantee. Except if you signed up via resellers other than Paddle, Google Play, or Cleverbridge, with a prepaid card/gift card or decided to use an anonymous Dedicated IP option, or have made any purchases associated with our Alternative ID service, such as the purchase of the Alternative Number feature. These are out of our hands.
Your satisfaction with our Services is our main goal. If you choose not to use our paid Services anymore, except for any services related to the Alternative ID, such as the purchase of the Alternative Number feature, and/or anonymous Dedicated IP which are non-refundable, we guarantee you a right to claim a refund within 30 days following your initial purchase of our Services.
Our 30-day money-back guarantee is designed to let you try the Service risk-free. Accordingly, it applies only to your initial purchase and is limited to one refund per Service. Please note that for all subscription plans, the 30-day money-back guarantee applies only to the initial purchase; all recurring payments are non-refundable.
Surfshark reserves the right to verify the validity of your account information, and to withhold or delay any refunds until such verification is complete. In the exceptional cases, we may consider refund beyond such 30-days period, at our sole discretion, if you can demonstrate that the Services which you purchased were not available or usable and that you made reasonable attempts to contact us regarding this issue. In such a case, we may provide you with a pro-rata refund of Services’ fees paid during the subscription period when the Services were not available or usable.
We are not able to grant you a refund if you obtained your Surfshark subscription via resellers other than Paddle, Google Play, or Cleverbridge. In the scenarios when your subscription was purchased through a reseller other than Paddle, Google Play, or Cleverbridge, it is necessary for you to consult with the original seller to understand their specific refund procedures and potentially obtain your refund through them. However, if your purchase was made through Paddle, Google Play, or Cleverbridge, we can facilitate a refund for you in accordance with our policies. Please check with the individual reseller's terms for more information.
Payments made using prepaid cards or gift cards are not refunded. For payments made in cryptocurrency, the equivalent amount in US Dollars is refunded in the same cryptocurrency (based on the rate of exchange at the moment of refund).
You have a right to delete your account at any time, however, deleted accounts will not be refunded for the unused part of the ongoing service period.
Surfshark reserves the right to verify the validity of your account information, and to withhold or delay any refunds until such verification is complete. In the exceptional cases, we may consider refund beyond such 30-days period, at our sole discretion, if you can demonstrate that the Services which you purchased were not available or usable and that you made reasonable attempts to contact us regarding this issue. In such a case, we may provide you with a pro-rata refund of Services’ fees paid during the subscription period when the Services were not available or usable.
We are not able to grant you a refund if you obtained your Surfshark subscription via resellers other than Paddle, Google Play, or Cleverbridge. In the scenarios when your subscription was purchased through a reseller other than Paddle, Google Play, or Cleverbridge, it is necessary for you to consult with the original seller to understand their specific refund procedures and potentially obtain your refund through them. However, if your purchase was made through Paddle, Google Play, or Cleverbridge, we can facilitate a refund for you in accordance with our policies. Please check with the individual reseller's terms for more information.
Payments made using prepaid cards or gift cards are not refunded. For payments made in cryptocurrency, the equivalent amount in US Dollars is refunded in the same cryptocurrency (based on the rate of exchange at the moment of refund).
You have a right to delete your account at any time, however, deleted accounts will not be refunded for the unused part of the ongoing service period.
The refunds are also not applicable if you have been granted a free trial to use our Services for 30 days or longer. Users who have benefited from such extended trial periods are deemed to have had sufficient opportunity to evaluate the Services, and therefore, are excluded from exercising the right to refund.
If you decide to use an anonymous Dedicated IP option which can be selected after the installation of your Dedicated IP, this will cause a removal of all the information we have in our database about your Dedicated IP address. Taking that into account, we will no longer be able to grant you a refund, as we will not have any possibility to establish any links between you and a particular Dedicated IP.
If you decide to use an anonymous Dedicated IP option which can be selected after the installation of your Dedicated IP, this will cause a removal of all the information we have in our database about your Dedicated IP address. Taking that into account, we will no longer be able to grant you a refund, as we will not have any possibility to establish any links between you and a particular Dedicated IP.
We reserve the right not to issue refund in the event of a breach of these Terms.
Any fees charged by Surfshark are exclusive of taxes. Nevertheless, we may calculate and add taxes or duties, including, but not limited to VAT, GST and other taxes or fees under laws applicable to you at the time of purchase.
All payments are being processed by our own payment processing companies (Surfshark Limited, registered at Suite 1, 3rd Floor 11-12 St. James’s Square, London, United Kingdom, SW1Y 4LB and Surfshark Inc., registered at 16192 Coastal Highway, Lewes, Delaware 19958, County of Sussex) with help of third-party providers (see our Privacy Policy).
Any fees charged by Surfshark are exclusive of taxes. Nevertheless, we may calculate and add taxes or duties, including, but not limited to VAT, GST and other taxes or fees under laws applicable to you at the time of purchase.
All payments are being processed by our own payment processing companies (Surfshark Limited, registered at Suite 1, 3rd Floor 11-12 St. James’s Square, London, United Kingdom, SW1Y 4LB and Surfshark Inc., registered at 16192 Coastal Highway, Lewes, Delaware 19958, County of Sussex) with help of third-party providers (see our Privacy Policy).
5. What age do I have to be to use this Website or your Services?
18 or older.
Surfshark is not intended for users under the age of 18. Such users are expressly prohibited from submitting any of their information to us, and from using portions of the Website and our Services for which registration is required. If any information is submitted by such users, it will not be collected or retained.
Surfshark is not intended for users under the age of 18. Such users are expressly prohibited from submitting any of their information to us, and from using portions of the Website and our Services for which registration is required. If any information is submitted by such users, it will not be collected or retained.
6. How do I comply with intellectual property laws?
All the stuff that’s on our site (or our apps) belongs to Surfshark. Let’s keep it that way.
To access and use our Services, you may be required to download and install our Software on a device. Below see the terms and conditions applicable to the use of such Software. Pursuant to these Terms, “Software” means any mobile and desktop software applications and any other software (including any releases, updates, enhancements, or revisions) and any documentation that accompanies or is made available in connection with such software provided by us to you for your use of the Services. When accessing the Website or using our Services, you agree to obey the law and to respect the intellectual property rights of others. Your use of the Website or our Services is at all times governed by and subject to laws regarding copyright ownership and use of intellectual property.
Subject to these Terms we grant you a limited, revocable, non-exclusive, personal, non-transferable, non-sublicensable, non-assignable, fixed-term license (the “License”) to download, install and use a copy of the Software on a compatible device that you own or control. No other right or license, express or implied, of any kind is granted to you hereunder with respect to the Services and/or Software. You shall not also build a product using similar ideas, features, functions, or graphics of the Service/Websites or copy any ideas, features, functions, or graphics of the Services/Websites.
For the sake of clarity, in respect to the Software that is downloaded from Apple, Inc. (“Apple”) App Store, the License is limited to the use of such Software on any Apple-branded devices that you own or control and as permitted by the Usage Rules set forth in the Apple Media Services Terms and Conditions, except that such Software may be accessed and used by other accounts associated with you via family sharing or volume purchasing features.
The Software, used pursuant to these Terms is licensed, not sold, and you receive no title to or ownership of any copy, or of the Software itself, or even more so of the Services and Websites. You receive no rights to the Software other than those specifically granted in Section 6 of these Terms. We and/or our licensors retain all right, title and interest in and to the Services, Software, Websites, and any portion thereof. All rights are reserved unless otherwise explicitly expressed. You are forbidden from registration, adoption, or any other use of trademarks, trade names, symbols, or signs that are either identical or confusingly similar to any trademarks owned by Surfshark and/or its affiliated companies.
You hereby grant Surfshark and/or its affiliated companies a perpetual, irrevocable, worldwide license to use Feedback (as defined below) you communicate to us without reimbursement or compensation, without any obligation to report on such use, and without any other restriction. You waive (or agree not to enforce) any and all rights that may now or in future exist (including moral and equivalent rights) in Feedback. (“Feedback” refers to any recommendation, idea, proposal, suggestion, feedback, review, or other input related to our Services, Software, Websites).
To access and use our Services, you may be required to download and install our Software on a device. Below see the terms and conditions applicable to the use of such Software. Pursuant to these Terms, “Software” means any mobile and desktop software applications and any other software (including any releases, updates, enhancements, or revisions) and any documentation that accompanies or is made available in connection with such software provided by us to you for your use of the Services. When accessing the Website or using our Services, you agree to obey the law and to respect the intellectual property rights of others. Your use of the Website or our Services is at all times governed by and subject to laws regarding copyright ownership and use of intellectual property.
Subject to these Terms we grant you a limited, revocable, non-exclusive, personal, non-transferable, non-sublicensable, non-assignable, fixed-term license (the “License”) to download, install and use a copy of the Software on a compatible device that you own or control. No other right or license, express or implied, of any kind is granted to you hereunder with respect to the Services and/or Software. You shall not also build a product using similar ideas, features, functions, or graphics of the Service/Websites or copy any ideas, features, functions, or graphics of the Services/Websites.
For the sake of clarity, in respect to the Software that is downloaded from Apple, Inc. (“Apple”) App Store, the License is limited to the use of such Software on any Apple-branded devices that you own or control and as permitted by the Usage Rules set forth in the Apple Media Services Terms and Conditions, except that such Software may be accessed and used by other accounts associated with you via family sharing or volume purchasing features.
The Software, used pursuant to these Terms is licensed, not sold, and you receive no title to or ownership of any copy, or of the Software itself, or even more so of the Services and Websites. You receive no rights to the Software other than those specifically granted in Section 6 of these Terms. We and/or our licensors retain all right, title and interest in and to the Services, Software, Websites, and any portion thereof. All rights are reserved unless otherwise explicitly expressed. You are forbidden from registration, adoption, or any other use of trademarks, trade names, symbols, or signs that are either identical or confusingly similar to any trademarks owned by Surfshark and/or its affiliated companies.
You hereby grant Surfshark and/or its affiliated companies a perpetual, irrevocable, worldwide license to use Feedback (as defined below) you communicate to us without reimbursement or compensation, without any obligation to report on such use, and without any other restriction. You waive (or agree not to enforce) any and all rights that may now or in future exist (including moral and equivalent rights) in Feedback. (“Feedback” refers to any recommendation, idea, proposal, suggestion, feedback, review, or other input related to our Services, Software, Websites).
7. What activities are prohibited and how to notify about the possible infringement of these terms?
Don’t do anything that can get you in trouble when you use Surfshark. Please. Also, if you do come across any concerning content, please don’t hesitate to let us know. Your alertness contributes to a safer environment for everyone involved.
By using our Services, you shall not:
Use our Services for any illegal use, such as transmitting any illegal material that would constitute a criminal offense as per the local, state, national or international law or regulation;
Use our Services for web crawling, scraping, harvesting or other similar activities which might negatively affect rendering of our Services to other users;
Transmit any content that is unlawful, harmful, threatening, abusive, harassing, torturous, or that can be deemed objectionable in a court of law;
Harass, abuse, insult, harm, defame, slander, disparage, intimidate, or discriminate based on gender, sexual orientation, religion, ethnicity, race, age, national origin, or disability; to submit false or misleading information;
Present the Service so that it appears to be made available by any third party, access the Service in bulk, scrape, redistribute, resell or make the Services available to any third party in any way;
Transfer or use the Services except as expressly authorized under these Terms of Service or by Surfshark, copy, disassemble, reverse engineer or decompile, modify or alter any part of the Services. You may not use any part of the Service in any manner that competes with Surfshark, as solely determined by Surfshark;
Send spam or otherwise duplicative or unsolicited messages in violation of applicable laws;
Send or store material containing software viruses, worms, Trojan horses or other harmful computer code, files, scripts, agents or programs;
Use our Services for any illegal use, such as transmitting any illegal material that would constitute a criminal offense as per the local, state, national or international law or regulation;
Use our Services for web crawling, scraping, harvesting or other similar activities which might negatively affect rendering of our Services to other users;
Transmit any content that is unlawful, harmful, threatening, abusive, harassing, torturous, or that can be deemed objectionable in a court of law;
Harass, abuse, insult, harm, defame, slander, disparage, intimidate, or discriminate based on gender, sexual orientation, religion, ethnicity, race, age, national origin, or disability; to submit false or misleading information;
Present the Service so that it appears to be made available by any third party, access the Service in bulk, scrape, redistribute, resell or make the Services available to any third party in any way;
Transfer or use the Services except as expressly authorized under these Terms of Service or by Surfshark, copy, disassemble, reverse engineer or decompile, modify or alter any part of the Services. You may not use any part of the Service in any manner that competes with Surfshark, as solely determined by Surfshark;
Send spam or otherwise duplicative or unsolicited messages in violation of applicable laws;
Send or store material containing software viruses, worms, Trojan horses or other harmful computer code, files, scripts, agents or programs;
Interfere with or disrupt the integrity or performance of the Service;
Attempt to gain unauthorized access to the Service or its related systems or networks;
Attempt to gain unauthorized access to the Service or its related systems or networks;
Misrepresent or to act on behalf of others;
Alter the attribution of origin in electronic mail messages or posting;
Use the Service for anything other than lawful purposes;
Use Surfshark to mask your identity for illegal or malicious purposes;
Distribute copyright-protected material through our servers;
Take any action that results in an unreasonable load on Surfshark’s infrastructure;
Use any 3rd party software to interfere with or attempt to interfere with the Services;
Download or transmit any material that is libelous, defamatory, discriminatory or otherwise malicious or harmful to any person or entity; or use our Services to serve pop-ups ads.
Take any action that results in an unreasonable load on Surfshark’s infrastructure;
Use any 3rd party software to interfere with or attempt to interfere with the Services;
Download or transmit any material that is libelous, defamatory, discriminatory or otherwise malicious or harmful to any person or entity; or use our Services to serve pop-ups ads.
Exploit or attempt to exploit our refund policy;
Otherwise infringe or circumvent these Terms;
You shall at all times abide by all applicable local, state, national and foreign laws, treaties and regulations in connection with your use of the Services, including those related to data privacy, international communications and the transmission of technical or personal data.
Utilize Alternative ID service for any non-personal or commercial use. This includes, without limitation, using Alternative ID for business purposes, engaging it in any form of commercial activities, and/or deploying it within a corporate, educational, governmental, or other organizational environment. All access to and use of the Alternative ID service must be strictly for personal and private use only.
Surfshark is committed to ensuring our Services remain as secure and user-friendly as possible. Therefore, it is strictly prohibited to use Surfshark Services to violate applicable law, including infringe copyright or other rights of third parties.This means that you shall not upload, store, share, access, and/or otherwise exploit on or through Surfshark Services content that is either itself illegal or is rendered to be illegal in a view that it relates to illegal activities (“Illegal Content”). However, please be aware that without specific notifications from our users, we may not become aware of potential violations of these Terms, as we do not monitor user-generated content transmitted and/or received via our platform. We rely on you to help us maintain a safe environment for all users.
We encourage our Alternative ID users to report and notify us about any content or behavior that fails to comply with these Terms. Surfshark retains the ability to notify law enforcement authorities about particular concerns and encourages you to report any material that you suspect could lead to unlawful actions.
If you come across any concerning material, please inform us by submitting a notice (“Notice”) to us via [email protected] (for EU related notices) or to our customer support team (for all other notices) via email address [email protected] or registered mail via address below:
You shall at all times abide by all applicable local, state, national and foreign laws, treaties and regulations in connection with your use of the Services, including those related to data privacy, international communications and the transmission of technical or personal data.
Utilize Alternative ID service for any non-personal or commercial use. This includes, without limitation, using Alternative ID for business purposes, engaging it in any form of commercial activities, and/or deploying it within a corporate, educational, governmental, or other organizational environment. All access to and use of the Alternative ID service must be strictly for personal and private use only.
Surfshark is committed to ensuring our Services remain as secure and user-friendly as possible. Therefore, it is strictly prohibited to use Surfshark Services to violate applicable law, including infringe copyright or other rights of third parties.This means that you shall not upload, store, share, access, and/or otherwise exploit on or through Surfshark Services content that is either itself illegal or is rendered to be illegal in a view that it relates to illegal activities (“Illegal Content”). However, please be aware that without specific notifications from our users, we may not become aware of potential violations of these Terms, as we do not monitor user-generated content transmitted and/or received via our platform. We rely on you to help us maintain a safe environment for all users.
We encourage our Alternative ID users to report and notify us about any content or behavior that fails to comply with these Terms. Surfshark retains the ability to notify law enforcement authorities about particular concerns and encourages you to report any material that you suspect could lead to unlawful actions.
If you come across any concerning material, please inform us by submitting a notice (“Notice”) to us via [email protected] (for EU related notices) or to our customer support team (for all other notices) via email address [email protected] or registered mail via address below:
Surfshark B.V.
Kabelweg 57, 1014BA
Amsterdam, the Netherlands
Please note that to be valid the Notice shall contain the following information:
a sufficiently substantiated explanation of the reasons why you allege the Illegal Content to be violating applicable law;
identification of the copyright-protected work allegedly infringed (or, for multiple works, a representative list), if the Illegal Content allegedly infringes copyright;
a clear indication of the exact electronic location of that information, such as the exact URL or URLs, and, where necessary, additional information (like, for example, screenshots) enabling the identification of the illegal content;
your contact information (at least, full name, physical address, and email address) and your authorized representative, if applicable;
your (or your authorized representative) statement that you have a good-faith belief that the use of the allegedly Illegal Content in the manner complained of is not authorized by you, your authorized representative, or the law;
your statement that the information and allegations contained in the Notice are accurate and, under penalty of perjury, that the you (or your authorized representative) are authorized to act;
a sufficiently substantiated explanation of the reasons why you allege the Illegal Content to be violating applicable law;
identification of the copyright-protected work allegedly infringed (or, for multiple works, a representative list), if the Illegal Content allegedly infringes copyright;
a clear indication of the exact electronic location of that information, such as the exact URL or URLs, and, where necessary, additional information (like, for example, screenshots) enabling the identification of the illegal content;
your contact information (at least, full name, physical address, and email address) and your authorized representative, if applicable;
your (or your authorized representative) statement that you have a good-faith belief that the use of the allegedly Illegal Content in the manner complained of is not authorized by you, your authorized representative, or the law;
your statement that the information and allegations contained in the Notice are accurate and, under penalty of perjury, that the you (or your authorized representative) are authorized to act;
your (or your authorized representative) physical or electronic signature.
Our specialists will evaluate these submissions to determine if there is a breach of our terms and decide if any action is required regarding the content and/or actions flagged.
If Surfshark is contacted with a complaint regarding or arising from your use of the Services or independently detects a breach of these Terms, Surfshark may deem your usage in violation of these Terms and terminate your account or limit and/or suspend the provision of the Services without notice.
Our Services (products) may be subject to the U.S. and European Union export and re-export control laws and regulations or similar laws applicable in other jurisdictions, including the Export Administration Regulations (“EAR“) maintained by the U.S. Department of Commerce. You also warrant that you are (a) not located in any country to which the European Union, the United Kingdom, the U.S. or other relevant jurisdiction has embargoed goods or has otherwise applied any economic sanctions, which would forbid or limit the use, import, export, sale of, or payment for the Services; and (b) not a denied party as specified in any applicable export or re-export laws or regulations or similar laws applicable in relevant jurisdictions or otherwise listed on any list of prohibited or restricted parties as administered by the Office of Foreign Control of the U.S. Department of the Treasury (“OFAC“), the U.S. Department of State, the United Nations Security Council, the European Union, His Majesty's Treasury of the United Kingdom, or other relevant sanctions authority (“Sanctions Authorities”). You agree to comply with all applicable export and re-export control laws and regulations, including without limitation the EAR and trade and economic sanctions maintained by OFAC as it may be applicable to you. Specifically, you agree not to - directly or indirectly - use, sell, export, re-export, transfer, divert, release, or otherwise dispose of any Services, including products, software, or technology (notwithstanding products derived from or based on such technology) received under these Terms of Service to any destination, entity, or person or for any end-use prohibited by the applicable export control laws, trade and economic sanctions maintained by Sanctions Authorities or any applicable laws or regulations without obtaining any required prior authorization from the competent government authorities as required by those laws and regulations.
Our specialists will evaluate these submissions to determine if there is a breach of our terms and decide if any action is required regarding the content and/or actions flagged.
If Surfshark is contacted with a complaint regarding or arising from your use of the Services or independently detects a breach of these Terms, Surfshark may deem your usage in violation of these Terms and terminate your account or limit and/or suspend the provision of the Services without notice.
Our Services (products) may be subject to the U.S. and European Union export and re-export control laws and regulations or similar laws applicable in other jurisdictions, including the Export Administration Regulations (“EAR“) maintained by the U.S. Department of Commerce. You also warrant that you are (a) not located in any country to which the European Union, the United Kingdom, the U.S. or other relevant jurisdiction has embargoed goods or has otherwise applied any economic sanctions, which would forbid or limit the use, import, export, sale of, or payment for the Services; and (b) not a denied party as specified in any applicable export or re-export laws or regulations or similar laws applicable in relevant jurisdictions or otherwise listed on any list of prohibited or restricted parties as administered by the Office of Foreign Control of the U.S. Department of the Treasury (“OFAC“), the U.S. Department of State, the United Nations Security Council, the European Union, His Majesty's Treasury of the United Kingdom, or other relevant sanctions authority (“Sanctions Authorities”). You agree to comply with all applicable export and re-export control laws and regulations, including without limitation the EAR and trade and economic sanctions maintained by OFAC as it may be applicable to you. Specifically, you agree not to - directly or indirectly - use, sell, export, re-export, transfer, divert, release, or otherwise dispose of any Services, including products, software, or technology (notwithstanding products derived from or based on such technology) received under these Terms of Service to any destination, entity, or person or for any end-use prohibited by the applicable export control laws, trade and economic sanctions maintained by Sanctions Authorities or any applicable laws or regulations without obtaining any required prior authorization from the competent government authorities as required by those laws and regulations.
8. What is Surfshark’s Fair Usage Policy?
Feel free to connect all of your devices, but don’t resell Surfshark or exploit our service. Not cool.
Surfshark is committed to provide the best possible experience of using the Services to all our users. This includes making sure that every user of our Services gets the full experience from their chosen plan. To deliver on this commitment, we have implemented an automated infrastructure maintenance system which continuously manages our network capacity.
Although one of the core premises of Surfshark is an unlimited number of simultaneous connections (except for Antivirus service), there might be some users who exploit it, and this might have an adverse effect on the quality of our Services as well as usage experience for the rest of our users. Such users can include, but are not limited to, unauthorized resellers, organizers of illicit activities which involve usage of a very large number of devices, and other.
Our Fair Usage Policy manages inappropriate use of our Services and guarantees that the Services can be used fairly by everyone. Under the Fair Usage Policy, we reserve the right to enable limits of an immoderate number of simultaneously connected devices in our network maintenance system in order to make sure that none of our users are affected by potentially deteriorated quality of the Services.
Surfshark Antivirus service allows a maximum of five simultaneous connections per account.
Surfshark is committed to provide the best possible experience of using the Services to all our users. This includes making sure that every user of our Services gets the full experience from their chosen plan. To deliver on this commitment, we have implemented an automated infrastructure maintenance system which continuously manages our network capacity.
Although one of the core premises of Surfshark is an unlimited number of simultaneous connections (except for Antivirus service), there might be some users who exploit it, and this might have an adverse effect on the quality of our Services as well as usage experience for the rest of our users. Such users can include, but are not limited to, unauthorized resellers, organizers of illicit activities which involve usage of a very large number of devices, and other.
Our Fair Usage Policy manages inappropriate use of our Services and guarantees that the Services can be used fairly by everyone. Under the Fair Usage Policy, we reserve the right to enable limits of an immoderate number of simultaneously connected devices in our network maintenance system in order to make sure that none of our users are affected by potentially deteriorated quality of the Services.
Surfshark Antivirus service allows a maximum of five simultaneous connections per account.
Surfshark Alternative ID service also stipulates specific usage limitations. To ensure only personal, safe and fair use, we reserve the right to limit the quantity of emails/messages sent via Alternative ID service, as well as the total number of generated outputs, email addresses, and phone numbers created by an individual user. Additionally, the service incorporates a solution that allows you to obtain an alternative telephone number ("Alternative Number"), thereby enabling you to privately receive calls and messages via our specialized software. This feature is tailored strictly to meet privacy and safety needs and is not intended for use in general social interactions. Considering these factors, Surfshark explicitly reserves the right to impose specific restrictions on the communication features provided, with the intention of reducing the risk of misuse of the Alternative Number feature and to ensure adherence to the prescribed uses as outlined by the service. Please also note that the ability to receive calls and/or messages including, but not limited to verification codes (one-time passcodes) with your Alternative Number can be affected by the policies of the service provider calling and/or sending the message. Some third parties maintain policies that may restrict or prevent the delivery of verification codes to virtual numbers. Consequently, we cannot ensure the successful receipt of these codes, as their delivery is dependent on the settings of the external service.
9. Does Surfshark link to any third party sites?
Yes. So, click all the links leading out of Surfshark responsibly.
Surfshark may link to or be linked from other websites that are not maintained by, or related to, Surfshark. Surfshark does not endorse, and is not responsible for, the content of any of those third-party websites. You acknowledge that Surfshark has not reviewed and does not endorse the content of all sites linked to from this Website and is not responsible for the content or actions of any other sites linked to from this Website. We do not promise that the contents of any linked sites are accurate, compliant with local, state or federal law, including any intellectual property laws. Your use of any linked site is at your own responsibility and you assume all responsibilities and consequences resulting from such reliance.
Surfshark may link to or be linked from other websites that are not maintained by, or related to, Surfshark. Surfshark does not endorse, and is not responsible for, the content of any of those third-party websites. You acknowledge that Surfshark has not reviewed and does not endorse the content of all sites linked to from this Website and is not responsible for the content or actions of any other sites linked to from this Website. We do not promise that the contents of any linked sites are accurate, compliant with local, state or federal law, including any intellectual property laws. Your use of any linked site is at your own responsibility and you assume all responsibilities and consequences resulting from such reliance.
10. Disclaimers and Limitations on Liability.
We try to make sure everything’s always error-free, but to err is human. You agree not to hold any grudges about that.
SURFSHARK PROVIDES ITS WEBSITE AND SERVICES TO YOU ON AN “AS IS” AND “AS AVAILABLE” BASIS. Surfshark cannot guarantee that the Services or its content is error free and makes no representations about the technical accuracy or functionality of the Services or that the content is accurate, error free or up to date. Actual service coverage, speeds, locations and quality may vary. Your hereby expressly agree and acknowledge that Antivirus complies with the current industry standard of software technology and that it is impossible under any currently available technology for any application to identify and eliminate one hundred percent of all malware. Surfshark makes no representations – your use of the Services is your sole responsibility. Our Services may be updated, modified, suspended or interrupted at any time without any notice or liability.
SURFSHARK PROVIDES ITS WEBSITE AND SERVICES TO YOU ON AN “AS IS” AND “AS AVAILABLE” BASIS. Surfshark cannot guarantee that the Services or its content is error free and makes no representations about the technical accuracy or functionality of the Services or that the content is accurate, error free or up to date. Actual service coverage, speeds, locations and quality may vary. Your hereby expressly agree and acknowledge that Antivirus complies with the current industry standard of software technology and that it is impossible under any currently available technology for any application to identify and eliminate one hundred percent of all malware. Surfshark makes no representations – your use of the Services is your sole responsibility. Our Services may be updated, modified, suspended or interrupted at any time without any notice or liability.
Accounts operating under a free trial period are subject to functional restrictions. During the trial, you will be unable to modify certain account settings, including but not limited to, changing the email address associated with your account or altering your Two-Factor Authentication (2FA) settings. To remove these restrictions and access full account management features, you must purchase a subscription. Alternatively, you may start a new free trial, subject to eligibility.
We may, from time to time, include computer software supplied by third parties together with our Services. Such third parties’ computer software is provided with permission of the relevant copyright holders and/or licensors, and on their provided terms.
SURFSHARK AND ITS AFFILIATES, SHALL NOT BE LIABLE TO YOU OR ANY THIRD PARTIES FOR ANY DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES ALLEGEDLY SUSTAINED ARISING OUT OF YOUR USE OF THE SERVICES, ANY THIRD PARTY COMPUTER SOFTWARE PROVIDED TOGETHER WITH THE SERVICES, THE SALE OR PURCHASE OF ANY GOODS OR MERCHANDISE, YOUR ACCESS TO OR INABILITY TO ACCESS THE WEBSITE OR OUR SERVICES, INCLUDING FOR VIRUSES ALLEGED TO HAVE BEEN OBTAINED FROM THE SERVICES, YOUR USE OF OR RELIANCE ON THE WEBSITE OR OUR SERVICES, INFORMATION OR MATERIALS AVAILABLE ON THE WEBSITE, REGARDLESS OF THE TYPE OF CLAIM OR THE NATURE OF THE CAUSE OF ACTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.OUR TOTAL AGGREGATE LIABILITY IN ANY CASE SHALL NOT EXCEED YOUR TOTAL AMOUNT PAID FOR THE SERVICES.
ANTIVIRUS IS NOT INTENDED FOR USERS REQUIRING CONTINUOUS, ERROR-FREE OR FAILSAFE OPERATION (INCLUDING, WITHOUT LIMITATION, IN APPLICATIONS INVOLVING NUCLEAR POWER PLANTS, MILITARY APPLICATIONS, AIRCRAFT NAVIGATIONAL AND COMMUNICATIONS SYSTEMS, OR IN MEDICAL OR OTHER APPLICATIONS ESSENTIAL TO MAINTAINING HUMAN LIVES). SURFSHARK HEREBY DISCLAIMS THAT ANTIVIRUS IS FIT FOR USE IN SPECIAL-RISK AREAS.
You hereby agree to release service provider, its affiliates and third-party service providers, and each of their respective directors, officers, employees, and agents from claims, demands and damages (actual and consequential) of every kind and nature, known and unknown, suspected and unsuspected, disclosed and undisclosed (“claims”), arising out of or in any way connected with your use of this Website or our Services.
We provide application updates for all OS versions for at least two (2) years after the initial OS version release. Therefore, we would suggest updating your OS to get the best experience when using our Services.
If you use the Alternative ID service, you recognize that there might be instances when due to external factors the delivery of emails to your alternative email address and receipt of the calls and messages to your alternative phone number may be interrupted. These impediments can arise from a host of issues, including but not limited to network disruptions, service outages, and spam filtering processes. In light of these potential challenges, Surfshark does not assert or guarantee the prompt and exact delivery or reception of communications. As such, Surfshark shall not be held accountable for any communication that is either missed, delayed, or undelivered. Furthermore, you concur that Surfshark will not be responsible for any sort of damage or loss that may result from such instances. It is important to affirm that your access to and use of the Alternative ID Service is permitted solely for your own personal and non-commercial purposes.
In addition, if you are using Surfshark Alternative ID service, please note that despite Alternative ID generated output is designated to be made-up and not reflective of real people or places, occasionally, some parts (like addresses) could unintentionally match real-world equivalents. Taking this into account, despite that there might be a slight probability that some parts of an output may inadvertently mirror real-world specifics, please always be aware that any resemblance generated by our service to actual persons, living or deceased, or to real-life addresses, is unintentional, purely coincidental and designated ONLY for personal use in safeguarding privacy and/or for entertainment purposes. SURFSHARK EXPLICITLY DISCLAIMS ANY RESPONSIBILITY FOR ACCIDENTAL SIMILARITIES TO ACTUAL INDIVIDUALS OR ADDRESSES. IF YOU BELIEVE THAT THE OUTPUT GENERATED BY ALTERNATIVE ID MIGHT INFRINGE UPON THE RIGHTS OF ANY THIRD PARTY, WE ADVISE AGAINST THE USE OF THIS OUTPUT.
We may, from time to time, include computer software supplied by third parties together with our Services. Such third parties’ computer software is provided with permission of the relevant copyright holders and/or licensors, and on their provided terms.
SURFSHARK AND ITS AFFILIATES, SHALL NOT BE LIABLE TO YOU OR ANY THIRD PARTIES FOR ANY DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES ALLEGEDLY SUSTAINED ARISING OUT OF YOUR USE OF THE SERVICES, ANY THIRD PARTY COMPUTER SOFTWARE PROVIDED TOGETHER WITH THE SERVICES, THE SALE OR PURCHASE OF ANY GOODS OR MERCHANDISE, YOUR ACCESS TO OR INABILITY TO ACCESS THE WEBSITE OR OUR SERVICES, INCLUDING FOR VIRUSES ALLEGED TO HAVE BEEN OBTAINED FROM THE SERVICES, YOUR USE OF OR RELIANCE ON THE WEBSITE OR OUR SERVICES, INFORMATION OR MATERIALS AVAILABLE ON THE WEBSITE, REGARDLESS OF THE TYPE OF CLAIM OR THE NATURE OF THE CAUSE OF ACTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.OUR TOTAL AGGREGATE LIABILITY IN ANY CASE SHALL NOT EXCEED YOUR TOTAL AMOUNT PAID FOR THE SERVICES.
ANTIVIRUS IS NOT INTENDED FOR USERS REQUIRING CONTINUOUS, ERROR-FREE OR FAILSAFE OPERATION (INCLUDING, WITHOUT LIMITATION, IN APPLICATIONS INVOLVING NUCLEAR POWER PLANTS, MILITARY APPLICATIONS, AIRCRAFT NAVIGATIONAL AND COMMUNICATIONS SYSTEMS, OR IN MEDICAL OR OTHER APPLICATIONS ESSENTIAL TO MAINTAINING HUMAN LIVES). SURFSHARK HEREBY DISCLAIMS THAT ANTIVIRUS IS FIT FOR USE IN SPECIAL-RISK AREAS.
You hereby agree to release service provider, its affiliates and third-party service providers, and each of their respective directors, officers, employees, and agents from claims, demands and damages (actual and consequential) of every kind and nature, known and unknown, suspected and unsuspected, disclosed and undisclosed (“claims”), arising out of or in any way connected with your use of this Website or our Services.
We provide application updates for all OS versions for at least two (2) years after the initial OS version release. Therefore, we would suggest updating your OS to get the best experience when using our Services.
If you use the Alternative ID service, you recognize that there might be instances when due to external factors the delivery of emails to your alternative email address and receipt of the calls and messages to your alternative phone number may be interrupted. These impediments can arise from a host of issues, including but not limited to network disruptions, service outages, and spam filtering processes. In light of these potential challenges, Surfshark does not assert or guarantee the prompt and exact delivery or reception of communications. As such, Surfshark shall not be held accountable for any communication that is either missed, delayed, or undelivered. Furthermore, you concur that Surfshark will not be responsible for any sort of damage or loss that may result from such instances. It is important to affirm that your access to and use of the Alternative ID Service is permitted solely for your own personal and non-commercial purposes.
In addition, if you are using Surfshark Alternative ID service, please note that despite Alternative ID generated output is designated to be made-up and not reflective of real people or places, occasionally, some parts (like addresses) could unintentionally match real-world equivalents. Taking this into account, despite that there might be a slight probability that some parts of an output may inadvertently mirror real-world specifics, please always be aware that any resemblance generated by our service to actual persons, living or deceased, or to real-life addresses, is unintentional, purely coincidental and designated ONLY for personal use in safeguarding privacy and/or for entertainment purposes. SURFSHARK EXPLICITLY DISCLAIMS ANY RESPONSIBILITY FOR ACCIDENTAL SIMILARITIES TO ACTUAL INDIVIDUALS OR ADDRESSES. IF YOU BELIEVE THAT THE OUTPUT GENERATED BY ALTERNATIVE ID MIGHT INFRINGE UPON THE RIGHTS OF ANY THIRD PARTY, WE ADVISE AGAINST THE USE OF THIS OUTPUT.
Our Services may include a feature known as the "Web Content Blocker" provided as a personal customization tool which You may choose to enable or disable at any time at Your sole discretion. The decision to activate and utilize this feature is Your sole responsibility. This feature is designed to filter website access against periodically updated, third-party and proprietary lists of domains associated with certain content categories and is provided strictly on an “AS IS” and “AS AVAILABLE” basis, without any warranties or guarantees of any kind, express or implied. As a personal customization tool, this feature operates only upon Your express command. You expressly agree and acknowledge that Surfshark does not guarantee the accuracy, completeness, or efficacy of the Web Content Blocker. Due to the dynamic and constantly evolving nature of the internet, the feature may fail to block certain websites or content that fall within a category selected for blocking and may also unintentionally block websites or content that do not fall within a category selected for blocking. To the fullest extent permitted by applicable law, Surfshark, its affiliates, and its licensors shall not be held liable for any claims, damages, losses, or costs, whether direct, indirect, special, or consequential, arising out of or in connection with Your use of or reliance on the Web Content Blocker. This includes, without limitation, any damages resulting from the failure to block content or the unintentional blocking of content. Your use of the Web Content Blocker is entirely at Your own risk.
11. Indemnity.
If something goes wrong (it won’t), you agree not to hold Surfshark liable.
You agree to indemnify, defend, and hold harmless Surfshark, its affiliates, officers, directors, employees, consultants, agents, and representatives from any and all third party claims, losses, liability, damages, and/or costs (including reasonable attorney fees and costs) arising from your access to or use of the Website or our Services, your violation of these Terms of Service, or your infringement, or infringement by any other user of your account, of any intellectual property or other right of any person or entity.
You agree to indemnify, defend, and hold harmless Surfshark, its affiliates, officers, directors, employees, consultants, agents, and representatives from any and all third party claims, losses, liability, damages, and/or costs (including reasonable attorney fees and costs) arising from your access to or use of the Website or our Services, your violation of these Terms of Service, or your infringement, or infringement by any other user of your account, of any intellectual property or other right of any person or entity.
12. What governing law applies?
Our contract with you is governed by the laws of the British Virgin Islands. The same as it was before we moved to the Netherlands.
Your contract is concluded with Surfshark B.V., a company established in the Netherlands.
These Terms of Service (contract between You and Surfshark) shall be construed in accordance with and governed by the laws of the British Virgin Islands, without reference to their rules regarding conflicts of law. This means that contracts with all our customers are governed by the same laws, i.e. laws of the British Virgin Islands.
However, please note that these Terms of Service will not limit any consumer protection rights that you may be entitled to under the mandatory laws of your country of residence. You hereby agree that the judicial proceeding to resolve claims relating to the Terms of Service will be brought in the courts of British Virgin Islands, unless the laws of your country of residence have mandatory provisions that apply to the dispute that cannot be overridden by the contractual choice of law.
13. Bundled subscriptions and third party services
Together with our own Services we also offer some services provided by third parties.
You may purchase a subscription of Services bundled with the subscription of other Surfshark Services and/or subscription of Third Party Services (“Bundled Subscriptions”).
We may offer third party products and/or services independently (as a standalone service) or along with our Services for a fee or free of charge (as a Bundled Subscription) through Surfshark (“Third Party Services”). In all cases you will be billed for such services directly by us using your provided payment method. Please note that Third Party Services are governed not only by these Terms but also by terms of those Third Party Services. By acquiring Third Party Services through Surfshark you also accept the terms of those Third Party Services. That is why you should review the terms of Third Party Services carefully before purchasing them through Surfshark. You may need to make additional steps to start using Third Party Services (e.g., to create a separate account) after purchasing them through Surfshark. If there are any inconsistencies between these Terms and the terms of Third Party Services, these Terms (subscription purchase, auto-renewals, prices/payments, and cancellation/refunds) will govern and apply.
You can cancel your Bundled Subscription and/or Third Party Services (i.e., turn off auto-renewals) at any time. By canceling your Bundled Subscription, you will lose access to all Bundled Services. Please note that you cannot cancel only one or some of the Services leaving the others active for the upcoming period.
Some important information for our users whose purchased Services include Identity theft coverage.
IDENTITY THEFT COVERAGE: Certain Services include Identity theft coverage for active users. The insurance benefit limits and coverage may be different depending on the Service or location of the user. These identity theft coverage benefits are provided under group policies issued by HSB Specialty Insurance Company to Cyber Protection Insurance Services, Inc. (the “Group Policy”) and provided under a license for the benefit of Surfshark users. The insurance provider administers all claims, and We shall have no responsibility with respect to such identity theft benefit. To the extent that your Service includes insurance benefits, you agree to receive notices of insurance and insurance changes electronically, using the active email associated with your account. All electronic communications delivered to you will be considered “in writing.” To view the Service offerings and their corresponding summary of benefits, click here (summary of benefits for the residents of the State of Washington may be found here).
Identity theft coverage is currently available to all customers residing in the United States, including U.S. territories and the District of Columbia, with the exception of New York State residents. Your membership in the insured program is evidenced by the summary of benefits or other similar document that may be provided to you upon request. You acknowledge receipt of this information, consent to electronic document delivery, and agree to be bound by the terms, conditions, limitations, and exclusions of the Group Policy applicable to you.
14. Whom should I contact with questions or concerns?
We’re always happy to chat with you via a live chat on our website or email!
If you have any questions or comments relating to Surfshark Services or this Terms of Service send an email to [email protected] or contact us via a live chat.
Surfshark has appointed an exclusive point of contact for both users of our Services and the authorities for the purposes of the Digital Services Act (“DSA”). For inquiries regarding DSA, please reach out to us at [email protected]. We request that all submissions comply with the DSA's stipulations and are preferably made in English, or if not, accompanied by an English translation.
Additionally, if you have any other concerns about activities by users of our Services that you suspect might contravene the prohibitions outlined in Section 7 of our Terms, we invite you to notify us at [email protected].
If you have any questions or comments relating to Surfshark Services or this Terms of Service send an email to [email protected] or contact us via a live chat.
Surfshark has appointed an exclusive point of contact for both users of our Services and the authorities for the purposes of the Digital Services Act (“DSA”). For inquiries regarding DSA, please reach out to us at [email protected]. We request that all submissions comply with the DSA's stipulations and are preferably made in English, or if not, accompanied by an English translation.
Additionally, if you have any other concerns about activities by users of our Services that you suspect might contravene the prohibitions outlined in Section 7 of our Terms, we invite you to notify us at [email protected].
15. Other terms
The English version of Terms of Service prevails.
While translations of these Terms of Service may be provided in other languages, they may not be fully up-to-date or comprehensive. Thus, in case of any conflict between the English version and the translated versions of these Terms of Service, the English version shall take precedence.
While translations of these Terms of Service may be provided in other languages, they may not be fully up-to-date or comprehensive. Thus, in case of any conflict between the English version and the translated versions of these Terms of Service, the English version shall take precedence.
16. When was the Terms of Service last updated?
It’s essential to keep up with the updates if there are any.
December 8, 2025.
moderate Cookie Policy 04/05/2026

The updated cookie policy reorganizes the cookie table structure, separating first-party and third-party cookies into distinct sections for better clarity. The policy adds numerous new first-party cookies (over 30 new entries) for enhanced functionality like purchase flow management, onboarding, and user experience optimization, while maintaining the same third-party tracking partners and general data collection practices.

QUICK LINKS 1. What is a cookie?2. What categories of cookies does Surfshark collect?3. What specific cookies Surfshark collects?4. How to control cookies?5. Does our website respond to do-not-track signals?
QUICK LINKS 1. What is a cookie?2. What categories of cookies does Surfshark collect?3. What specific cookies Surfshark collects?4. How to control cookies?5. Does our Website respond to do-not-track signals?
QUICK LINKS
1. What is a cookie?
2. What categories of cookies does Surfshark collect?
3. What specific cookies Surfshark collects?
4. How to control cookies?
5. Does our website respond to do-not-track signals?
5. Does our Website respond to do-not-track signals?
Surfshark Cookie Policy
Last Update 2025.10.13.
Last Update 2026.04.21.
Most sites on the internet, including Surfshark’s, use cookies, pixels, web beacons, and other similar technologies (collectively called “cookies”), as they are pretty convenient to help provide, protect, and improve our Services and Website.
1. What is a cookie?
A cookie is a small string of data that transfers to your computer for identification purposes.
A cookie is a small string of data that transfers to your device for identification purposes.
Surfshark utilizes cookies for several reasons, all aimed at enhancing your experience and ensuring the security of our services. These small data files help us maintain the efficient and secure functioning of our Website, allowing us to detect and prevent fraud effectively. Cookies also enable us to remember your preferences and recognize you as a returning visitor, tailoring your browsing experience by analyzing your habits and personalizing content. Furthermore, we gather statistical information on Website traffic and usage, and to display customized advertisements that are more relevant to your interests.
2. What categories of cookies does Surfshark collect?
Surfshark uses the following categories of cookies:
By cookie purpose Necessary cookiesThese cookies are crucial for the core operations of our Website, and they're automatically placed on your devices to keep things running smoothly — no explicit consent needed.
Analytic cookiesThese cookies help us to understand your browsing behavior. They track which parts of our Website you find most engaging and flag any areas where you hit an error. They allow us to make improvements to our Website and analyze their performance.
Marketing cookiesThese cookies are used to track user activity and sessions so that we can deliver a more personalized service. Marketing cookies are set by third parties with whom we execute marketing campaigns and allow us to provide marketing relevant to you.
AffiliateAffiliate cookies allow us to identify the customers referred to our Website by our partners so that we can grant the referrers their commission.
By cookie origin First-party cookiesThese are placed directly by our Website on your device.
Third-party cookiesThese are placed by other services that are integrated into our Website, like analytics or advertising platforms. For example, if you click a partner's link to reach our site, a third-party cookie might be used to track that interaction so that the partner can provide you with relevant offers.
By cookie duration SessionThese are temporary and are deleted as soon as you close your browser.
PersistentThese stay on your device for a set amount of time, which can range from a few days to several years. They will remain there unless you delete them yourself. You can learn how to do this in the "How to control cookies" section of the Cookie Policy.
There are many great resources to learn about the different types of cookies and how they work. You can check out websites like https://knowcookies.com/ or https://allaboutcookies.org/.
3. What specific cookies Surfshark collects?
We may occasionally test new cookies on our Website, and any that are permanently adopted will be added to the table below:
Cookie nameCookie expiryProvenancePurposeCookie Category
surfshark-locale29 daysSurfsharkIt stores user's selected website language.Necessary (functional)
surfshark-experiments1 yearSurfsharkIt stores data for our user experience testing.
surfshark-alert-couponSessionSurfsharkUsed to store the coupon which will be used during the purchase of the Alert service.
_sstk2 hoursSurfsharkUsed for authentication purposes.
_ssexp2 hoursSurfsharkUsed for authentication purposes.
_ssrtk2 hoursSurfsharkUsed for authentication purposes.
sf-la30 daysSurfsharkLanding page tracking cookie which indicates the source of the last visit.
sf-fi30 daysSurfsharkLanding page tracking cookie which indicates the source of the last visit.
sf-rf30 daysSurfsharkReferral tracking cookie.
__zlcmidPersistentThird party (Zendesk)To store unique user ID (for chat purposes).
surfshark-cookies-consent6 monthsSurfsharkUsed to store user cookie consent.
_cq_duid3 monthsThird party (Cheq)Used to detect domain sessions per device.
_cq_suidSessionThird party (Cheq)Used to detect browser sessions per domain and device.
_cq_tuidSessionThird party (Cheq)Used to detect tab sessions per device.
_cq_checkDeleted immediately after insertionThird party (Cheq)Used to detect if the device supports cookies.
cg_uuid365 daysThird party (Cheq)Hosted by cheqzone.com. Used to detect when the same device is used in a separate browser session, to ensure that once a session is identified as fraudulent or malicious, it can be consistently blocked from access to the relevant customer’s website.
__cf_bm1 dayThird party (Cloudflare)Used to read and filter requests from bots.
surfshark-uuid2 yearsSurfsharkIt identifies the same user for our user experience testing.
is_euSessionThird party (Pinterest)Determines whether the user is located within the EU and therefore is subject to EU's data privacy regulations.
surfshark-sticky-cta-closedSessionSurfsharkThis cookie stores information about the website visitor’s actions on our promotional pop-ups.
surfshark-cf-uuid30 minSurfsharkThis cookie is used to prevent fraud.
sf-af30 daysSurfsharkAffiliate network tracking cookie.Affiliate
_sp_ses.<website hash>30 minSurfsharkIdentifies if the current user session has expired.Analytical
_sp_id.<website hash>13 monthsSurfsharkStores non-identifiable user information that is created when a user first visits a site and updated on subsequent visits.Analytical
_uetvid16 daysThird party (Bing)It stores and tracks visits across websites.Marketing
_uetvid_expPersistentThird party (Bing)It stores and tracks visits across websites.
IDE1 yearThird party (Google DoubleClick)These cookies are set by a third party (DoubleClick) and are used for serving targeted advertisements that are relevant to you across the web. Targeted advertisements may be displayed to you based on your previous visits to this website. For example, advertisements about a topic you have expressed an interest in while browsing our site may be displayed to you across the web. In addition, these cookies measure the conversion rate of ads presented to the user.
MUID1 yearThird party (Microsoft)It stores and tracks visits across websites.
_ttp13 monthsThird party (TikTok)Serves targeted advertising and measures the performance of advertising campaigns.
personalization_id2 yearsThird party (X Corp.)This cookie is set by X Corp to measure the performance of advertising campaigns through X, across different browsers and devices used by a visitor.
muc_ads2 yearsThird party (X Corp.)This is a cookie that is set by X Corp. It is used for optimizing ad relevance by collecting visitor navigation data.
_pin_unauth365 daysThird party (Pinterest)This cookie is used by Pinterest to track usage of their services.
_pinterest_sess1 yearThird party (Pinterest)Pinterest login cookie.
guest_id_marketing2 yearsThird party (X Corp.)Used to detect whether a user is logged into X.
guest_id2 yearsThird party (X Corp.)Unique ID that identifies the user’s session.
_uetsid1 dayThird party (Bing)Used to store and track visits across websites.
_uetsid_expPersistentThird party (Bing)Contains the expiry-date for the cookie with corresponding name.
guest_id_ads2 yearsThird party (X Corp.)This cookie is set due to X integration and sharing capabilities for social media.
eng_mtPersistentThird party (Taboola)Tracks the conversion rate between the user and the advertisement banners.
CIf C=1 - 60 daysIf C=3 - 3650 daysThird party (Adform)Identifies if user’s browser accepts cookies.
TPC14 daysThird party (Adform)Identifies if user’s browser accepts third-party cookies.
GCM1 dayThird party (Adform)Identifies if there is a need to re-check a partner‘s cookie matching existence.
CM1 dayThird party (Adform)Identifies if there is a need to re-check a partner‘s cookie matching existence (set by AdServing).
CM1414 daysThird party (Adform)Identifies if there is a need to re-check a partner‘s cookie matching existence (set by Cookie Matching).
tokenSessionThird party (Adform)Security token for opt out functionality.
otsid365 daysThird party (Adform)Advertiser specific opt-out.
uid60 daysThird party (Adform)Unique identifier.
SR<RotatorID>1 dayThird party (Adform)Sequential rotator information – contains total impressions, daily impressions, total clicks, daily clicks, and last impression date.
CT<TrackingSetupID>1 hourThird party (Adform)Identifies last click membership for third party pixels on advertiser’s pages.
EBFCD<BannerID>7 daysThird party (Adform)Identifies daily frequency capping for expanding banner.
EBFC<BannerID>7 daysThird party (Adform)Identifies total frequency capping for expanding banner.
CFFC<TagID>7 daysThird party (Adform)Compound banner frequency capping.
We may occasionally test new cookies on our Website, and any that are permanently adopted will be added to the tables below.
Our Website employs the following first-party cookies: CookieExpiryProvenancePurposeCategory
surfshark-locale29 daysSurfsharkStores selected website languageFunctional
surfshark-couponSessionSurfsharkStores the applied coupon codeEssential
surfshark-on-exit-dialog-shown1 yearSurfsharkStores interactions with exit surveysFunctional
surfshark-intent-survey-shown1 yearSurfsharkStores session data related to intent surveysFunctional
surfshark-cf-uuid30 minSurfsharkUsed to prevent fraudEssential
surfshark-sticky-cta-closedSessionSurfsharkCaptures engagement data for promotional pop-upsFunctional
surfshark-uuid1 yearSurfsharkMaintains an encrypted session identifierFunctional
_ssli13 monthsSurfsharkMaintains authenticated session settingsFunctional
_sstk1 yearSurfsharkUsed for authentication purposesEssential
_ssrtk1 yearSurfsharkUsed for authentication purposesEssential
_ssexp2 hoursSurfsharkUsed for authentication purposesEssential
sf-af30 daysSurfsharkStores the parameter of the previous visitMarketing
sf-ap30 daysSurfsharkStores the parameter of the previous visitMarketing
sf-lu30 daysSurfsharkStores the prior page URLMarketing
sf-la30 daysSurfsharkStores the prior page URLMarketing
sf-fi30 daysSurfsharkStores the prior page URLMarketing
sf-rf30 daysSurfsharkStores referral program informationFunctional
surfshark-consent-state13 monthsSurfsharkStores cookie consentEssential
_sp_ses.{{DOMAIN HASH}}30 minutesSurfsharkDetermines the current session authentication statusAnalytic
_sp_id.{{DOMAIN HASH}}13 monthsSurfsharkPersists attributes across sessionsAnalytic
surfshark-hide-renewal-off-notification30 daysSurfsharkStores engagement status for auto-renewal notificationFunctional
surfshark-hide-renewal-not-supported-notification30 daysSurfsharkStores engagement status for auto-renewal notificationFunctional
surfshark-hide-setup-guide1 yearSurfsharkStores interactions within the setup guideFunctional
surfshark-skip-upgrade14 daysSurfsharkStores interactions with upgrade screenFunctional
surfshark-app-auto-download-triggered1 yearSurfsharkStores the initiation status of automatic application downloadsFunctional
surfshark-productSessionSurfsharkRedirects back to product after additional product purchaseFunctional
surfshark-expired-urlSessionSurfsharkStores session errors to facilitate redirection to fallback workflowsFunctional
surfshark-activate-user-errorSessionSurfsharkIndicates errors to facilitate redirection to fallback workflowsFunctional
surfshark-purchase-errorSessionSurfsharkShows purchase-related errorsEssential
surfshark-teams-purchase-errorSessionSurfsharkShows purchase-related errorsEssential
surfshark-free-trial-purchase-errorSessionSurfsharkShows purchase-related errorsEssential
surfshark-card-purchase-errorSessionSurfsharkShows purchase-related errorsEssential
surfshark-payment-settings-successSessionSurfsharkShows payment update success statusEssential
surfshark-payment-settings-processing-errorSessionSurfsharkShows payment method update errors statusEssential
surfshark-hide-manual-setup-startup1 yearSurfsharkStores information about actions on setup screenFunctional
surfshark-purchase-survey-showed1 yearSurfsharkStores interaction data for order-related exit surveyFunctional
surfshark-success-purchaseSessionSurfsharkDisplays purchase historyEssential
surfshark-ref-checkout-pathSessionSurfsharkFacilitates purchase flow redirection after failed paymentEssential
surfshark-onboarding-taskSessionSurfsharkManages navigation state between onboarding tasksEssential
surfshark-upgrade-initially-skippedSessionSurfsharkManages session redirection following an upgrade transactionFunctional
surfshark-cancel-dealSessionSurfsharkMaintains session data regarding applicable promotionsFunctional
surfshark-chat-sessionSessionSurfsharkMaintains support chat continuity during site navigationFunctional
shark-checkSessionSurfsharkChecks cookie enablement statusEssential
surfshark-purchase-dataSessionSurfsharkSupports payment processingEssential
surfshark-experiments1 yearSurfsharkMaintains session data for interface optimization researchFunctional
surfshark-experiments-excludeSessionSurfsharkManages session segmentation for interface optimizationFunctional
shark-oauth-linkSessionSurfsharkSupports third-party authenticationEssential
shark-oauth-verifySessionSurfsharkSupports third-party authenticationEssential
shark-oauth-referrerSessionSurfsharkSupports third-party authenticationEssential
shark-oauth-skip-promptSessionSurfsharkSupports third-party authenticationEssential
shark-oauth-challengeSessionSurfsharkSupports third-party authenticationEssential
surfshark-onboarding-upgrade-visited1 yearSurfsharkManages session routing following interaction with the upgrade interfaceFunctional
Third-party service providers we currently use include: Service providerPurposePrivacy policyHow to disable
AdyenEssentialCannot be turned off
AppleEssentialCannot be turned off
AppsFlyerAnalytics, advertisinghttps://www.appsflyer.com/legal/services-privacy-policy/
CloudflareEssentialCannot be turned off
GoogleAnalytics, advertising, functionality
IterableAnalytics, advertising, functionalityPlease change your application or browser settings to disable cookies
MetaAnalytics, advertising
MicrosoftAdvertisinghttps://privacy.microsoft.com/en-us/privacystatementPlease change your application or browser settings to disable cookies
PaypalEssentialhttps://www.paypal.com/us/legalhub/paypal/privacy-fullCannot be turned off
ProcessOutEssentialCannot be turned off
PurchaselyFunctionality, AnalyticsPlease change your application or browser settings to disable cookies
TikTok Information TechnologiesAdvertisinghttps://www.tiktok.com/legal/page/eea/privacy-policy/enPlease change your application or browser settings to disable cookies
TVSquaredAnalytics, advertising
TypeformFunctionalityPlease change your application or browser settings to disable cookies
ZendeskFunctionalityhttps://www.zendesk.co.uk/company/agreements-and-terms/privacy-notice/
4. How to control cookies?
You can control the cookies deployed on your devices. The majority of cookie types can be regulated or eradicated via your web browser's configuration options. Please be aware, however, that when you choose to reject cookies, this choice may limit the functionality of the Website and you may lose access to some of its features.
You can control the cookies deployed on your devices. You may update your cookie preferences at any time by selecting the 'Cookie Preferences' link in the Website footer. Also, the majority of cookie types can be regulated or eradicated via your web browser's configuration options. Please be aware, however, that when you choose to reject cookies, this choice may limit the functionality of the Website and you may lose access to some of its features.
For detailed instructions on adjusting cookie preferences within various commonly used browsers, please consult the following directional links:
Google Chrome
Apple Safari
Microsoft Edge
Mozilla Firefox
Opera
Also, if you would like to disable advertising cookies, please learn more at Network Advertising Initiative’s opt-out page, the Digital Advertising Alliance’s opt-out page, or http://youronlinechoices.eu.
We note that our Website may contain links to external sites that may take you outside of our Website and are beyond our control. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information. We urge you to review the equivalent data protection, privacy, and cookie policies available on their websites. We do not accept any responsibility or liability for the data protection or privacy practices of third-party websites and your use of third-party websites is entirely your own responsibility.
5. Does our website respond to do-not-track signals?
Currently, it doesn’t. You can tweak your specific browser settings to achieve very similar results.
At this time, Surfshark does not recognize automated browser signals regarding tracking mechanisms, which may include “do-not-track” instructions. However, you can change your privacy preferences regarding the use of cookies and similar technologies through your browser. You may set your browser to accept all cookies, block certain cookies, require your consent before a cookie is placed in your browser, or block all cookies. Please note that blocking all cookies will affect your online experience and may prevent you from enjoying the full features offered by our Website.
Back to the Privacy Policy
minor Privacy Policy 30/03/2026

The changes between the old and new versions of Surfshark's Privacy Policy are purely cosmetic formatting improvements. The data collection practices, retention periods, logging policies, third-party sharing arrangements, and jurisdiction remain completely unchanged. The only difference is that the data collection tables in section 2 have been reformatted from a paragraph style to a cleaner table format with separate columns for 'Data collected', 'Legal basis', and 'How long we keep it'.

QUICK LINKS 1. How do we handle your connection data?2. What personal data we collect, why, on what basis, and for how long?3. How long do we keep personal data?4. Is personal data transferred to other countries?5. With whom do we share personal data?6. What choices do you have over your personal data?7. How do we use cookies and other tracking technologies?8. How do we protect personal data?9. Children’s data10. Who should you contact with questions or concerns?11. Are there any other terms you should know?
QUICK LINKS
1. How do we handle your connection data?
2. What personal data we collect, why, on what basis, and for how long?
3. How long do we keep personal data?
4. Is personal data transferred to other countries?
5. With whom do we share personal data?
6. What choices do you have over your personal data?
7. How do we use cookies and other tracking technologies?
8. How do we protect personal data?
9. Children’s data
10. Who should you contact with questions or concerns?
11. Are there any other terms you should know?
Surfshark Privacy Policy
Last updated: 2026.02.17
Since our privacy policy ("Privacy Policy") is quite lengthy, we thought you might appreciate a short and easy breakdown. These highlighted bits will do precisely that! Think of them as helpful guides — they'll make the legal language easier to understand.
This Privacy Policy explains how Surfshark B.V, address Kabelweg 57, 1014BA Amsterdam, the Netherlands (“Surfshark”, “we”, “us”, or “our”), processes your personal data through our website (the “Website”), online hosted services and any related application, software or functionality offered by Surfshark (the “Services”).
Please review this Privacy Policy thoroughly to understand our policies and practices concerning your personal data and how we will handle it. This Privacy Policy should be read alongside our Terms of Service. Together, these two documents create a single, legally binding agreement between you and Surfshark. 
Surfshark processes your personal data and acts as a data controller in accordance with privacy laws, including the General Data Protection Regulation (“GDPR”).
By continuing to use our Website and / or Services, you agree to the terms of the current Privacy Policy. We kindly request that you refrain from using our Services and Websites if you do not agree with this Privacy Policy or any of its provisions.
We may need to amend the Privacy Policy from time to time. If there are any significant updates, we'll let you know ahead of time through our Website or by email. You'll always find the date of the latest update at the top of the Privacy Policy.
1. How do we handle your connection data?
No-logs Policy is one of the most important features of our VPN service and we keep our VPN service logs-free. We don’t store any information that could lead us to see your online activities.
Surfshark respects your privacy, therefore, we are committed to not process any information related to the online activity of our users. Surfshark is based in the Netherlands jurisdiction, which does not require information storage or reporting. We do not collect any information about what you do online (i.e., we do not collect your visited IP addresses, browsing history, session information, connection time stamps, used bandwidth, network traffic or any other similar information).
To ensure the functionality of our VPN service, our servers temporarily keep details about your connection to a specific VPN server, such as your user ID and / or your IP address and connection to VPN server time stamps. However, this information is automatically deleted within 15 minutes after your session ends. Rest assured, we do not store any information about the websites you visit.
2. What personal data we collect, why, on what basis, and for how long?
Surfshark collects limited personal data, which includes any data that can directly or indirectly identify you when you use our Services. Personal data helps us to provide you Services, enhance your experience, improve our Services, and ensure compliance with legal obligations. We are committed to protecting your privacy and handling your personal data responsibly.
Here's a breakdown of the personal data we gather and what we use it for:
2.1 Personal data needed for us in order to provide Surfshark Services
2.1.1 For you to be able to create a Surfshark account Data collected
Email address, encrypted password, account registration date, coupon code (if any).
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.1.1 For you to be able to create a Surfshark account Data collectedLegal basisHow long we keep it
Email address, encrypted password, account registration date, coupon code (if any).Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
We use this information to create your account so that you can use our Services.
2.1.2 To provide you with Surfshark Services Data collected
User ID, information about subscription (subscription plan name, subscription term, subscription ID, subscription frequency, amount, currency, status, auto-renewal status, and information about 2FA (on/off)), date of the payment, amount paid, currency, payment status, payer residence country (and state), coupon used (if any), part of the credit card number, credit card expiry date.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.1.2 To provide you with Surfshark Services Data collectedLegal basisHow long we keep it
User ID, information about subscription (subscription plan name, subscription term, subscription ID, subscription frequency, amount, currency, status, auto-renewal status, and information about 2FA (on/off)), date of the payment, amount paid, currency, payment status, payer residence country (and state), coupon used (if any), part of the credit card number, credit card expiry date.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Please note that to handle your payments and refunds, our trusted payment partners collect necessary details like the transaction date, payer’s IP address, credit card number, and the cardholder's full name. Depending on your location, our payment partners may also need additional details like a personal ID, passport, or your address.To learn what personal data these payment providers collect and store, please refer to their individual terms of service and privacy policies.
2.2 Personal data needed for specific Surfshark Services In addition to the personal data needed for account setup and general service delivery, we'll also collect additional data specific to the individual service you use. This personal data is essential for the particular Surfshark Service to function correctly:
2.2.1 Provision of the VPN service We do not store any information about the websites you visit while using our VPN.
Data collected
Our servers temporarily keep details about your connection to a specific VPN server, such as your user ID and / or your IP address and connection time stamps.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
Connection information is automatically deleted within 15 minutes after your session ends.
Data collectedLegal basisHow long we keep it
Our servers temporarily keep details about your connection to a specific VPN server, such as your user ID and / or your IP address and connection time stamps.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.Connection information is automatically deleted within 15 minutes after your session ends.
2.2.2 Provision of the Search tool service What you search for stays private. We don't collect such information. 
Data collected
Aggregated number of your performed searches.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
Aggregated number of your performed searches.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.2.3 Provision of the Alternative ID service Alternative persona
Data collected
Your alternative persona’s name, middle name, surname, date of birth, gender, country, city, address, postal code.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
Your alternative persona’s name, middle name, surname, date of birth, gender, country, city, address, postal code.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Alternative email
Data collected
Your email address, email mask and its description, subject line of the email letter, the content of the email letter (only for technical reasons, i.e., to forward it), email sender and receiver, email forwarding status, user profile data, metadata associated with the email.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
Your email address, email mask and its description, subject line of the email letter, the content of the email letter (only for technical reasons, i.e., to forward it), email sender and receiver, email forwarding status, user profile data, metadata associated with the email.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To be able to use Alternative email service, you will have to verify your email address to which emails are forwarded. The Emails you receive via the Alternative Email service along with sender and recipient email server IP address, sender email address and timestamps are deleted as soon as they are forwarded to your email address. We use a trusted email service provider to facilitate this service.
Alternative number
Data collected
The telephone number that has been assigned to you by Surfshark, as well as your call, SMS log and content.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
The telephone number that has been assigned to you by Surfshark, as well as your call, SMS log and content.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
In addition, to facilitate the Alternative Number service, we use trusted VoIP service providers. We respect your privacy and we do not access your private content.
2.2.4 Provision of the Alert service Data collected
Email address and / or personal identity number (or a social security number), and / or credit card number, information related to data leaks found.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.2.4 Provision of the Alert service Data collectedLegal basisHow long we keep it
Email address and / or personal identity number (or a social security number), and / or credit card number, information related to data leaks found.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To use our Alert service for detecting personal data leaks, you can submit your email address, personal identity number (or a social security number), or credit card number for monitoring. We'll  securely retain this information, encrypting personal identity and credit card numbers. When you enter your email, you authorize us to find and provide you with additional leaks-related details, for example, usernames, passwords, full names, country, physical address, IP addresses. For credit card or social security number leaks, we'll only show you data categories (e.g., credit card details, name, address, password, nationality) for security reasons, rather than the specific compromised data.
2.2.5 Provision of the Data Leak Checker service Data collected
Email address, data leaks your email address was involved in.
Legal basis
Legal basis for the processing of personal data is your consent.
How long we keep it
We do not retain your personal data.
2.2.5 Provision of the Data Leak Checker service Data collectedLegal basisHow long we keep it
Email address, data leaks your email address was involved in.Legal basis for the processing of personal data is your consent.We do not retain your personal data.
Data Leak Checker allows you to check if your personal data has been compromised in a data leak. By voluntarily entering your email address, you can find out if your personal information has been exposed. Please note that we do not store your email address or information related to data leaks.
2.2.6 Provision of Dedicated IP service Data collected
Your email address, your dedicated IP address.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.2.6 Provision of Dedicated IP service Data collectedLegal basisHow long we keep it
Your email address, your dedicated IP address.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
If you opt for our Dedicated IP service, certain online activities could be linked back to your account.
2.2.7 Provision of the Antivirus service for Windows, MacOS, and Android users Data collected
2.2.7 Provision of the Antivirus service for Windows, MacOS, and Android users Data collectedLegal basisHow long we keep it
We will collect information about your devices on which you use the Antivirus service. This information is needed to ensure the compliance with the limitation for the number of devices that one client may use for the Antivirus service as provided in our Terms of Service.
Also, to improve user experience we will retain statistical information about the usage of the webcam protection feature, including the number of times you received a request to access your camera or microphone, which preference you selected, whether this feature is turned on or off, how many apps you have included in the exclusion list.
To provide statistics on what malware was detected, we will process malware name and type, country, OS, and user ID.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To provide statistics on what malware was detected, we will process malware name and type, country, OS, and user ID. Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement. We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Information about malware name and type, country, OS, and user ID will be fully anonymized after 1 year from our receipt of the data.
2.2.8 Provision of email scam checker service Data collected
The sender's email address, the email subject, and the content of the email, including any website address indicated therein.
Legal basis
Legal basis for the processing of personal data is your consent.
How long we keep it
The collected data will only be stored for the brief period necessary to perform the scan and provide you with the results. Sender’s email address will be kept for 30 days to improve our services.
2.2.8 Provision of email scam checker service Data collectedLegal basisHow long we keep it
The sender's email address, the email subject, and the content of the email, including any website address indicated therein.Legal basis for the processing of personal data is your consent.The collected data will only be stored for the brief period necessary to perform the scan and provide you with the results. Sender’s email address will be kept for 30 days to improve our services.
In order for you to be able to use our AI powered email scam checker, which scans your emails for potential scam threats, we need to collect specific data from the emails you choose to scan. This data includes the sender's email address, the email subject, and the content of the email, including any website address it contains. Your consent will be required to collect this information, as you will actively select which emails from your inbox to scan. The collected data (except sender’s email address) will only be stored for the brief period necessary to perform the scan and provide you with the results. Please note that in order to improve our email scam checker, we will use your personal data in a completely anonymized format, based on our legitimate interest in enhancing our services.
Please note that we respect your privacy and do not access any of your private content or use any of your data to train our AI models.
You can find information about how your personal data is processed for email scam checker diagnostics in paragraph 2.3.9 of this privacy policy.
2.3 Other personal data processing purposes As indicated above, generally we use your data to provide our Services. Nevertheless, we also process some of it for other legal reasons. These might not be a direct part of the Services you use, but they're also important for keeping things secure, running smoothly, making our offers better, and meeting our legal duties. You'll find all the details about these extra data activities in the section below.
2.3.1 To ensure the security of your account Data collected
Device name, operating system, Surfshark app version installed, last login date.
Legal basis
Legal basis for the processing of personal data is our legitimate interest to ensure the security of your account.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.1 To ensure the security of your account Data collectedLegal basisHow long we keep it
Device name, operating system, Surfshark app version installed, last login date.Legal basis for the processing of personal data is our legitimate interest to ensure the security of your account.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To enhance the security of your account, when you log in to the Surfshark app, we collect the information indicated above. This helps us recognize your trusted devices and allows us to provide better security for your account. As part of this, we'll notify you by email if you log in from a new device that differs from your last-used devices.
This email will provide you with the login details. If you did not log in from this new device, it is crucial to change your password immediately to secure your account. We also strongly encourage you to enable two-factor authentication for enhanced protection. By promptly notifying you of logins from unfamiliar devices, we enable you to take swift action if anything appears suspicious, thereby helping to ensure your account's safety.
2.3.2 To enable you to submit an inquiry and communicate with customer support Data collected
Your email address, the content of inquiry, including any information that you share with our customer support team that is necessary to resolve the query, date and time of inquiry.
Legal basis
We process your personal data with your consent or in our legitimate interest to provide you with the necessary information.
How long we keep it
We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
2.3.2 To enable you to submit an inquiry and communicate with customer support Data collectedLegal basisHow long we keep it
Your email address, the content of inquiry, including any information that you share with our customer support team that is necessary to resolve the query, date and time of inquiry.We process your personal data with your consent or in our legitimate interest to provide you with the necessary information.We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
To ensure the security and privacy of your account, Surfshark requires identity verification before we can assist with your customer support inquiry. This process helps us protect your data and provide you with the most accurate and personalized support.
2.3.3 To enable you to interact with the live chatbot Data collected
Your name, email address, date and time of inquiry.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement and / or our legitimate interest.
How long we keep it
We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
2.3.4 To contact you via email about important updates and announcements related to your use of the Services and Website (transactional communications) Data collected
Your email address, the content of the email address, date and time of email sent.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.5 To send you offers, surveys, and other marketing content Data collected
Your email address, the content of the email letter, the date and time of the email letter sent.
Legal basis
Legal basis for the processing of personal data is your consent or our legitimate interest to conduct marketing activities.
How long we keep it
We will process your information until we receive your opt-out request.
2.3.3 To enable you to interact with the live chatbot Data collectedLegal basisHow long we keep it
Your name, email address, date and time of inquiry.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement and / or our legitimate interest.We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
2.3.4 To contact you via email about important updates and announcements related to your use of the Services and Website (transactional communications) Data collectedLegal basisHow long we keep it
Your email address, the content of the email address, date and time of email sent.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.5 To send you offers, surveys, and other marketing content Data collectedLegal basisHow long we keep it
Your email address, the content of the email letter, the date and time of the email letter sent.Legal basis for the processing of personal data is your consent or our legitimate interest to conduct marketing activities.We will process your information until we receive your opt-out request.
We may contact you via email for this purpose, but we also encourage you to contact us via our online contact form to get the best VPN offer for you.
Also, to help you with your order, we might send an email letting you know if a purchase wasn't completed (unfinished order). This is based on our legitimate interest in improving your experience with us and assisting you with any issues related to your orders.
If you do not wish to receive emails from us, you can opt out by contacting [email protected] or by clicking “unsubscribe” at the bottom of any correspondence. If you have multiple email addresses, you will need to opt out for each address to be removed from our active database. However, we will continue to communicate with you for essential service delivery, to address your inquiries, and to provide transactional product or service-related updates.
Also, please note that you may still receive information about our Services from other parties who use their own mailing lists.
2.3.6 To enable your participation in our referral program Data collected
Your unique referral link, your rewards (the amount of money or months earned), your Paypal account details.
Legal basis
Processing your personal data is essential for us to carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.7 To manage and administer our accounts on social networks Data collected
Your interaction data, e.g., likes, comments, full name, pseudonym, social network profile name, pictures.
Legal basis
Legal basis for the processing of personal data is our legitimate interest to engage with the community and to manage our social networks accounts.
How long we keep it
We will process your provided information until you delete your posted content or social networks account.
2.3.6 To enable your participation in our referral program Data collectedLegal basisHow long we keep it
Your unique referral link, your rewards (the amount of money or months earned), your Paypal account details.Processing your personal data is essential for us to carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.7 To manage and administer our accounts on social networks Data collectedLegal basisHow long we keep it
Your interaction data, e.g., likes, comments, full name, pseudonym, social network profile name, pictures.Legal basis for the processing of personal data is our legitimate interest to engage with the community and to manage our social networks accounts.We will process your provided information until you delete your posted content or social networks account.
Please note that when you share information on social network accounts, e.g., Facebook, X, we don't control how they use or store that data. These companies collect and process your information for their own reasons, including their own marketing efforts. For full details on how these platforms handle your personal data, please check each social media privacy policies directly.
2.3.8 To determine eligibility for subscription discounts through automated decision-making, including profiling Data collected
Information related to your subscription.
Legal basis
We use your personal data because it's in our legitimate interest to enhance your experience.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.8 To determine eligibility for subscription discounts through automated decision-making, including profiling Data collectedLegal basisHow long we keep it
Information related to your subscription.We use your personal data because it's in our legitimate interest to enhance your experience.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
We may use an automated decision-making, including profiling, process to evaluate whether to apply a discount to the price of the subscription a user purchases. This will not increase the price of the subscription you want to purchase.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person. Automated decision-making is the process of deciding by automated means without any human involvement. Our system may automatically generate decisions using a very limited amount of your personal data (for example, information related to your subscription). For instance, we may use an automated decision-making process, including profiling, to evaluate whether to apply a discount to the price of the subscription you purchase.
In instances where a decision based solely on automated processing produces legal consequences for you, or otherwise significantly affects you, you retain the right to challenge the decision, express your viewpoint, and request human involvement. You can achieve this by contacting us at [email protected]. We will assess your request and provide a human examination of the decision, ensuring that your rights are fully honored.
2.3.9 To maintain and improve the quality of our Services and provide effective support (diagnostics and crash reporting) Data collected
2.3.9 To maintain and improve the quality of our Services and provide effective support (diagnostics and crash reporting) Data collectedLegal basisHow long we keep it
Aggregated performance information, the frequency of use of Services, unsuccessful connection attempts, device information, and other similar information.
In the case of email scam checker diagnostics, we will collect information including the sender's name and email address, the receiver's name, the email subject, the content of the email, and any attachments metadata (file name, file type).
Legal basis
Legal basis for such processing is your consent.
How long we keep it
We keep your personal data until you withdraw your consent, but no longer than 7 days from its receipt.
In the case of email scam checker diagnostics, we will collect information including the sender's name and email address, the receiver's name, the email subject, the content of the email, and any attachments metadata (file name, file type). Legal basis for such processing is your consent.We keep your personal data until you withdraw your consent, but no longer than 7 days from its receipt.
To fulfil this goal, we collect diagnostics information and monitor crash reports on our apps and extensions. Please note that diagnostics information does not contain uniquely identifiable information (except as provided below regarding email scam checker service). However, if you face some problems when using our apps, we may require your device information to solve these problems. We will access this information only if you provide a separate consent for that.
In the case of email scam checker diagnostics, we will collect a minimal amount of necessary personal data. This includes the email sender's name and email address, the receiver's email address, the email subject, the content of the email, and metadata of any attachments.
2.3.10 To enable the auto-connect feature for the trusted Wi-Fi network Data collected
Wi-Fi name (Service Set Identifier).
Legal basis
Legal basis for such processing is your consent.
How long we keep it
We will process your personal data until you withdraw your consent.
2.3.10 To enable the auto-connect feature for the trusted Wi-Fi network Data collectedLegal basisHow long we keep it
Wi-Fi name (Service Set Identifier).Legal basis for such processing is your consent.We will process your personal data until you withdraw your consent.
Upon your permission, we collect your Wi-Fi network name (Service Set Identifier) exclusively to enable the auto-connect and trusted Wi-Fi features. This allows our app to automatically connect to a server without you having to worry about it. Crucially, this information is stored solely on your device. We do not store or share it with any third party.
2.3.11 To improve our analytics and optimize advertising Data collected
Cookie ID, mobile device ID, device specification, advertising IDs.
Legal basis
Legal basis for the processing of personal data is your consent to deliver relevant ads and promotional messages to you, and to attribute sales.
How long we keep it
We will process your personal data until you withdraw your consent.
2.3.11 To improve our analytics and optimize advertising Data collectedLegal basisHow long we keep it
Cookie ID, mobile device ID, device specification, advertising IDs.Legal basis for the processing of personal data is your consent to deliver relevant ads and promotional messages to you, and to attribute sales.We will process your personal data until you withdraw your consent.
When you use our Website, we automatically collect information about your activity through technologies like cookies if you've given us permission. We may receive information about you from certain advertisers and advertising partners for analytical and advertising purposes. Our advertising partners help us attribute sales, deliver more relevant ads and promotional messages to you, which may include interest-based advertising and account-based advertising.
You can control the use of cookies at the individual browser level on your device. More information about cookies and how to disable them can be found in Section 7 of this Privacy Policy.
Additionally, we may collect limited technical and engagement data through the app, for example, device model, operating system version, device language, randomized identifiers. This information helps us measure campaign effectiveness and enhance user experience. This data is shared with trusted service providers, such as AppsFlyer and Firebase Analytics for performance attribution, Iterable for marketing engagement, and Purchasely for subscription flows management and optimization. You may manage or withdraw your consent at any time by contacting us at [email protected].
2.3.12 To carry out market research and perform internal analytics Data collected
We aggregate and anonymize the data we collect for this purpose. We then maintain and use this data only in its anonymized form.
Legal basis
Legal basis for the processing of this deidentified data is our legitimate interest.
How long we keep it
Since the data is anonymized we will process it indefinitely.
2.3.12 To carry out market research and perform internal analytics Data collectedLegal basisHow long we keep it
We aggregate and anonymize the data we collect for this purpose. We then maintain and use this data only in its anonymized form.Legal basis for the processing of this deidentified data is our legitimate interest.Since the data is anonymized we will process it indefinitely.
We create aggregated statistical data and conduct market research and analysis to understand customer needs, analyze sales, and identify other business trends. This helps us to improve our services and operate our business more effectively, using aggregated and/or inferred non-personal information.
2.3.13 To comply with legal requirements, exercise or defend legal claims Data collected
Email address, subscription information, payment-related information, other necessary information and / or legal documents.
Legal basis
Legal basis for the processing of personal data is a legal obligation to which we are subject (in case we need to collect your data statutorily) and our legitimate interest to defend our rights and interests (in case of other legal processes related to you, if any).
How long we keep it
We retain this data for as long as it is indicated in the specific law.
2.3.13 To comply with legal requirements, exercise or defend legal claims Data collectedLegal basisHow long we keep it
Email address, subscription information, payment-related information, other necessary information and / or legal documents.Legal basis for the processing of personal data is a legal obligation to which we are subject (in case we need to collect your data statutorily) and our legitimate interest to defend our rights and interests (in case of other legal processes related to you, if any). We retain this data for as long as it is indicated in the specific law.
We may also retain personal data for longer periods to comply with legal obligations, respond to government requests, or enforce our contracts and Terms of Service, including investigating potential violations.
We are subject to tax and other statutory requirements. We may have to protect our legitimate interests and legal rights. In these cases, we may be required to collect and store a limited amount of your personal data indicated above: email address, subscription information, payment-related information, other necessary information and / or legal documents.
2.3.14 To collect applicable tax, solve payment related issues, prevent fraud, and ensure accounting Data collected
Part of the credit card number, payment amount, currency, date of payment and card expiry date, residence country, state.
Legal basis
Legal basis for the processing of personal data is a legal obligation to which we are subject.
How long we keep it
We will retain payment-related information for 10 years from the receipt of this information.
2.3.14 To collect applicable tax, solve payment related issues, prevent fraud, and ensure accounting Data collectedLegal basisHow long we keep it
Part of the credit card number, payment amount, currency, date of payment and card expiry date, residence country, state.Legal basis for the processing of personal data is a legal obligation to which we are subject.We will retain payment-related information for 10 years from the receipt of this information.
To calculate applicable VAT/sales tax, we collect your country and, where applicable, state of residence. Should you opt to receive an invoice for the services rendered, we may also retain the necessary data to generate and issue that invoice.
3. How long do we keep personal data?
Please keep in mind that having an audited No-logs Policy is one of our core principles (see more in our Terms of Service), therefore we collect only the minimum amount of data about you, which is required to provide you with our Services.
Thus, unless specified differently in this Privacy Policy, we retain your personal data until it is no longer necessary for the reasons we initially collected it for, or until we receive a valid request to remove it, with some exceptions. However, there may be instances where we need to use and store your personal data beyond the timeframes mentioned above for purposes such as compliance with our legal obligations and / or exercising and defending legal claims.
4. Is personal data transferred to other countries?
Wherever your personal data needs to be sent, we always take extra care to keep it safe and sound.
Your data, as specified in this Privacy Policy, may be stored and processed in any country where we have facilities or in which we engage service providers. We carefully assess all international data transfers and implement appropriate safeguards to ensure your personal data remains protected as outlined in this Privacy Policy. Please note that we use Standard Contractual Clauses approved by the European Commission (you can access it here) to transfer your personal data from the EEA to other countries outside the EEA territory (e.g., the USA) or we transfer personal data to countries that the European Commission has recognized as ensuring an adequate level of data protection (you can access the list of countries here).
5. With whom do we share personal data?
It takes a village to keep our Website and Services up and running and we want to be transparent about what types of personal data we've shared and with whom, all for legitimate business reasons.We need third- party tools and services for things like marketing, payments, live chat, and so forth. Since these don’t belong to us, we urge you to read their terms and policies on their sites.
Surfshark shares personal data with the authorized parties only in cases where necessary for the purposes described in this Privacy Policy and allowed in accordance with applicable laws.
5.1 In the preceding 12 months, we have disclosed strictly necessary personal data for an operational purpose to the following categories of third parties: Category of data recipients
Marketing and application analytics service providers, such as Iterable, Firebase Analytics (by Google), Purchasely and Appsflyer.
Purpose of personal data transfer
We use them to manage our contacts, automate our marketing, gather analytics.
Country of the recipient
United States, Sweden, France, Ireland, United Kingdom.
Category of data recipients
Performance marketing service providers, such as Hasoffers (Tune Inc.).
Purpose of personal data transfer
We use them to calculate our conversion attribution.
Country of the recipient
United States
Category of data recipients
Third-party payment providers, such as Stripe, Adyen, Checkout, Coingate and similar.
Purpose of personal data transfer
They help us to process payments together with our own authorized payment processing companies.
Country of the recipient
United States, Ireland, British Virgin Islands.
Category of data recipients
Storage and infrastructure service providers, such as BigQuery (by Google).
Purpose of personal data transfer
They help us to store, analyze, and manage data.
Country of the recipient
United States
Category of data recipients
Live chat and support service providers, such as Zendesk.
Purpose of personal data transfer
We use them to provide live chat technology and provide support to our users.
Country of the recipient
United States
Category of data recipients
Security service providers, such as Cloudflare.
Purpose of personal data transfer
We work with them to provide improved security and performance.
Country of the recipient
United States
Category of data recipients
Providers that help us deliver the Alternative ID service, such as Telnyx.
Purpose of personal data transfer
We work with them to provide you with Alternative ID services (such as Alternative Number).
Country of the recipient
United States
Category of data recipients
Group companies.
Purpose of personal data transfer
We share data with our group companies to support our daily operations and ensure Surfshark can continue providing you with Services.
Country of the recipient
EEA, United States, United Kingdom.
Category of data recipients
Other Surfshark’s partners.
Purpose of personal data transfer
We share your personal data with our distribution, reseller, and app store partners, each of which is an independent controller of your personal data.
Country of the recipient
United States
Category of data recipients
Third parties whose services you buy through us.
Purpose of personal data transfer
We may provide your personal data to the third parties that deliver the services you buy through us. We only share the minimum amount of data necessary (e.g. your email address) to enable you to receive the services you have requested. Each of these companies acts as an independent controller of your personal data.
Country of the recipient
EEA, United States
5.2 There are a few more cases in which we can share your information with other authorized parties: Category of data recipients
Third parties (in case of corporate reorganization, bankruptcy or liquidation proceedings).
Purpose of personal data transfer
If we undergo a corporate reorganization (like a merger, acquisition, or sale of our business), we may share personal data with the involved third parties (e.g., the buyer, their agents, and advisors) to help complete the transaction.
Legal ground
When EU or UK data protection laws apply, our legal basis for this is our legitimate interest in conducting business, or your consent if required by law.
Category of data recipients
Authorities
Purpose of personal data transfer
We only disclose personal data to law enforcement authorities or courts of competent jurisdiction when we are asked and legally obliged to do so (our page will display if we’re ever asked to do so).
Legal ground
Legal obligation
Category of data recipients
Other parties
Purpose of personal data transfer
We'll only disclose your personal data with others if you give us permission or if there's a legal reason to do so (e.g., we might share it with a legal representative).
Legal ground
Legal obligation, legitimate interest, or your consent.
5.1 In the preceding 12 months, we have disclosed strictly necessary personal data for an operational purpose to the following categories of third parties: Category of data recipientsPurpose of personal data transferCountry of the recipient
Marketing and application analytics service providers, such as Iterable, Firebase Analytics (by Google), Purchasely and Appsflyer.We use them to manage our contacts, automate our marketing, gather analytics.United States, Sweden, France, Ireland, United Kingdom.
Performance marketing service providers, such as Hasoffers (Tune Inc.).We use them to calculate our conversion attribution.United States
Third-party payment providers, such as Stripe, Adyen, Checkout, Coingate and similar.They help us to process payments together with our own authorized payment processing companies.United States, Ireland, British Virgin Islands.
Storage and infrastructure service providers, such as BigQuery (by Google).They help us to store, analyze, and manage data.United States
Live chat and support service providers, such as Zendesk.We use them to provide live chat technology and provide support to our users.United States
Security service providers, such as Cloudflare.We work with them to provide improved security and performance.United States
Providers that help us deliver the Alternative ID service, such as Telnyx.We work with them to provide you with Alternative ID services (such as Alternative Number).United States
Group companies.We share data with our group companies to support our daily operations and ensure Surfshark can continue providing you with Services.EEA, United States, United Kingdom.
Other Surfshark’s partners.We share your personal data with our distribution, reseller, and app store partners, each of which is an independent controller of your personal data.United States
Third parties whose services you buy through us.We may provide your personal data to the third parties that deliver the services you buy through us. We only share the minimum amount of data necessary (e.g. your email address) to enable you to receive the services you have requested. Each of these companies acts as an independent controller of your personal data.EEA, United States
5.2 There are a few more cases in which we can share your information with other authorized parties: Category of data recipientsPurpose of personal data transferLegal ground
Third parties (in case of corporate reorganization, bankruptcy or liquidation proceedings).If we undergo a corporate reorganization (like a merger, acquisition, or sale of our business), we may share personal data with the involved third parties (e.g., the buyer, their agents, and advisors) to help complete the transaction.When EU or UK data protection laws apply, our legal basis for this is our legitimate interest in conducting business, or your consent if required by law.
AuthoritiesWe only disclose personal data to law enforcement authorities or courts of competent jurisdiction when we are asked and legally obliged to do so (our page will display if we’re ever asked to do so).Legal obligation
Other partiesWe'll only disclose your personal data with others if you give us permission or if there's a legal reason to do so (e.g., we might share it with a legal representative).Legal obligation, legitimate interest, or your consent.
6. What choices do you have over your personal data?
We respect GDPR, CCPA, and other privacy legislation, and you can ask us to delete your personal data or implement other rights by emailing us at [email protected].
You may be aware that the GDPR, CCPA, and other privacy laws give certain rights to individuals in relation to their personal data. Accordingly, we have implemented additional transparency to help users take advantage of those rights.
As available and except as limited under applicable law, individuals have the rights described below:
RightDescription
Right to accessYou can access your personal data or receive a copy of it by contacting us.
Right to portabilityYou can ask us to provide you with a copy of your personal data in a structured, commonly used, and machine-readable format or, where it is technically feasible, to transmit that data directly to another controller. This right applies only where our processing, carried out by automated means, is based on your consent.
Right to rectificationYou can ask for the correction of inaccurate personal data and, subject to the nature of the collection and use, the completion of incomplete personal data.
Right to erasureRight to deletion of your personal data specified in Clause 2, unless we are legally required or we have a legal basis to maintain certain personal data.
Right to withdraw consentIf we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
Right to objectYou can object to us processing your personal data when we do so based on our legitimate interests.
Right to lodge a complaintIf you are located in the UK, you have the right to lodge a complaint with the Office. If you are located in the EU, you have the right to lodge a complaint with the relevant .
In addition to the above rights, the following rights (which may be subject to certain exemptions or derogations) shall also apply to individuals covered by the CCPA:
RightDescription
Right to Opt Out of Sale/SharingYou have the right to opt out of the sale or sharing of your personal information to third parties. However, we would like to inform you that we do not sell, rent, lease, or trade your personal data with anyone, nor do we plan to do so in the future.
Right to Non-DiscriminationYou have the right to not receive discriminatory treatment if and when you exercise your privacy rights under the CCPA.
Right to Limit Use of Sensitive Personal Information.You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes (e.g., fraud prevention). However, Surfshark does not process personal information in a manner that gives rise to this right.
7. How do we use cookies and other tracking technologies?
Most sites on the internet, including Surfshark’s, use cookies, pixels, web beacons, and other similar technologies (collectively called “cookies”), as they’re pretty convenient to help provide, protect, and improve our Services and Website. If you want to, you can reject those, but some things may not work completely or as well as they should.
You can check what cookies we use in our Cookie Policy which is an integral part of this Privacy Policy.
8. How do we protect personal data?
We really care about your security and privacy and do a lot to protect it. However, anyone who tells you that 100% anything-proof security is possible either doesn’t know much about it or is trying to mislead you. Please keep that in mind.
We have implemented appropriate organizational, physical and technical security measures, including SSL/TLS encryption for data transfers, hashed passwords, firewalls, and regular audits. We take all the reasonably necessary steps to ensure that your personal data is treated securely.
While we implement security measures on our Website and through our Services, you should be aware that 100% security is not always possible. Whenever you give out your information online there is a risk that a third party may intercept and use that information. While we strive to protect your information and privacy, we cannot guarantee 100% security of any information you disclose online. By using the Services, you expressly acknowledge and agree that we cannot guarantee the security of any information provided to or received by us through the Services and that any general information, other information, or information received from you through the Website or our Services is provided under your own responsibility.
9. Children’s data
We do not knowingly collect or solicit personal data from anyone under the age of 18.
We don't offer services to anyone under 18 and don't knowingly collect personal data from them. If you're under 18, please don't send us any personal data. If we find out that we have received personal data from someone under 18, we will delete it right away. If you believe that we might have any such data, please contact [email protected].
10. Who should you contact with questions or concerns?  
Our 24/7 Customer Support Team will help you out as soon as they can.
If you have any questions, concerns or complaints relating to this Privacy Policy and / or Surfshark Services, or you would like to exercise your privacy rights, please feel free to contact us at the following email address [email protected] or chat with us on the Website.
11. Are there any other terms you should know?
The English version of this Privacy Policy prevails.
While translations of this Privacy Policy may be provided in other languages, they may not be fully up-to-date or comprehensive. Thus, in case of any conflict between the English version and the translated versions of this Privacy Policy, the English version shall always take precedence.

No-Logs Policy

According to Surfshark, it does not keep logs of user activity or connection data. Its privacy policy states:

“Surfshark is based in the jurisdiction, which does not require information storage or reporting. We do not collect any information about what you do online (your visited IP addresses, browsing history, session information, used bandwidth, connection time stamps, network traffic, or any other similar information).”

It does store information about your IP address and which VPN server you connect to, but this is deleted once you end your session:

“Our servers do store information about your connection to a particular VPN server (user ID and/or IP address and connection time stamps), BUT this information is automatically deleted within 15 minutes after termination of your session. And be assured that no information is stored about the websites you visit.
However, Surfshark does collect:

  • Aggregated performance data
  • Frequency of use
  • Unsuccessful connection attempts and “other similar information”

Surfshark says this does not contain uniquely identifiable information and it is meant strictly for diagnostic purposes.

When using the app, you will be asked if Surfshark can collect your location data (only your wifi name), which is stored on your device to use the “auto-connect feature” for trusted wifi networks. Surfshark says: “Please rest assured that we do not share this information to any third party. In fact we do not store this information on our end and it is stored only on your device.”

Additionally, users who choose to purchase a Dedicated IP will be required to link their email address to it. However, Surfshark developed a solution for those wishing to remain private by creating an anonymous mode for Dedicated IP, which allows users to unlink their email address and ensure Surfshark remains unaware of the IP owner’s identity.

For the process of payments, Surfshark’s payment processing partners collect the usual data necessary for this, and Surfshark will only process small payment-related information (such as part of the credit card number or payment amount) for payment-related issues (like fraud prevention).
If you need complete anonymity, Surfshark offers the option of using cryptocurrencies.
In December 2022, Surfshark passed an independent audit by Deloitte that tested and confirmed Surfshark’s no-logs policy. Surfshark’ss no-logs claim is audit-verified but has not been tested under adversarial conditions (law enforcement or server seizure).

Privacy is among the main reasons for acquiring a VPN. Surfshark provides privacy and security by:

Audits

With Surfshark’s network containing thousands of servers, having an independent and expert third-party check and report on Surfshark’s claims is important to ensure users receive the service they expect.

Cure53, which is a Germany-based cybersecurity firm that has been running software tests and code audits for more than 15 years, has assessed Surfshark’s security twice, most recently in April 2021. The test took seven days over two weeks and found “no doubt that the Surfshark maintainers have a clear understanding of security and privacy challenges associated with being a VPN provider.” More recently, an independent audit was undertaken by Deloitte, in December 2022, to test Surfshark’s no-logs policy.

Surfshark passed, with Deloitte’s findings concluding:

“Based on the procedures performed and the evidence obtained, in our opinion, the configuration of IT systems and management of the supporting IT operations is properly prepared, in all material respects, in accordance with Surfshark’s description of its no-logs policy.”

Encryption

VPN Protocol Encryption Open Source Windows macOS iOS Android Linux
WireGuard ChaCha20-Poly1305 Yes Default
OpenVPN (UDP) AES-256-GCM Yes
OpenVPN (TCP) AES-256-GCM Yes
IKEv2/IPsec AES-256 No
Open-Source Client

The encryption cipher protects your traffic in transit. All ciphers listed here are considered secure by current standards. Open source protocols can be independently audited. The default protocol is what the app uses unless you change it.

A VPN hides your activities, data, and identity through encryption – which, simply put, is the practice of turning normal text into a ciphertext no one can read.

Surfshark uses AES-256 encryption, which is virtually impenetrable and the most effective encryption algorithm available. (It would take the world’s fastest computer billions of years to crack an AES-256 encryption!) As a result, AES-256 is one of the most respected encryption options you can get, used by the majority of big VPN providers, like ExpressVPN and NordVPN.

However, Surfshark also uses ChaCha20 encryption, depending on the protocol it uses. A protocol is a set of rules that determine how data will be moved over a VPN, including how it will be encrypted.

Surfshark uses IKEv2, OpenVPN, and WireGuard protocols, and will automatically recommend the best protocol for you depending on the device you’re using and your reasons for needing a VPN (though you can choose any of Surfshark’s available protocols in the app’s settings).

  • WireGuard is the newest and lightest protocol, which means it should be the fastest option.
  • IKEv2 is similar, and a great choice for on-the-go.
  • OpenVPN is often a great choice for routers.

IKEv2 and OpenVPN both use AES-256 encryption, whereas WireGuard uses ChaCha20. The key difference between AES-256 and ChaCha20 is how their ciphers convert text. ChaCha20 is believed to be faster, though it doesn’t yet have the same trustworthy reputation as AES-256 since it’s still fairly new.

Surfshark lets you choose the protocol your device uses in its app settings, so you can change your mind at any time.

DNS Leak Protection

In addition, Surfshark ensures DNS leak protection, so your activities and data should remain secure. If a VPN has DNS leaks, it means some of your activity and/or privacy data is not being encrypted and is therefore not anonymous or protected. You may not even know, as you’d expect the VPN to be working.

Each Surfshark server has its DNS with leak protection to prevent this from happening.

What Features Does Surfshark Offer?

Our Take
The feature set punches above its price point. Nexus (their proprietary server networking tech), IP Rotator, and Dynamic MultiHop are genuine innovations, not marketing rebrandings. CleanWeb handles ad/tracker blocking at the DNS level. The main gap: no split tunneling on iOS or Linux.
Surfshark Feature Comparison
Kill Switch WinMaciOSAndroidLinux
Split Tunneling WinMaciOSAndroidLinux
Dedicated IP
Multihop (Double VPN)
Ad/Tracker Blocker
Open-Source Client
Warrant Canary
P2P/Torrenting
Tor/Onion Support
Smart DNS
Obfuscated Servers
2FA/MFA
Post-Quantum Encryption (WireGuard)
Custom DNS
Developer Tools
Simultaneous Devices Unlimited
What Unique Features Does Surfshark Offer?
Unlimited Devices No limit on simultaneous connections per account Similar to: IPVanish
CleanWeb Blocks ads, trackers, malware, and phishing attempts Similar to: NordVPN, ExpressVPN, ProtonVPN
MultiHop (Dynamic) Route traffic through two VPN servers in different countries Similar to: NordVPN, ProtonVPN
Nexus Server network technology routing traffic through multiple servers simultaneously Only at Surfshark
IP Rotator Automatically changes exit IP address every 5-10 minutes without disconnecting Only at Surfshark
Camouflage Mode OpenVPN-based obfuscation that makes VPN traffic look like regular web traffic Similar to: VyprVPN, Astrill VPN
NoBorders Detects network restrictions and provides optimized server list for censored regions Only at Surfshark
Alternative ID Generates alternative email address and virtual identity for website registrations Only at Surfshark

Surfshark is stuffed with useful features. This includes the basic VPN features you would expect from any provider, such as DNS leak protection, secure encryption, and an automatic kill switch.
On top of that, Surfshark offers additional special features of its own, to help keep your data and privacy secure (though not all of these are available on all platforms):

CleanWeb 2.0

(Available on browsers Chrome, Firefox, and Edge.)

CleanWeb 2.0 is Surfshark’s new, upgraded ad and tracker blocker. Combining four key features into one, CleanWeb 2.0 can be used as an ad blocker, cookie pop-up blocker, data breach alert, and malware alert. By blocking ads and malware before they can load, CleanWeb 2.0 also helps save mobile data and boost browsing speeds.

Regular CleanWeb is available with the VPN app on iOS, macOS, Android, Windows, Linux, and Fire TV. However, this lacks CleanWeb 2.0’s ability to block video ads, its integrated cookie pop-up blocker, or offer data breach and malware alerts.

Kill Switch

Surfshark Kill Switch & Split Tunneling
Platform Kill Switch Split Tunneling
Windows Internet-level No always-on App-based, Inverse
macOS Internet-level No always-on App-based, Inverse
iOS Internet-level No always-on Not available
Android Internet-level Always-on App-based, Inverse
Linux Internet-level No always-on Not available

(Available on Android, iOS, macOS, and Windows.)

If your VPN connection unexpectedly disconnects, Surfshark’s Kill Switch will automatically cut you off from the internet to prevent any information from being leaked. This can be turned on and off in settings.

Camouflage Mode

(Available on Android, iOS, macOS, Windows, and Linux.)
Camouflage mode disguises your connection to look like regular browsing traffic, so even your internet service provider can’t tell you’re using a VPN. This helps you bypass any content filtering, especially if your country blocks VPN ports.

Override GPS Location

(Available on Android)
Location override lets you match your GPS location to the Surfshark server you’re connected to. This can be useful if you need to use an app that only provides a service in certain countries.

NoBorders

(Available on Android, Windows, macOS, and iOS.)
If NoBorders detects you’re connected to a network with certain restrictions (usually enforced by the country you’re in), it can help you find servers that will work the best.

Obfuscated Servers

Obfuscated servers hide the fact that you’re using a VPN, by making your internet traffic look like regular traffic. You might need this to unblock your VPN so it can work in the first place if you’re in a country that places restrictions on the use of VPNs, but also to hide your use of a VPN from your internet service provider, prevent government tracking, and bypass any blocks strict internal networks may have placed on VPN usage to ensure you can get internet access.

Multi-Hop Servers

(Available on Android, Windows, macOS, and iOS.)

Instead of connecting to just one server at a time, Multi-Hop switches your connection from one server to another across multiple countries at a time, enabling a greater level of ID protection and footprint masking.

Pause VPN

(Available on Android and iOS – and coming soon to Windows and macOS)

Using a button on your app’s connection screen, you can choose to pause your VPN for 5, 30, or 120 minutes. During this time, your entire internet traffic will skip the encryption and private tunneling part of your VPN, but you won’t be disconnected from it.

Your connection will automatically resume after the selected time is up.

IP Rotator

(Part of Surfshark’s new Nexus technology, being rolled out gradually across 2022 and 2026)

To prevent privacy concerns from having the same IP address when connected to a VPN for a long period, IP Rotator changes your IP address periodically, without disconnecting you from the VPN network. This makes you even more difficult to track than with a standard VPN.

Dedicated IP

(Available on Windows, macOS, Android, and iOS.)

VPN services usually provide their users with a new IP address for each session. As a result, the one used by you today could be used by someone else tomorrow.

Surfshark now offers the option to have a dedicated IP address – one unique and anonymous to the user that doesn’t change. No one else will be able to access or associate you as the owner of the IP, but it prevents websites from blacklisting unstable IPs or from thinking you’re a bot and triggering interrupting verifications like CAPTCHA requests.

Currently, Surfshark’s dedicated IPs exist in a few locations, including Los Angeles, New York, Dallas, and San Jose in the US, as well as in the UK, Netherlands, and Germany. Availability is limited, so not every location may be guaranteed for purchase, but Surfshark says it’s working on making more countries available soon.

It should also be noted that Surfshark’s dedicated IPs have an additional monthly cost, with users required to pay an extra $3.75 a month.

Manual WireGuard Connection

Instead of using the WireGuard protocol through the Surfshark app, you can also opt to use it for manual connections.

Manual connections allow for a faster and more stable connection on devices not compatible with the Surfshark app, provide a faster connection on compatible routers, protect all devices without affecting network speed, and allow users in countries with VPN restrictions to access WireGuard benefits.

Alternative ID

Alternative ID is a feature that gives you a new identity and email to use online protecting your real identity online. You give information about the persona you want to create and it gives you a new email address and profile. This prevents your real information from falling into malicious sites and databases safeguarding your identity.

This feature is available for all plans – VPN, Surfshark One and Surfshark One+.

Graphical User Interface (GUI)

(Available on Linux)

The Surfshark app for Linux provides a genuine GUI, meaning users can browse, connect to, and mark their favorite servers without having to enter a single into the terminal. It also allows seamless switching between OpenVPN and WireGuard, without the need to adjust any settings.

How many Servers does Surfshark have?

Surfshark has 4,500+ servers across 100 countries, on six continents.
The further the server is from your actual location, the slower your internet speed will be, so it’s good to have a wide selection of servers available, and Surfshark’s should be enough for most users. Additionally, Surfshark claims its number of servers is continually growing. 

Most of the servers offer P2P support, URL and ad blocking, VPN chaining, and split tunneling. All servers will support your choice of VPN protocol.
When you open the Surfshark app, you will also be able to choose between the different types of servers: Locations, Static IP, or MultiHop.
mac_locations.png

Which one to choose depends on your preferences. Static IP means you always have the same IP address, whenever you use that specific server and reconnect – this gives you faster speeds and better access to geo-restricted content. On the downside, that IP address is also always linked to you.

The MultiHop option gives you better security, by sending traffic through two different servers. Users’ speeds will be slower, but the IP address is masked better. This is also known as a Double VPN.

All of Surfshark’s servers are 100% RAM only – Surfshark is one of the first VPN providers in the industry to upgrade all its servers to a RAM-only infrastructure. RAM-only servers are more secure as no information can physically be taken from them (should any malicious third party gain access to them), and any information on the hard drive is automatically wiped off whenever the server is turned off.

Additionally, every server on Surfshark’s network offers private DNS, as well as leak protection when using the IPv4 stack, ensuring your requests won’t be accessible in an unencrypted format.

Surfshark has also recently introduced its new Nexus technology which connects all of Surfshark’s VPN servers into a single, global network. This means, that instead of going through a single VPN tunnel, your traffic is routed through an entire network of servers. As a result, your VPN’s security and privacy are improved, its performance is stabilized, and the connection speed is enhanced.

Defense Against Malware and Data Breaches

Malware is software (like a program or file) that is harmful to your computer and could be used by scammers to steal your data. You can get malware through a variety of ways, but some of the most common are by accidentally clicking on an infected website or email, or by downloading an infected file.

VPNs can’t always help against malware, as they don’t prevent you from opening links or making downloads. However, Surfshark could help prevent malware from carrying out its intended task by making it harder for the malware to connect with its handler to transfer data or receive commands.

Additional Protection

For greater protection, Surfshark has an antivirus feature in its Surfshark One bundle, which you can add to your VPN subscription for an additional monthly cost. This will notify you immediately should you download any malicious files, schedule scans to check for malware, and remove any threats in real-time before they can harm your device. It will also inform you if any databases containing your sensitive data (such as email, password, ID, or bank information) have been breached.

In addition, Surfshark One subscribers have access to Incogni. This tool contacts data brokers (organizations that collect and sell data) to request they delete any data they have on you. This should help prevent online marketing ploys from targeting you.

Incogni: Personal Data Removal Service

Surfshark recently introduced Incogni, a personal information removal service to help you take back control of your data. Incogni allows you to opt out of the collection and sale of your personal information by data brokers and people search sites.

Typically, the steps required to remove yourself from the internet are a hassle to deal with. But Incogni makes the process easier. By removing your personal information, you can lower your risk of invasion of privacy, scams, and even identity theft. What’s more, it’s the most comprehensive data removal service on the market and is fully automated.

The prices of Incogni are:

  • 1-month plan for $12.99/mo (plus tax);
  • 1-year plan for $6.49/mo (billed $77.88 annually (plus tax)).

We haven’t tried Incogni yet, but once we’ve completed our test, we’ll post our results on this review.

Bypasser (Split Tunneling)

(Available on Android, Windows 7,8, 10, 11, and routers.)

Bypasser is what Surfshark calls VPN split tunneling (and is very similar to whitelisting). It allows you to choose which information uses the VPN connection (and is therefore encrypted) and which can be transmitted via the standard internet.

This is useful if you find some sites are slow on the VPN, as you can make those run faster by having them bypass the VPN, while other services you use remain protected. It’s also helpful if a legitimate site, like your bank, needs to confirm your real location.

Reverse Bypasser (Route via VPN)

(Available on Android, Windows 7,8, 10, 11, and routers.)

In contrast to the standard Bypasser, Surfshark’s Reverse Bypasser allows you to choose which sites will only go through the VPN (and therefore will always be encrypted). Any other apps and websites will be able to see your real IP address.

P2P Servers

Peer-to-peer (P2P) networks allow all connected computers access to all or some part of the same resources and data. This lets you share files fast and safely, without the use of a central server (known as torrenting).

All Surfshark servers support P2P traffic.

Which Apps & Devices Are Supported?

Our Take
App support is comprehensive across all major platforms, including browser extensions for Chrome, Firefox, and Edge. Router support means you can cover devices that can't install VPN apps directly. The unlimited device policy eliminates the usual headache of choosing which devices to protect.

Here are some other questions our readers have asked us about Surfshark.

How to Install

Surfshark has an app for each of the platforms it’s available on (iOS, Android, macOS, Windows, Amazon Fire TV), so installing it is as simple as clicking “download” on the relevant app store for your device. Each option is linked on Surfshark’s website, so you don’t even need to search for it.

There are also dedicated user guides for each app, platform, and browser extension on Surfshark’s “Setup & Installation” section within its Help Centre.

If you’re unable to install the app, there are walk-through guides on how to install Surfshark manually.

Setting up on a router is slightly more complicated, as you can’t simply download an app. However, even this isn’t particularly complicated, if you follow one of the many step-by-step illustrated guides Surfshark offers.

Though it depends on the exact router you’re using (and Surfshark explains how to find out if your router is compatible), you should just need to find your Surfshark credentials (which can be located in the “setup” part of your Surfshark account), choose a server, and then configure your chosen protocol. Again, this is all explained in detail in the “Router” section of Surfshark’s Help Centre.

VPN Server Locations

Our Take
The server network covers 100 countries - more than most competitors. All servers are RAM-only (diskless), which means they can't store data even if seized. Physical server locations are supplemented by virtual servers in some regions for better coverage.

Surfshark has servers in 100 countries across 6 continents. Last updated: 29/03/2026

VPN Server Locations: Surfshark
Simple World MapAuthor: Al MacDonald Editor: Fritz Lekschas License: CC BY-SA 3.0 ID: ISO 3166-1 or "_[a-zA-Z]" if an ISO code is not available
FewMany No servers

Surfshark has servers in 19 US states across 24 cities . Last updated: 29/03/2026

US Server Locations: Surfshark
1 city3+ No servers

US Server Locations

Customer Support

Our Take
Live chat support is available around the clock and generally responds within minutes. The knowledge base is well-organized. No phone support, which is standard for VPN providers at this price point.

Live Chat

Surfshark offers 24/7 live chat with support agents who can help with technical issues, billing questions, and setup guidance. It’s the fastest way to get help at any hour.

Email Support

You can also reach Surfshark’s support team via email for less urgent queries or issues that need more detailed investigation.

Knowledge Base

Surfshark maintains a comprehensive Help Center containing step-by-step guides and video instructions for everything from getting started and common issues, to billing and account questions. It also has an impressive range of setup guides and tutorials for all supported platforms and devices, including routers.

Each help article shows when it was last updated, with the majority checked within the previous two weeks. The longest gap we found was three months.

Community & Forums

Surfshark maintains an active blog with new articles posted every couple of weeks, usually covering important service updates or helpful tips on VPN technology.

Who Isn’t Surfshark Right For?

Based on our testing and research:

9-Eyes jurisdiction – Surfshark is based in the Netherlands, a member of the 9-Eyes intelligence-sharing alliance. While Surfshark maintains a no-logs policy audited by Deloitte, users in high-risk situations – journalists, activists, whistleblowers – may prefer a VPN based outside this alliance entirely.

Consider instead: Proton VPN (Switzerland) or IVPN (Gibraltar)

Corporate consolidation – Surfshark merged with Nord Security in 2022. Both brands now operate under the same parent company. While they are run as separate services, users who prefer independently-owned providers should consider Proton VPN or Mullvad instead.

Consider instead: Proton VPN or Mullvad

Fewer independent audits – Surfshark launched in 2018 and has completed two Deloitte audits. Established competitors like NordVPN (4 audits) and ExpressVPN (4 audits including server architecture) have longer audit histories. For users where audit depth matters, this is a relevant gap.

Surfshark Competitors

Surfshark ExpressVPN NordVPN CyberGhost Private Internet Access
Best rate $1.99/mo $3.49/mo $3.09/mo $2.19/mo $2.19/mo
Monthly price $15.45 $12.99 $12.99 $12.99 $11.99
Servers 4,500+ 3,000+ 8,400+ 9,700+ Undisclosed
Countries 100 105 167 100 90
Devices Unlimited 8 10 7 Unlimited
Jurisdiction 🇳🇱 Netherlands 🇻🇬 BVI 🇵🇦 Panama 🇷🇴 Romania 🇺🇸 USA
Money-back 30 days 30 days 30 days 45 days 30 days
Kill switch
Split tunneling
No-logs audited
Dedicated IP
Open source
RAM-only servers
Ad/tracker blocker
Our rating 8.2/10 8.6/10 8.8/10 7.4/10 7.2/10
Review Read review → Read review → Read review → Read review → Read review →

Our Verdict

Our Take
Surfshark delivers the best value proposition in the VPN market right now. Unlimited devices, competitive speeds, a Deloitte-audited privacy policy, and genuine feature innovation - all at one of the lowest prices among premium providers. The trade-offs (newer track record, Netherlands jurisdiction, some platform feature gaps) are worth weighing, but for most households, Surfshark is the smart pick.

Based on our hands-on testing and data analysis, here is our overall assessment of Surfshark.

How we tested Surfshark Review: Unlimited Devices, 4,500+ Servers, $2.19/Month
🔒 Purchased with our own money (no free accounts)
🧪 3 leak tests: IP, DNS, WebRTC
📊 Scored using published methodology
💰 Affiliate partnerships do not influence scores
44,748 VPN tests run on this site · latest 19 Jul 2026
💡 We read every privacy policy in full

Frequently Asked Questions

Is Surfshark trustworthy?

Yes, Surfshark is trustworthy. Being based in the Netherlands, Surfshark is legally bound to comply with strict GDPR standards, and its comprehensive no-logs policy has been confirmed with multiple independent audits.

In addition, Surfshark uses RAM-only servers that each have their own DNS leak protection and obfuscation settings, and when paired with Surfshark’s industry-standard encryption, choice of protocols, and privacy-focused features (such as IP rotator and camouflage mode), its VPN is a secure choice.

What’s Surfshark’s company history?

Surfshark is a cybersecurity company based in the Netherlands, focused on developing humanized privacy and security solutions.
Its VPN service launched in 2018 and is now one of the major VPN brands worldwide, having grown to include the new WireGuard protocol, an additional package of antivirus and alert features (known as its Surfshark One bundle), and a single, global network of 100% RAM-only servers spanning 100 countries across Europe, America, Asia, and Middle East & Africa.
In 2022, Surfshark merged with Nord Security (which owns the VPN brand NordVPN), at which time it received a valuation of $1.6 billion. NordVPN and Surfshark remain separate, independent businesses, though both are two of the five founding members of the VPN Trust Initiative, which aims at fostering cooperation in the VPN industry.

Can you be tracked using Surfshark?

No. There is no way to be tracked using a Surfshark, as long as the VPN is encryption and working as expected. Surfshark uses industry-standard AES-256 encryption and ensures DNS leak protection, so your web traffic, data, and traffic cannot be tracked while you are connected to Surfshark.

In addition, Surfshark offers extra features that ensure users’ privacy and anonymity, such as camouflage mode, multi-hop, IP rotator, and obfuscated servers.

Can you use Surfshark for Netflix?

Yes, Surfshark can be used for Netflix. Once you have active subscriptions for both Surfshark and Netflix, install Surfshark on the device or router you want to watch Netflix on. Once installed, connect to the VPN, and then open and log into your Netflix account. You can now securely stream all your favorite shows on Netflix.

For smart TVs incompatible with apps, you can use Surfshark’s Smart DNS setting to change your virtual location while streaming.

What is the monthly fee for Surfshark?

Surfshark’s monthly fee depends on the length of the subscription plan you choose, with the monthly price cheaper the longer you’re signed up. For the basic Surfshark Starter plan, monthly prices range from $15.45 to $1.99 if you pay for 24 months (+3 months free) upfront. Please note that any plan longer than one month is billed as one lump sum, and the prices don’t include tax.

Please see our “Surfshark Plans and Pricing” section above for more details.

Is Surfshark safe?

Yes, Surfshark is safe. It uses industry-standard AES-256 encryption, ensures DNS leak protection, and maintains 100% RAM-only servers. This means your data is virtually impossible to decrypt, and nothing is kept on the servers themselves should hackers gain physical access to them.

In addition, Surfshark upholds a strict no-logs policy, which has been tested and verified through multiple independent audits, and is based in a country within GDPR jurisdiction.

What is the difference between Surfshark and PureVPN?

Surfshark and PureVPN are both secure VPN providers that work across the majority of platforms and devices, with a similar price structure. While PureVPN offers more servers, Surfshark’s network spans more countries and all of its servers are 100% RAM-only, meaning they’re safer and more secure.

A Surfshark subscription also allows users to connect an unlimited number of devices simultaneously, whereas PureVPN restricts users to a maximum of 10 devices.

8.2 / 10 Excellent

Unlimited devices at a rock-bottom price. Good enough for most people, not the best at anything.

Best for: Families and multi-device households on a budget
Not for: Privacy purists (Netherlands is 9-Eyes, owned by Nord Security)
Leak Tests No-Logs Audit Kill Switch Split Tunneling Jurisdiction Open Source
From $1.99/mo (best plan)
$15.45/mo if paying monthly
30-day money-back guarantee
Our rating scale
Rating Rubric
9 - 10Exceptional - best in class, no significant weaknesses
8 - 8.9Excellent - highly recommended with minor trade-offs
7 - 7.9Good - solid choice for most users
6 - 6.9Adequate - works but has notable limitations
5 - 5.9Below average - consider alternatives
Below 5Not recommended

Update history

This page was revised 51 times between June 2021 and April 2026.

Added corporate structure references with links to ownership records.

Restructured Customer Support section with dedicated subsections for live chat availability, email support, and the Help Center's step-by-step guides and video tutorials.

Linked device and money-back guarantee references to verified hub data so figures stay current.

Added WireGuard protocol details with Nexus networking architecture, Deloitte-audited privacy credentials, Netherlands jurisdiction context, and unlimited device support across all platforms.

Added company background section covering Surfshark's 8-year history since 2018.

Added RAM-only server infrastructure detail explaining how Surfshark's diskless servers protect user data.

Added ecosystem overview showing Alternative ID, Surfshark Antivirus, Surfshark Alert, and 3 more bundled products available alongside the VPN subscription.

Added table of contents with section-by-section navigation for faster access to specific topics.

Updated server network overview covering 4,500 servers across 100 countries, with interactive coverage map and nearest-server highlighting.

Redesigned quick-reference spec table showing unlimited simultaneous connections, 4,500 servers, 100 countries, AES-256-GCM encryption, and 30-day money-back guarantee.

Added source citations and verification dates to all factual claims in the Surfshark review.

Added policy change monitoring showing recent updates to Surfshark's privacy policy with paragraph-level diffs.

Added transparency tracker with transparency report data showing government and DMCA request volumes.

Reordered sections to match how readers evaluate a VPN: streaming first, then speed, privacy, features, and pricing.

Expanded privacy section with Netherlands jurisdiction analysis, Deloitte-audited no-logs policy (2 independent audits).

Improved pros and cons with more specific language grounded in test data and verified claims.

Added curated "Not Right For" section with severity-coded concerns addressing speed and compatibility limitations.

Removed outdated editorial commentary and unverifiable claims from the Surfshark review.

Added payment methods section for Surfshark covering accepted cards, digital wallets, and cryptocurrency options.

Rewrote protocol comparison covering WireGuard, OpenVPN (UDP), OpenVPN (TCP), IKEv2/IPsec with per-platform availability and security ratings.

Added platform compatibility breakdown for Surfshark showing kill switch and split tunneling availability per operating system.

Added ownership transparency section identifying Nord Security as parent company, with links to NordVPN as sibling brands.

Reorganized review content into clearer sections, moving misplaced blocks and removing layout inconsistencies.

Replaced static overview tables with live data-driven spec cards for Surfshark, ensuring pricing and server counts stay current.

Added pros/cons table, detailed overview specifications table covering 17 key features, streaming compatibility information across 8 gaming platforms and 10+ services, and expanded platform support details.

Removed verbose introductory paragraphs and restructured opening with clearer, more direct language about Surfshark's key strengths.

Restructured introduction by removing redundant opening statement and condensing overview into clearer, more focused narrative.

Restructured opening paragraphs for improved flow, added pros/cons table and overview table with 16 key specifications, expanded streaming section with platform and service compatibility details.

Restructured introduction by removing redundant opening paragraph and replacing vague phrasing with clearer, more direct language about Surfshark's market position and review scope.

Reorganized and expanded the introduction with a pros/cons table, detailed specifications overview, and restructured section headings for improved clarity and navigation.

Restructured opening paragraphs for improved clarity and removed "comprehensive" descriptor from review introduction.

Restructured introduction with improved clarity and flow, reorganized Pros & Cons table, and added overview table with key specifications including server count, encryption protocols, and supported platforms.

Reorganized introduction paragraphs for improved flow and removed "comprehensive" descriptor before "Surfshark review."

Rewrote opening paragraph for clarity and removed "comprehensive" descriptor from review introduction.

Restructured opening section with clearer headline and improved introduction flow, reorganized pros/cons with supporting callouts, and added overview table with key specifications.

Rewrote introduction to be more concise, removed "comprehensive" descriptor, and reorganized opening paragraphs for better flow.

Restructured introduction, added brand background section with company history and GDPR compliance details, created pros/cons list, and added overview table with specifications.

Restructured opening paragraphs for better flow, added brand background section with company history and GDPR compliance details, and created overview table with 16 key specifications.

Restructured introduction by moving opening summary sentence to standalone paragraph, expanding brand background section with company history and regulatory compliance details.

Restructured introduction, expanded brand background with merger details and GDPR compliance information, and added overview table with 16 key service specifications.

Restructured introduction by expanding brand background section with merger details, GDPR compliance explanation, and VPN Trust Initiative membership while streamlining opening paragraphs.

Restructured introduction with expanded company background, added pros/cons section, and created overview table with 16 key specifications.

Restructured opening section by moving introductory paragraph before pros/cons list and reorganizing content flow for better readability.

Restructured introduction by breaking up a lengthy paragraph into multiple focused sections with clearer hierarchy and added a quick-reference pricing callout.

Restructured opening section by moving introductory overview higher in the page and expanding the pros & cons list with three new items.

Added introductory paragraph, pros/cons list, detailed overview table, and streaming compatibility section to provide readers with quick reference information.

Corrected spelling error "Suirfshark" to "Surfshark" and fixed incomplete sentence about OpenVPN protocol options.

Corrected spelling of "Surfshark" and fixed platform typo ("Linus" to "Linux"), plus rewrote multiple sections for clarity and added detailed testing data on DNS leaks.

Added Surfshark review content including pricing, features table, advantages list, leak testing results, logging policies, protocol details, and streaming capabilities analysis.

Corrected grammar ("That is not lost on Surfshark" phrasing), fixed incomplete sentence in Protocols section, and clarified logging policy language throughout.

Corrected 3 spelling errors ("1,99" to "$1.99", "know" to "known", "ap" to "app") and removed redundant text about unique user IDs.

Show all 51 updates (48 more)

Who Owns Surfshark?

Nord Security Lithuania / Panama

Nord Security Inc.

Surfshark was acquired Feb 2022.

Also owns NordVPN, Atlas VPN.

Key People
Tomas Okmanas Co-founder & Co-CEO
Eimantas Sabaliauskas Co-founder
Quick Facts
Founded 2012
~2,000 employees
Notable Events
Oct 2019 Breach Data center breach disclosed (Finland server, 2018). Server provider compromised via expired remote management credentials. No user data affected.
Not quite right? Consider these alternatives
Trust No One (Test Yourself)

Run our independent leak test while connected to your VPN and see the results for yourself. We check for IP, DNS, and WebRTC leaks in under 30 seconds. Every test adds to our public dataset.

Join Our Test Panel →

Surfshark Alternatives

Considering Surfshark? See how it compares

Based on independent testing data and specifications from each provider.

CyberGhost

Streaming with huge server network

9,700+ servers100 countries
Read our CyberGhost review →

IPVanish

Unlimited connections on a budget

3,200+ servers113 countries
Read our IPVanish review →

NordVPN

All-round protection

8,400+ servers167 countries
Read our NordVPN review →

Compare all VPNs →

How we test VPNs

Our testing process involves purchasing each VPN with our own money and installing it on Windows, macOS, and mobile devices. We run a three-stage leak test (IP, DNS, and WebRTC) multiple times across different servers to check for data exposure.

We also test streaming access, kill switch reliability, and split tunneling functionality. All testing is conducted without notifying the provider. Specifications and pricing are verified directly from the provider's website.

Our full testing methodology is published at vpntesting.com/methodology.