Surfshark Review: Unlimited Devices, 4,500+ Servers, $2.19/Month

8.2 Excellent

Unlimited devices at a rock-bottom price. Good enough for most people, not the best at anything.

Best for: Families and multi-device households on a budget Not for: Privacy purists (Netherlands is 9-Eyes, owned by Nord Security)
Leak Tests No-Logs Audit Kill Switch Split Tunneling

Connect unlimited devices with high, reliable speeds and an impressive array of features, all in one easy-to-use package.

Being relatively new to the VPN market, Surfshark has had to quickly prove it’s reliable, trustworthy, and one of the fastest VPN services around, to make it capable of being one of the best.

With its simple interface amidst proficient privacy and security standards, an extensive list of additional features, and an unlimited number of devices that can be connected.

But just how good is it? Our comprehensive Surfshark review delves deep, to help you decide whether the new provider delivers on its promises and if it can be trusted, as well as investigating how much Surfshark costs and if its features are worth their price tag.

Get Surfshark Now
30 days Money-back guarantee - cancel anytime, no questions asked.

Reviewed by VPNTesting.com Research Team | Fact-checked by Editorial | Last verified: 31 March 2026 | Backed by 28,947+ real-world leak tests | Independently AuditedOwnership Verified | Why trust us?
Jump to section
8.2 Our rating
💰 $1.99/mo Best price
🌐 4,500+ Servers
🌎 100 Countries
💻 Unlimited Devices
🇳🇱 Netherlands Jurisdiction
💳 30 days Money-back

Surfshark Pros & Cons

Surfshark Specifications
Best Price
$1.99/mo
$15.45/mo monthly
Free Trial
7-day free trial on mobile (iOS and Android via app stores)
Refund Policy
30-day money-back guarantee
Devices
Unlimited
Servers
Countries
🇳🇱 Netherlands (outside 14-Eyes)
Founded
2018 (8 years ago)
Encryption
DNS Features
CleanWeb
Support
24/7 live chat and email
Windows · macOS · iOS · Android · Linux
Kill switch · Split tunneling · Open source
What we like
  • Fast connection speeds
  • Unlimited devices
  • No logs policy
  • Private DNS and leak protection
  • 24/7 customer support
What could be better
  • Not all features available on all platforms
  • Antivirus features and dedicated IP cost extra
Best for: Large households or users with many devices - unlimited simultaneous connections on one account
Not ideal for: Users who need a long track record - Surfshark launched in 2018 and has fewer independent audits than established competitors

Surfshark by the Numbers

Our Take
Surfshark's numbers look strong on paper - 4,500+ servers across 100 countries with unlimited devices. The server count trails NordVPN and CyberGhost, but 100 countries gives you solid geographic reach. The unlimited device policy is the real differentiator here: most competitors cap at 5-10.

Surfshark Feature Scores

Scored across 5 dimensions we test
Surfshark Market Average (29 VPN providers)
How we score
Speed
Based on our speed testing: Very Fast = 9, Fast = 7, Moderate = 5, Slow = 3.
Coverage
Number of countries with servers: 100+ = 10, 60+ = 9, 45+ = 7, 30+ = 5, 15+ = 3.
Value
Best available monthly price (inverted): $2/month = 10, $5 = 6, $10+ = 3.
Capacity
Simultaneous device connections: Unlimited = 10, 10+ = 9, 7+ = 7, 5 = 5.
Server Density
Total server count: 10,000+ = 10, 6,000+ = 9, 3,000+ = 7, 1,000+ = 5.
Surfshark vs Typical VPN Compared against the average of 29 VPN providers we track
Our rating 8.2 +1.5
Best price $1.99/mo -$1.42
Servers 4,500 +48%
Countries 100 +31%
Money-back 30 days +2d
Surfshark Industry average
How we score
Our Rating
Editorial score (1-10) based on hands-on testing across speed, privacy, features, and value.
Best Price
Lowest available monthly rate on any plan length. Lower is better.
Servers
Total server count as reported by the provider. More servers generally means less congestion.
Countries
Number of countries with at least one server. Wider coverage means more unblocking options.
Money-back
Length of the money-back guarantee in days. Longer guarantees mean lower risk.

Plans, Products & Prices

Our Take
Surfshark is one of the cheapest premium VPNs on the market if you commit to a 2-year plan. The catch: the "One" and "One+" tiers bundle features like antivirus and data breach monitoring that you may not need. The Starter plan covers the VPN essentials at the lowest price point.

The basic Surfshark plan, Surfshark Starter, offers three types of subscription lengths:

  • 1 month – $15.45
  • 12 months (+3 months free) – $2.79, billed annually
  • 24 months (+3 months free) – $1.99, billed for 24 months

Surfshark’s features are the same, regardless of which subscription length you choose – so all options include the ability to connect an unlimited number of devices. This means the most cost-effective option is to sign up for the 24-month (+3 months free) plan for the price of $1.99.

All plans automatically renew as a yearly plan.

It should be noted that the prices above are excluding tax, so that will be an additional cost at checkout. The tax amount varies as per the US state that you live in.

 

Free Trial

Surfshark offers a seven-day free trial via the Google Play Store and Apple App Store. This means only Android, iOS, or macOS users can benefit. However, once you’ve signed up for the trial on one of these platforms, you can access Surfshark on any other device regardless of its operating system.

To access the free trial, users need to download the app from either of those stores and choose “Start free trial”. You will then need to create an account and select the 12-month option.

Although the first seven days are free, you’ll need to provide a payment method when signing up. This will schedule an automatic renewal for the 12-month subscription at the end of your seven-day free trial.

If you cancel before the end of your free seven days, you won’t be charged. If you forget, you can still request a refund through the 30-day money-back guarantee.

What is Surfshark’s Refund Policy?

All Surfshark subscriptions bought through their official website come with a 30-day money-back guarantee. Monthly subscriptions may be refunded within the first 30 days only after the initial purchase.

Additionally, those who purchase the 12- or 24-month plans (and have the auto-renewal option on) will again be eligible to apply for the 30-day money-back guarantee after each renewal.

To claim a refund, you must contact Surfshark’s Customer Support team via email or live chat within 30 days of the initial purchase.

However, if you paid for a subscription through an Apple or Amazon store (eg Apple App Store), you must contact the specific store for a refund based on their refund policies. Surfshark is unable to refund any purchases made through a third party.

You should also note that prepaid cards or gift cards can not be refunded either.

If you paid using cryptocurrency, the equivalent amount in US Dollars will be refunded in the same cryptocurrency based on the rate of exchange at the time of the refund.

Surfshark One

Surfshark One is a bundle that’s designed to enhance your privacy and security online. It provides four features packaged into a single account to protect yourself from viruses, malware, data leaks, and privacy threats.

In addition to Surfshark’s VPN (and Alternative ID), Surfshark One also includes antivirus protection, search protection, and fraud alerts:

Surfshark Antivirus

Surfshark Antivirus provides real-time scanning and 24/7 protection from viruses and malware, protection against computer camera hacking, and cloud protection.

The antivirus software simultaneously scans all five devices connected via Surfshark VPN at once and, true to the company’s VPN heritage, it doesn’t collect any personal data.

Surfshark Antivirus has picked up some powerful endorsements:

  • Certified by Virus Bulletin, a security benchmarking, testing, and certification firm.
  • Certified by AV-Test, another cybersecurity testing company.
  • Part of Microsoft Virus Initiative (MVI), a team that helps make antivirus/antimalware products integrate better with Windows devices.

Surfshark Search

Surfshark’s search tool doesn’t track or store your data and provides ad-free organic search results only, allowing you to browse in complete privacy. Surfshark Search has no ads, no logs, and no trackers.

Surfshark Alert

Surfshark Alert is a smart tool that automatically monitors your emails, credit cards, and personal IDs, plus scans for breached databases, and notifies you with real-time alerts when it detects  any breaches related to your personal information.

Pricing

The prices for the Surfshark One bundle (excluding tax) are:

  • 1-month plan for $14.99/mo
  • 1-year plan (+3 months free) for $3.19/mo
  • 2-year plan (+3 months free) for $2.69/mo

Surfshark One+

Surfshark One+ offers all the features offered by Surfshark One. These are Surfshark VPN and Alternative ID, Surfshark Antivirus, Surfshark Search, and Surfshark Alert. Additionally, it offers the Incogni product which removes your data from databases.

It removes data from company databases preventing them from sending email campaigns and targeted ads. It also offers data removal from search sites preventing phishing attacks and identity theft.

The prices of the Surfshark One+ bundle (excluding tax) are:

  • 1-month plan for $17.95/mo
  • 1-year (+3 months free) plan for $5.09/mo (billed annually)
  • 2-year (+3 months free) plan for $4.29/mo (billed for 24 months)

How Do the Plan Tiers Compare?

Surfshark Plan Tiers
Starter One Their pick One+
Best rate $2.24/mo $2.80/mo $4.71/mo
Monthly rate $15.45/mo $17.95/mo $20.85/mo
Devices Unlimited Unlimited Unlimited
VPN
Alternative ID
Surfshark Antivirus
Surfshark Alert
Surfshark Search
Incogni
Alternative Number
Bundle premium vs base $0.00 +$0.56/mo +$2.47/mo
See Starter plan See One plan See One+ plan

How Does This Compare to Other VPN Bundles?

How Does Surfshark Compare to Other VPNs?

Provider Best rate Monthly Money-back Rating
Surfshark $1.99/mo Lowest $15.45/mo 30 days ★ 8.2
ExpressVPN $3.49/mo $12.99/mo 30 days ★ 8.6
NordVPN $3.09/mo $12.99/mo 30 days ★ 8.8
CyberGhost $2.19/mo $12.99/mo 45 days ★ 7.4
Private Internet Access $2.19/mo $11.99/mo 30 days ★ 7.2
Prices shown are the best available rate on long-term plans. Monthly rates shown for comparison.
Surfshark's Consumer Offering
Product Type Plan Tier Extra Cost Availability
Alternative ID Identity Protection All plans Included Global
Surfshark Antivirus Antivirus One plan Bundled Global
Surfshark Alert Data Breach Monitor One plan Bundled Global
Surfshark Search Private Search One plan Bundled Global
Incogni Data Removal One+ plan Bundled Global
Alternative Number Virtual Phone Number Add-on only - Global
VPN Bundle Pricing Compared
Provider VPN-Only Price Full Bundle Price Bundle Premium What's in the Bundle Free Alternatives Exist? Bundle Value
PureVPN 3 tiers $2.14/mo Standard $3.48/mo Max +$1.34/mo
  • PureKeep
  • PurePrivacy
  • PureEncrypt
Good value
ProtonVPN 2 tiers $4.49/mo VPN Plus $7.99/mo Proton Unlimited +$3.50/mo
  • Proton Mail
  • Proton Drive (500GB)
  • Proton Pass
  • Proton Calendar
  • Proton Docs
Mixed
NordVPN 4 tiers $3.39/mo Basic $7.39/mo Prime +$4.00/mo
  • NordPass
  • NordLocker (1TB)
  • NordProtect
Mixed
ExpressVPN 3 tiers $3.49/mo Basic $7.49/mo Pro +$4.00/mo
  • ExpressVPN Keys
  • Identity Defender
  • ExpressMailGuard
  • eSIM (holiday.com)
Mixed

Prices shown are the best available rate (typically 2-year plan). "Bundle premium" is the difference between the VPN-only tier and the most expensive bundle tier. "Free alternatives" shows widely available free products that serve the same purpose as the bundled extra.

Ways to Pay

Surfshark Payment Methods

International
Credit/Debit Card PayPal
Digital Wallets
Google Pay Amazon Pay
Cryptocurrency
Bitcoin (BTC) Ethereum (ETH) Litecoin (LTC) Dogecoin (DOGE) Bitcoin Cash (BCH) XRP
7 cryptocurrencies accepted · via CoinGate
Crypto cannot be used on mobile. No auto-renewal with crypto. Payments may take up to 24 hours. Regional methods vary at checkout.
Availability may vary by region. Last verified March 2026.

Streaming TV & Movies With Surfshark

Our Take
Surfshark reliably unblocks most major streaming platforms. It won't match ExpressVPN or NordVPN for consistency across every region, but for the price difference, the gap is small. Smart DNS is missing, which limits options for devices that can't run the app.

How does streaming work with VPNs? Can you use Surfshark to watch Netflix? What about your other favorite streaming services?

Compatible Devices and Services

Surfshark Platform Compatibility
🖥 Desktop
🪟 Windows
🍎 macOS
🐧 Linux
💻 Chromebook
📱 Mobile
🍎 iOS
🤖 Android
📺 TV & Streaming
📺 Android TV
🔥 Amazon Fire TV
🍎 Apple TV
🎮 Gaming
🎮 PlayStation via router
🎮 Xbox via router
🎮 Nintendo Switch via router
🌐 Browser Extensions
🌐 Chrome
🦊 Firefox
🌐 Edge
📡 Router
📡 Install on your router
📡 Pre-configured VPN router

Surfshark is available on all major platforms, including:

Unfortunately, not all the platforms get the same features (see our “Features” section below). Those such as automatic KillSwitch, Camouflage mode, NoBorders, and regular CleanWeb features are available on iOS, Android, macOS, and Windows, while others like Bypasser are only available on Android and Windows.

Surfshark is also available on gaming consoles and any smart TV, with setup guides for:

Surfshark Streaming Compatibility
Service Last Tested Source
Netflix (US) 28 Mar 2026 (re-test due) Surfshark confirmed
Netflix (UK) 28 Mar 2026 (re-test due) Surfshark confirmed
Amazon Prime Video 28 Mar 2026 (re-test due) Surfshark confirmed
Disney+ 28 Mar 2026 (re-test due) Surfshark confirmed
Hulu 28 Mar 2026 (re-test due) Surfshark confirmed

Streaming compatibility tested by VPNTesting.com. Results may vary by server and region.

Mobile and Desktop Apps

Surfshark has apps for all of the major platforms it’s compatible with. The Surfshark website has download links for each of these, depending on your device and system requirements.

For desktop computers:

For phones and tablets:
  • Android 5.10 and newer
  • iOS 13.0.0 and up

Browser Extensions

Surfshark browser extensions are available for:

VPN extensions are proxies that mask your IP, bypass internet restrictions, but don’t offer the same privacy or protection as a full VPN. However, Surfshark’s browser extensions allow users to use CleanWeb 2.0 – Surfshark’s new, upgraded, four-in-one ad and tracker blocker (see “Features” below for more).

Ease of Use

Since Surfshark has apps for each of its available platforms, setting up and using Surfshark’s VPN is relatively straightforward, as you can access all settings and options through the app’s clean interface.

Surfshark’s website also contains user guides for most of its platforms, explaining how to set up and start using Surfshark on macOS, Windows, iOS, Android, Linux, Chromebook, and Amazon Fire TV. In addition, Surfshark has an entire Help Centre filled with instructions, guides, and FAQs, with videos on most pages to help walk you through any difficulties.

If you’re still having issues, Surfshark has 24/7 customer support via email or live chat, so there’s always someone available to help you out.

Get Surfshark Now
30 days Money-back guarantee - cancel anytime, no questions asked.

Streaming on TV & Other Devices

Surfshark can be used with several devices to stream content. Here are the compatible devices:

Amazon Fire TV and Fire TV Stick

Surfshark has an app for Fire TV devices, making it easy to download and use: simply search for Surfshark on your Fire TV device, install the VPN app, log in, and connect.

Surfshark has more detailed instructions in its Help Centre, including a simple step-by-step guide on how to install Surfshark on Amazon Fire TV and Amazon Fire TV Stick.

Surfshark is currently supported on the following Fire TV devices:

  • 2nd-gen and 3rd gen Fire TV & Fire TV Stick
  • 4K Fire TV & Fire TV Stick

Smart TVs

Surfshark says it’s available on all smart TVs, including Apple TV, Chromecast, Samsung Smart TV, Android TV, and Roku.

If your TV supports apps, then you can simply search for the Surfshark app, download it, and log in to begin using it.

Alternatively, if your TV doesn’t support apps, you can activate Smart DNS and follow the guide for your TV. Smart DNS changes the DNS address (for spoofing your virtual location) on your Smart TV while streaming. Surfshark makes sure to cover even unsupported devices, such as Apple TV.

The Surfshark website contains set-up guides for almost every smart TV option available.

Xbox & PlayStation

Surfshark will work on:

You’ll need to set up the VPN on your router first, which Surfshark provides instructions for. Then, when you connect your game console to the router like you usually would, your device is protected by the VPN.

Performance & Speed

Our Take
Speed test results put Surfshark in the upper mid-range - fast enough for 4K streaming and large downloads, but not the fastest we've tested. WireGuard is the default protocol and the right choice for most users. Expect single-digit percentage speed loss on nearby servers.

Buffering

Surfshark claims you can stream in 4K HD without buffering, thanks to its fast servers and encryption protocol, and by having at least 1Gbps port connected per server (the amount of traffic each server can handle). In addition, its choice of 4,500+ servers means users shouldn’t run into any congestion.

However, due to the encryption being used to keep your connection secure while using a VPN, buffering is sometimes unavoidable. If this happens, it’s often worth trying to connect to a different server, changing your protocol settings, or turning on Surfshark’s multihop feature, as all of these options can help make your VPN faster.

Windows or Android users can also choose to use Surfshark’s Bypasser feature and have slow sites bypass the VPN to transmit via a standard internet connection instead.

Bandwidth

Surfshark doesn’t place any limitations on speed, bandwidth, or data, though it does note you may experience a 20-30% decrease in speed (compared to not using a VPN).

Conversely, Surfshark may increase your speed. Some internet service providers begin to slow down activities like streaming (this is called bandwidth throttling) to encourage users to switch to higher-paid plans. Surfshark mitigates this by hiding your internet traffic from the service provider, ensuring you continue to receive high-speed streaming.

Surfshark also prevents its servers from being overloaded (which would cause them to slow down) by offering more server bandwidths per user in popular locations. This means Surfshark users should enjoy low latency and minimal speed reductions when streaming.

A VPN will most likely slow down your internet speeds, as your traffic is being directed through a secure server in another location. Generally, the closer you are to the server location, the less the decrease in speed is likely to be since your data has less of a distance to travel.

Surfshark has 4,500+ servers across 100 countries, and you can choose to join any of these. However, you can also simply choose “fastest location”, and Surfshark will automatically connect you to the server that will offer you the fastest speeds.

We ran a speed test using the “fastest location” option and found our internet download speed was the same as without a VPN with just a 10% drop in upload speed.

The test results revealed a slight increase in latency too – which is the time it takes for data to pass from one network node to another. The higher your latency, the more likely you are to experience lag, though anything under 100ms is generally considered okay for tasks like gaming.

Speed was around 18% slower when connected to a server on the other side of the world (in our case, Australia), with a much greater latency and slower upload speed. This is to be expected.

We also tried Surfshark’s “MultiHop” option, which sends traffic through two different servers for extra security. This is supposed to slow speeds down, though we found our internet increased. However, latency and upload speeds were affected as predicted.


Privacy & Security

Our Take
Surfshark's privacy setup is solid: Deloitte-audited no-logs policy, RAM-only servers, and AES-256-GCM encryption. The Netherlands jurisdiction (9-Eyes alliance) is a concern for privacy purists, though the audited no-logs policy means there's nothing to hand over. The Nord Security acquisition in 2022 adds corporate credibility but also concentrates market power.
Surfshark's privacy promise

We do not collect IP addresses, browsing history, session information, used bandwidth, connection timestamps, network traffic, or other similar data.

Surfshark Privacy Policy
Our analysis:
  • Independently audited by Deloitte (2 audits)
  • Based in Netherlands (outside Five/Nine/Fourteen Eyes alliances)
Surfshark Transparency Report 🇳🇱 Netherlands
69 government requests (2025) ▲ +53% · 358K DMCA requests · 0 warrants · No browsing data disclosed
Government69
DMCA358K
2024 - 2025
NO LOGS AUDIT ONLY

Does Surfshark Keep Logs?

3/6 verified
Policy No-logs policy independently verified Read policy Verified
Audit Deloitte (Jun 2023) - 2 audits total Verified
Court test No adversarial court test on record Unknown
Jurisdiction 🇳🇱 Netherlands (outside 14-Eyes) Verified
Infrastructure RAM-only Claimed
Ownership Nord Security Inc. - Lithuania / Panama Claimed
Policy updated 1 time since monitoring began. Last: Mar 30, 2026. The changes between the old and new versions of Surfshark's Privacy Policy are purely cosmetic formatting improvements. The data collection practices, retention periods, logging policies, third-party sharing arrangements, and jurisdiction remain completely unchanged. The only difference is that the data collection tables in section 2 have been reformatted from a paragraph style to a cleaner table format with separate columns for 'Data collected', 'Legal basis', and 'How long we keep it'.
Surfshark Infrastructure & Trust
Obfuscated Servers
Tor/Onion Support (manual setup)
Port Forwarding
RAM-Only Servers
Independent Audit Deloitte (2 audits) Jun 2023
Config File Export

We monitor Surfshark's legal documents daily for changes and summarize what changed.

Last checked: 06/04/2026 · 1 change detected since 29/03/2026

minor Privacy Policy 30/03/2026

The changes between the old and new versions of Surfshark's Privacy Policy are purely cosmetic formatting improvements. The data collection practices, retention periods, logging policies, third-party sharing arrangements, and jurisdiction remain completely unchanged. The only difference is that the data collection tables in section 2 have been reformatted from a paragraph style to a cleaner table format with separate columns for 'Data collected', 'Legal basis', and 'How long we keep it'.

QUICK LINKS 1. How do we handle your connection data?2. What personal data we collect, why, on what basis, and for how long?3. How long do we keep personal data?4. Is personal data transferred to other countries?5. With whom do we share personal data?6. What choices do you have over your personal data?7. How do we use cookies and other tracking technologies?8. How do we protect personal data?9. Children’s data10. Who should you contact with questions or concerns?11. Are there any other terms you should know?
QUICK LINKS
1. How do we handle your connection data?
2. What personal data we collect, why, on what basis, and for how long?
3. How long do we keep personal data?
4. Is personal data transferred to other countries?
5. With whom do we share personal data?
6. What choices do you have over your personal data?
7. How do we use cookies and other tracking technologies?
8. How do we protect personal data?
9. Children’s data
10. Who should you contact with questions or concerns?
11. Are there any other terms you should know?
Surfshark Privacy Policy
Last updated: 2026.02.17
Since our privacy policy ("Privacy Policy") is quite lengthy, we thought you might appreciate a short and easy breakdown. These highlighted bits will do precisely that! Think of them as helpful guides — they'll make the legal language easier to understand.
This Privacy Policy explains how Surfshark B.V, address Kabelweg 57, 1014BA Amsterdam, the Netherlands (“Surfshark”, “we”, “us”, or “our”), processes your personal data through our website (the “Website”), online hosted services and any related application, software or functionality offered by Surfshark (the “Services”).
Please review this Privacy Policy thoroughly to understand our policies and practices concerning your personal data and how we will handle it. This Privacy Policy should be read alongside our Terms of Service. Together, these two documents create a single, legally binding agreement between you and Surfshark. 
Surfshark processes your personal data and acts as a data controller in accordance with privacy laws, including the General Data Protection Regulation (“GDPR”).
By continuing to use our Website and / or Services, you agree to the terms of the current Privacy Policy. We kindly request that you refrain from using our Services and Websites if you do not agree with this Privacy Policy or any of its provisions.
We may need to amend the Privacy Policy from time to time. If there are any significant updates, we'll let you know ahead of time through our Website or by email. You'll always find the date of the latest update at the top of the Privacy Policy.
1. How do we handle your connection data?
No-logs Policy is one of the most important features of our VPN service and we keep our VPN service logs-free. We don’t store any information that could lead us to see your online activities.
Surfshark respects your privacy, therefore, we are committed to not process any information related to the online activity of our users. Surfshark is based in the Netherlands jurisdiction, which does not require information storage or reporting. We do not collect any information about what you do online (i.e., we do not collect your visited IP addresses, browsing history, session information, connection time stamps, used bandwidth, network traffic or any other similar information).
To ensure the functionality of our VPN service, our servers temporarily keep details about your connection to a specific VPN server, such as your user ID and / or your IP address and connection to VPN server time stamps. However, this information is automatically deleted within 15 minutes after your session ends. Rest assured, we do not store any information about the websites you visit.
2. What personal data we collect, why, on what basis, and for how long?
Surfshark collects limited personal data, which includes any data that can directly or indirectly identify you when you use our Services. Personal data helps us to provide you Services, enhance your experience, improve our Services, and ensure compliance with legal obligations. We are committed to protecting your privacy and handling your personal data responsibly.
Here's a breakdown of the personal data we gather and what we use it for:
2.1 Personal data needed for us in order to provide Surfshark Services
2.1.1 For you to be able to create a Surfshark account Data collected
Email address, encrypted password, account registration date, coupon code (if any).
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.1.1 For you to be able to create a Surfshark account Data collectedLegal basisHow long we keep it
Email address, encrypted password, account registration date, coupon code (if any).Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
We use this information to create your account so that you can use our Services.
2.1.2 To provide you with Surfshark Services Data collected
User ID, information about subscription (subscription plan name, subscription term, subscription ID, subscription frequency, amount, currency, status, auto-renewal status, and information about 2FA (on/off)), date of the payment, amount paid, currency, payment status, payer residence country (and state), coupon used (if any), part of the credit card number, credit card expiry date.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.1.2 To provide you with Surfshark Services Data collectedLegal basisHow long we keep it
User ID, information about subscription (subscription plan name, subscription term, subscription ID, subscription frequency, amount, currency, status, auto-renewal status, and information about 2FA (on/off)), date of the payment, amount paid, currency, payment status, payer residence country (and state), coupon used (if any), part of the credit card number, credit card expiry date.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Please note that to handle your payments and refunds, our trusted payment partners collect necessary details like the transaction date, payer’s IP address, credit card number, and the cardholder's full name. Depending on your location, our payment partners may also need additional details like a personal ID, passport, or your address.To learn what personal data these payment providers collect and store, please refer to their individual terms of service and privacy policies.
2.2 Personal data needed for specific Surfshark Services In addition to the personal data needed for account setup and general service delivery, we'll also collect additional data specific to the individual service you use. This personal data is essential for the particular Surfshark Service to function correctly:
2.2.1 Provision of the VPN service We do not store any information about the websites you visit while using our VPN.
Data collected
Our servers temporarily keep details about your connection to a specific VPN server, such as your user ID and / or your IP address and connection time stamps.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
Connection information is automatically deleted within 15 minutes after your session ends.
Data collectedLegal basisHow long we keep it
Our servers temporarily keep details about your connection to a specific VPN server, such as your user ID and / or your IP address and connection time stamps.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.Connection information is automatically deleted within 15 minutes after your session ends.
2.2.2 Provision of the Search tool service What you search for stays private. We don't collect such information. 
Data collected
Aggregated number of your performed searches.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
Aggregated number of your performed searches.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.2.3 Provision of the Alternative ID service Alternative persona
Data collected
Your alternative persona’s name, middle name, surname, date of birth, gender, country, city, address, postal code.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
Your alternative persona’s name, middle name, surname, date of birth, gender, country, city, address, postal code.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Alternative email
Data collected
Your email address, email mask and its description, subject line of the email letter, the content of the email letter (only for technical reasons, i.e., to forward it), email sender and receiver, email forwarding status, user profile data, metadata associated with the email.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
Your email address, email mask and its description, subject line of the email letter, the content of the email letter (only for technical reasons, i.e., to forward it), email sender and receiver, email forwarding status, user profile data, metadata associated with the email.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To be able to use Alternative email service, you will have to verify your email address to which emails are forwarded. The Emails you receive via the Alternative Email service along with sender and recipient email server IP address, sender email address and timestamps are deleted as soon as they are forwarded to your email address. We use a trusted email service provider to facilitate this service.
Alternative number
Data collected
The telephone number that has been assigned to you by Surfshark, as well as your call, SMS log and content.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Data collectedLegal basisHow long we keep it
The telephone number that has been assigned to you by Surfshark, as well as your call, SMS log and content.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
In addition, to facilitate the Alternative Number service, we use trusted VoIP service providers. We respect your privacy and we do not access your private content.
2.2.4 Provision of the Alert service Data collected
Email address and / or personal identity number (or a social security number), and / or credit card number, information related to data leaks found.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.2.4 Provision of the Alert service Data collectedLegal basisHow long we keep it
Email address and / or personal identity number (or a social security number), and / or credit card number, information related to data leaks found.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To use our Alert service for detecting personal data leaks, you can submit your email address, personal identity number (or a social security number), or credit card number for monitoring. We'll  securely retain this information, encrypting personal identity and credit card numbers. When you enter your email, you authorize us to find and provide you with additional leaks-related details, for example, usernames, passwords, full names, country, physical address, IP addresses. For credit card or social security number leaks, we'll only show you data categories (e.g., credit card details, name, address, password, nationality) for security reasons, rather than the specific compromised data.
2.2.5 Provision of the Data Leak Checker service Data collected
Email address, data leaks your email address was involved in.
Legal basis
Legal basis for the processing of personal data is your consent.
How long we keep it
We do not retain your personal data.
2.2.5 Provision of the Data Leak Checker service Data collectedLegal basisHow long we keep it
Email address, data leaks your email address was involved in.Legal basis for the processing of personal data is your consent.We do not retain your personal data.
Data Leak Checker allows you to check if your personal data has been compromised in a data leak. By voluntarily entering your email address, you can find out if your personal information has been exposed. Please note that we do not store your email address or information related to data leaks.
2.2.6 Provision of Dedicated IP service Data collected
Your email address, your dedicated IP address.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.2.6 Provision of Dedicated IP service Data collectedLegal basisHow long we keep it
Your email address, your dedicated IP address.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
If you opt for our Dedicated IP service, certain online activities could be linked back to your account.
2.2.7 Provision of the Antivirus service for Windows, MacOS, and Android users Data collected
2.2.7 Provision of the Antivirus service for Windows, MacOS, and Android users Data collectedLegal basisHow long we keep it
We will collect information about your devices on which you use the Antivirus service. This information is needed to ensure the compliance with the limitation for the number of devices that one client may use for the Antivirus service as provided in our Terms of Service.
Also, to improve user experience we will retain statistical information about the usage of the webcam protection feature, including the number of times you received a request to access your camera or microphone, which preference you selected, whether this feature is turned on or off, how many apps you have included in the exclusion list.
To provide statistics on what malware was detected, we will process malware name and type, country, OS, and user ID.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To provide statistics on what malware was detected, we will process malware name and type, country, OS, and user ID. Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement. We keep your personal data for as long as your subscription is active and for 2 years after the last login.
Information about malware name and type, country, OS, and user ID will be fully anonymized after 1 year from our receipt of the data.
2.2.8 Provision of email scam checker service Data collected
The sender's email address, the email subject, and the content of the email, including any website address indicated therein.
Legal basis
Legal basis for the processing of personal data is your consent.
How long we keep it
The collected data will only be stored for the brief period necessary to perform the scan and provide you with the results. Sender’s email address will be kept for 30 days to improve our services.
2.2.8 Provision of email scam checker service Data collectedLegal basisHow long we keep it
The sender's email address, the email subject, and the content of the email, including any website address indicated therein.Legal basis for the processing of personal data is your consent.The collected data will only be stored for the brief period necessary to perform the scan and provide you with the results. Sender’s email address will be kept for 30 days to improve our services.
In order for you to be able to use our AI powered email scam checker, which scans your emails for potential scam threats, we need to collect specific data from the emails you choose to scan. This data includes the sender's email address, the email subject, and the content of the email, including any website address it contains. Your consent will be required to collect this information, as you will actively select which emails from your inbox to scan. The collected data (except sender’s email address) will only be stored for the brief period necessary to perform the scan and provide you with the results. Please note that in order to improve our email scam checker, we will use your personal data in a completely anonymized format, based on our legitimate interest in enhancing our services.
Please note that we respect your privacy and do not access any of your private content or use any of your data to train our AI models.
You can find information about how your personal data is processed for email scam checker diagnostics in paragraph 2.3.9 of this privacy policy.
2.3 Other personal data processing purposes As indicated above, generally we use your data to provide our Services. Nevertheless, we also process some of it for other legal reasons. These might not be a direct part of the Services you use, but they're also important for keeping things secure, running smoothly, making our offers better, and meeting our legal duties. You'll find all the details about these extra data activities in the section below.
2.3.1 To ensure the security of your account Data collected
Device name, operating system, Surfshark app version installed, last login date.
Legal basis
Legal basis for the processing of personal data is our legitimate interest to ensure the security of your account.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.1 To ensure the security of your account Data collectedLegal basisHow long we keep it
Device name, operating system, Surfshark app version installed, last login date.Legal basis for the processing of personal data is our legitimate interest to ensure the security of your account.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
To enhance the security of your account, when you log in to the Surfshark app, we collect the information indicated above. This helps us recognize your trusted devices and allows us to provide better security for your account. As part of this, we'll notify you by email if you log in from a new device that differs from your last-used devices.
This email will provide you with the login details. If you did not log in from this new device, it is crucial to change your password immediately to secure your account. We also strongly encourage you to enable two-factor authentication for enhanced protection. By promptly notifying you of logins from unfamiliar devices, we enable you to take swift action if anything appears suspicious, thereby helping to ensure your account's safety.
2.3.2 To enable you to submit an inquiry and communicate with customer support Data collected
Your email address, the content of inquiry, including any information that you share with our customer support team that is necessary to resolve the query, date and time of inquiry.
Legal basis
We process your personal data with your consent or in our legitimate interest to provide you with the necessary information.
How long we keep it
We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
2.3.2 To enable you to submit an inquiry and communicate with customer support Data collectedLegal basisHow long we keep it
Your email address, the content of inquiry, including any information that you share with our customer support team that is necessary to resolve the query, date and time of inquiry.We process your personal data with your consent or in our legitimate interest to provide you with the necessary information.We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
To ensure the security and privacy of your account, Surfshark requires identity verification before we can assist with your customer support inquiry. This process helps us protect your data and provide you with the most accurate and personalized support.
2.3.3 To enable you to interact with the live chatbot Data collected
Your name, email address, date and time of inquiry.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement and / or our legitimate interest.
How long we keep it
We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
2.3.4 To contact you via email about important updates and announcements related to your use of the Services and Website (transactional communications) Data collected
Your email address, the content of the email address, date and time of email sent.
Legal basis
Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.5 To send you offers, surveys, and other marketing content Data collected
Your email address, the content of the email letter, the date and time of the email letter sent.
Legal basis
Legal basis for the processing of personal data is your consent or our legitimate interest to conduct marketing activities.
How long we keep it
We will process your information until we receive your opt-out request.
2.3.3 To enable you to interact with the live chatbot Data collectedLegal basisHow long we keep it
Your name, email address, date and time of inquiry.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement and / or our legitimate interest.We will keep personal data related to customer support communications for up to 6 years following the receipt of your message.
2.3.4 To contact you via email about important updates and announcements related to your use of the Services and Website (transactional communications) Data collectedLegal basisHow long we keep it
Your email address, the content of the email address, date and time of email sent.Processing your personal data is essential for us to provide you a service and carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.5 To send you offers, surveys, and other marketing content Data collectedLegal basisHow long we keep it
Your email address, the content of the email letter, the date and time of the email letter sent.Legal basis for the processing of personal data is your consent or our legitimate interest to conduct marketing activities.We will process your information until we receive your opt-out request.
We may contact you via email for this purpose, but we also encourage you to contact us via our online contact form to get the best VPN offer for you.
Also, to help you with your order, we might send an email letting you know if a purchase wasn't completed (unfinished order). This is based on our legitimate interest in improving your experience with us and assisting you with any issues related to your orders.
If you do not wish to receive emails from us, you can opt out by contacting [email protected] or by clicking “unsubscribe” at the bottom of any correspondence. If you have multiple email addresses, you will need to opt out for each address to be removed from our active database. However, we will continue to communicate with you for essential service delivery, to address your inquiries, and to provide transactional product or service-related updates.
Also, please note that you may still receive information about our Services from other parties who use their own mailing lists.
2.3.6 To enable your participation in our referral program Data collected
Your unique referral link, your rewards (the amount of money or months earned), your Paypal account details.
Legal basis
Processing your personal data is essential for us to carry out the terms of our service agreement.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.7 To manage and administer our accounts on social networks Data collected
Your interaction data, e.g., likes, comments, full name, pseudonym, social network profile name, pictures.
Legal basis
Legal basis for the processing of personal data is our legitimate interest to engage with the community and to manage our social networks accounts.
How long we keep it
We will process your provided information until you delete your posted content or social networks account.
2.3.6 To enable your participation in our referral program Data collectedLegal basisHow long we keep it
Your unique referral link, your rewards (the amount of money or months earned), your Paypal account details.Processing your personal data is essential for us to carry out the terms of our service agreement.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.7 To manage and administer our accounts on social networks Data collectedLegal basisHow long we keep it
Your interaction data, e.g., likes, comments, full name, pseudonym, social network profile name, pictures.Legal basis for the processing of personal data is our legitimate interest to engage with the community and to manage our social networks accounts.We will process your provided information until you delete your posted content or social networks account.
Please note that when you share information on social network accounts, e.g., Facebook, X, we don't control how they use or store that data. These companies collect and process your information for their own reasons, including their own marketing efforts. For full details on how these platforms handle your personal data, please check each social media privacy policies directly.
2.3.8 To determine eligibility for subscription discounts through automated decision-making, including profiling Data collected
Information related to your subscription.
Legal basis
We use your personal data because it's in our legitimate interest to enhance your experience.
How long we keep it
We keep your personal data for as long as your subscription is active and for 2 years after the last login.
2.3.8 To determine eligibility for subscription discounts through automated decision-making, including profiling Data collectedLegal basisHow long we keep it
Information related to your subscription.We use your personal data because it's in our legitimate interest to enhance your experience.We keep your personal data for as long as your subscription is active and for 2 years after the last login.
We may use an automated decision-making, including profiling, process to evaluate whether to apply a discount to the price of the subscription a user purchases. This will not increase the price of the subscription you want to purchase.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person. Automated decision-making is the process of deciding by automated means without any human involvement. Our system may automatically generate decisions using a very limited amount of your personal data (for example, information related to your subscription). For instance, we may use an automated decision-making process, including profiling, to evaluate whether to apply a discount to the price of the subscription you purchase.
In instances where a decision based solely on automated processing produces legal consequences for you, or otherwise significantly affects you, you retain the right to challenge the decision, express your viewpoint, and request human involvement. You can achieve this by contacting us at [email protected]. We will assess your request and provide a human examination of the decision, ensuring that your rights are fully honored.
2.3.9 To maintain and improve the quality of our Services and provide effective support (diagnostics and crash reporting) Data collected
2.3.9 To maintain and improve the quality of our Services and provide effective support (diagnostics and crash reporting) Data collectedLegal basisHow long we keep it
Aggregated performance information, the frequency of use of Services, unsuccessful connection attempts, device information, and other similar information.
In the case of email scam checker diagnostics, we will collect information including the sender's name and email address, the receiver's name, the email subject, the content of the email, and any attachments metadata (file name, file type).
Legal basis
Legal basis for such processing is your consent.
How long we keep it
We keep your personal data until you withdraw your consent, but no longer than 7 days from its receipt.
In the case of email scam checker diagnostics, we will collect information including the sender's name and email address, the receiver's name, the email subject, the content of the email, and any attachments metadata (file name, file type). Legal basis for such processing is your consent.We keep your personal data until you withdraw your consent, but no longer than 7 days from its receipt.
To fulfil this goal, we collect diagnostics information and monitor crash reports on our apps and extensions. Please note that diagnostics information does not contain uniquely identifiable information (except as provided below regarding email scam checker service). However, if you face some problems when using our apps, we may require your device information to solve these problems. We will access this information only if you provide a separate consent for that.
In the case of email scam checker diagnostics, we will collect a minimal amount of necessary personal data. This includes the email sender's name and email address, the receiver's email address, the email subject, the content of the email, and metadata of any attachments.
2.3.10 To enable the auto-connect feature for the trusted Wi-Fi network Data collected
Wi-Fi name (Service Set Identifier).
Legal basis
Legal basis for such processing is your consent.
How long we keep it
We will process your personal data until you withdraw your consent.
2.3.10 To enable the auto-connect feature for the trusted Wi-Fi network Data collectedLegal basisHow long we keep it
Wi-Fi name (Service Set Identifier).Legal basis for such processing is your consent.We will process your personal data until you withdraw your consent.
Upon your permission, we collect your Wi-Fi network name (Service Set Identifier) exclusively to enable the auto-connect and trusted Wi-Fi features. This allows our app to automatically connect to a server without you having to worry about it. Crucially, this information is stored solely on your device. We do not store or share it with any third party.
2.3.11 To improve our analytics and optimize advertising Data collected
Cookie ID, mobile device ID, device specification, advertising IDs.
Legal basis
Legal basis for the processing of personal data is your consent to deliver relevant ads and promotional messages to you, and to attribute sales.
How long we keep it
We will process your personal data until you withdraw your consent.
2.3.11 To improve our analytics and optimize advertising Data collectedLegal basisHow long we keep it
Cookie ID, mobile device ID, device specification, advertising IDs.Legal basis for the processing of personal data is your consent to deliver relevant ads and promotional messages to you, and to attribute sales.We will process your personal data until you withdraw your consent.
When you use our Website, we automatically collect information about your activity through technologies like cookies if you've given us permission. We may receive information about you from certain advertisers and advertising partners for analytical and advertising purposes. Our advertising partners help us attribute sales, deliver more relevant ads and promotional messages to you, which may include interest-based advertising and account-based advertising.
You can control the use of cookies at the individual browser level on your device. More information about cookies and how to disable them can be found in Section 7 of this Privacy Policy.
Additionally, we may collect limited technical and engagement data through the app, for example, device model, operating system version, device language, randomized identifiers. This information helps us measure campaign effectiveness and enhance user experience. This data is shared with trusted service providers, such as AppsFlyer and Firebase Analytics for performance attribution, Iterable for marketing engagement, and Purchasely for subscription flows management and optimization. You may manage or withdraw your consent at any time by contacting us at [email protected].
2.3.12 To carry out market research and perform internal analytics Data collected
We aggregate and anonymize the data we collect for this purpose. We then maintain and use this data only in its anonymized form.
Legal basis
Legal basis for the processing of this deidentified data is our legitimate interest.
How long we keep it
Since the data is anonymized we will process it indefinitely.
2.3.12 To carry out market research and perform internal analytics Data collectedLegal basisHow long we keep it
We aggregate and anonymize the data we collect for this purpose. We then maintain and use this data only in its anonymized form.Legal basis for the processing of this deidentified data is our legitimate interest.Since the data is anonymized we will process it indefinitely.
We create aggregated statistical data and conduct market research and analysis to understand customer needs, analyze sales, and identify other business trends. This helps us to improve our services and operate our business more effectively, using aggregated and/or inferred non-personal information.
2.3.13 To comply with legal requirements, exercise or defend legal claims Data collected
Email address, subscription information, payment-related information, other necessary information and / or legal documents.
Legal basis
Legal basis for the processing of personal data is a legal obligation to which we are subject (in case we need to collect your data statutorily) and our legitimate interest to defend our rights and interests (in case of other legal processes related to you, if any).
How long we keep it
We retain this data for as long as it is indicated in the specific law.
2.3.13 To comply with legal requirements, exercise or defend legal claims Data collectedLegal basisHow long we keep it
Email address, subscription information, payment-related information, other necessary information and / or legal documents.Legal basis for the processing of personal data is a legal obligation to which we are subject (in case we need to collect your data statutorily) and our legitimate interest to defend our rights and interests (in case of other legal processes related to you, if any). We retain this data for as long as it is indicated in the specific law.
We may also retain personal data for longer periods to comply with legal obligations, respond to government requests, or enforce our contracts and Terms of Service, including investigating potential violations.
We are subject to tax and other statutory requirements. We may have to protect our legitimate interests and legal rights. In these cases, we may be required to collect and store a limited amount of your personal data indicated above: email address, subscription information, payment-related information, other necessary information and / or legal documents.
2.3.14 To collect applicable tax, solve payment related issues, prevent fraud, and ensure accounting Data collected
Part of the credit card number, payment amount, currency, date of payment and card expiry date, residence country, state.
Legal basis
Legal basis for the processing of personal data is a legal obligation to which we are subject.
How long we keep it
We will retain payment-related information for 10 years from the receipt of this information.
2.3.14 To collect applicable tax, solve payment related issues, prevent fraud, and ensure accounting Data collectedLegal basisHow long we keep it
Part of the credit card number, payment amount, currency, date of payment and card expiry date, residence country, state.Legal basis for the processing of personal data is a legal obligation to which we are subject.We will retain payment-related information for 10 years from the receipt of this information.
To calculate applicable VAT/sales tax, we collect your country and, where applicable, state of residence. Should you opt to receive an invoice for the services rendered, we may also retain the necessary data to generate and issue that invoice.
3. How long do we keep personal data?
Please keep in mind that having an audited No-logs Policy is one of our core principles (see more in our Terms of Service), therefore we collect only the minimum amount of data about you, which is required to provide you with our Services.
Thus, unless specified differently in this Privacy Policy, we retain your personal data until it is no longer necessary for the reasons we initially collected it for, or until we receive a valid request to remove it, with some exceptions. However, there may be instances where we need to use and store your personal data beyond the timeframes mentioned above for purposes such as compliance with our legal obligations and / or exercising and defending legal claims.
4. Is personal data transferred to other countries?
Wherever your personal data needs to be sent, we always take extra care to keep it safe and sound.
Your data, as specified in this Privacy Policy, may be stored and processed in any country where we have facilities or in which we engage service providers. We carefully assess all international data transfers and implement appropriate safeguards to ensure your personal data remains protected as outlined in this Privacy Policy. Please note that we use Standard Contractual Clauses approved by the European Commission (you can access it here) to transfer your personal data from the EEA to other countries outside the EEA territory (e.g., the USA) or we transfer personal data to countries that the European Commission has recognized as ensuring an adequate level of data protection (you can access the list of countries here).
5. With whom do we share personal data?
It takes a village to keep our Website and Services up and running and we want to be transparent about what types of personal data we've shared and with whom, all for legitimate business reasons.We need third- party tools and services for things like marketing, payments, live chat, and so forth. Since these don’t belong to us, we urge you to read their terms and policies on their sites.
Surfshark shares personal data with the authorized parties only in cases where necessary for the purposes described in this Privacy Policy and allowed in accordance with applicable laws.
5.1 In the preceding 12 months, we have disclosed strictly necessary personal data for an operational purpose to the following categories of third parties: Category of data recipients
Marketing and application analytics service providers, such as Iterable, Firebase Analytics (by Google), Purchasely and Appsflyer.
Purpose of personal data transfer
We use them to manage our contacts, automate our marketing, gather analytics.
Country of the recipient
United States, Sweden, France, Ireland, United Kingdom.
Category of data recipients
Performance marketing service providers, such as Hasoffers (Tune Inc.).
Purpose of personal data transfer
We use them to calculate our conversion attribution.
Country of the recipient
United States
Category of data recipients
Third-party payment providers, such as Stripe, Adyen, Checkout, Coingate and similar.
Purpose of personal data transfer
They help us to process payments together with our own authorized payment processing companies.
Country of the recipient
United States, Ireland, British Virgin Islands.
Category of data recipients
Storage and infrastructure service providers, such as BigQuery (by Google).
Purpose of personal data transfer
They help us to store, analyze, and manage data.
Country of the recipient
United States
Category of data recipients
Live chat and support service providers, such as Zendesk.
Purpose of personal data transfer
We use them to provide live chat technology and provide support to our users.
Country of the recipient
United States
Category of data recipients
Security service providers, such as Cloudflare.
Purpose of personal data transfer
We work with them to provide improved security and performance.
Country of the recipient
United States
Category of data recipients
Providers that help us deliver the Alternative ID service, such as Telnyx.
Purpose of personal data transfer
We work with them to provide you with Alternative ID services (such as Alternative Number).
Country of the recipient
United States
Category of data recipients
Group companies.
Purpose of personal data transfer
We share data with our group companies to support our daily operations and ensure Surfshark can continue providing you with Services.
Country of the recipient
EEA, United States, United Kingdom.
Category of data recipients
Other Surfshark’s partners.
Purpose of personal data transfer
We share your personal data with our distribution, reseller, and app store partners, each of which is an independent controller of your personal data.
Country of the recipient
United States
Category of data recipients
Third parties whose services you buy through us.
Purpose of personal data transfer
We may provide your personal data to the third parties that deliver the services you buy through us. We only share the minimum amount of data necessary (e.g. your email address) to enable you to receive the services you have requested. Each of these companies acts as an independent controller of your personal data.
Country of the recipient
EEA, United States
5.2 There are a few more cases in which we can share your information with other authorized parties: Category of data recipients
Third parties (in case of corporate reorganization, bankruptcy or liquidation proceedings).
Purpose of personal data transfer
If we undergo a corporate reorganization (like a merger, acquisition, or sale of our business), we may share personal data with the involved third parties (e.g., the buyer, their agents, and advisors) to help complete the transaction.
Legal ground
When EU or UK data protection laws apply, our legal basis for this is our legitimate interest in conducting business, or your consent if required by law.
Category of data recipients
Authorities
Purpose of personal data transfer
We only disclose personal data to law enforcement authorities or courts of competent jurisdiction when we are asked and legally obliged to do so (our page will display if we’re ever asked to do so).
Legal ground
Legal obligation
Category of data recipients
Other parties
Purpose of personal data transfer
We'll only disclose your personal data with others if you give us permission or if there's a legal reason to do so (e.g., we might share it with a legal representative).
Legal ground
Legal obligation, legitimate interest, or your consent.
5.1 In the preceding 12 months, we have disclosed strictly necessary personal data for an operational purpose to the following categories of third parties: Category of data recipientsPurpose of personal data transferCountry of the recipient
Marketing and application analytics service providers, such as Iterable, Firebase Analytics (by Google), Purchasely and Appsflyer.We use them to manage our contacts, automate our marketing, gather analytics.United States, Sweden, France, Ireland, United Kingdom.
Performance marketing service providers, such as Hasoffers (Tune Inc.).We use them to calculate our conversion attribution.United States
Third-party payment providers, such as Stripe, Adyen, Checkout, Coingate and similar.They help us to process payments together with our own authorized payment processing companies.United States, Ireland, British Virgin Islands.
Storage and infrastructure service providers, such as BigQuery (by Google).They help us to store, analyze, and manage data.United States
Live chat and support service providers, such as Zendesk.We use them to provide live chat technology and provide support to our users.United States
Security service providers, such as Cloudflare.We work with them to provide improved security and performance.United States
Providers that help us deliver the Alternative ID service, such as Telnyx.We work with them to provide you with Alternative ID services (such as Alternative Number).United States
Group companies.We share data with our group companies to support our daily operations and ensure Surfshark can continue providing you with Services.EEA, United States, United Kingdom.
Other Surfshark’s partners.We share your personal data with our distribution, reseller, and app store partners, each of which is an independent controller of your personal data.United States
Third parties whose services you buy through us.We may provide your personal data to the third parties that deliver the services you buy through us. We only share the minimum amount of data necessary (e.g. your email address) to enable you to receive the services you have requested. Each of these companies acts as an independent controller of your personal data.EEA, United States
5.2 There are a few more cases in which we can share your information with other authorized parties: Category of data recipientsPurpose of personal data transferLegal ground
Third parties (in case of corporate reorganization, bankruptcy or liquidation proceedings).If we undergo a corporate reorganization (like a merger, acquisition, or sale of our business), we may share personal data with the involved third parties (e.g., the buyer, their agents, and advisors) to help complete the transaction.When EU or UK data protection laws apply, our legal basis for this is our legitimate interest in conducting business, or your consent if required by law.
AuthoritiesWe only disclose personal data to law enforcement authorities or courts of competent jurisdiction when we are asked and legally obliged to do so (our page will display if we’re ever asked to do so).Legal obligation
Other partiesWe'll only disclose your personal data with others if you give us permission or if there's a legal reason to do so (e.g., we might share it with a legal representative).Legal obligation, legitimate interest, or your consent.
6. What choices do you have over your personal data?
We respect GDPR, CCPA, and other privacy legislation, and you can ask us to delete your personal data or implement other rights by emailing us at [email protected].
You may be aware that the GDPR, CCPA, and other privacy laws give certain rights to individuals in relation to their personal data. Accordingly, we have implemented additional transparency to help users take advantage of those rights.
As available and except as limited under applicable law, individuals have the rights described below:
RightDescription
Right to accessYou can access your personal data or receive a copy of it by contacting us.
Right to portabilityYou can ask us to provide you with a copy of your personal data in a structured, commonly used, and machine-readable format or, where it is technically feasible, to transmit that data directly to another controller. This right applies only where our processing, carried out by automated means, is based on your consent.
Right to rectificationYou can ask for the correction of inaccurate personal data and, subject to the nature of the collection and use, the completion of incomplete personal data.
Right to erasureRight to deletion of your personal data specified in Clause 2, unless we are legally required or we have a legal basis to maintain certain personal data.
Right to withdraw consentIf we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
Right to objectYou can object to us processing your personal data when we do so based on our legitimate interests.
Right to lodge a complaintIf you are located in the UK, you have the right to lodge a complaint with the Office. If you are located in the EU, you have the right to lodge a complaint with the relevant .
In addition to the above rights, the following rights (which may be subject to certain exemptions or derogations) shall also apply to individuals covered by the CCPA:
RightDescription
Right to Opt Out of Sale/SharingYou have the right to opt out of the sale or sharing of your personal information to third parties. However, we would like to inform you that we do not sell, rent, lease, or trade your personal data with anyone, nor do we plan to do so in the future.
Right to Non-DiscriminationYou have the right to not receive discriminatory treatment if and when you exercise your privacy rights under the CCPA.
Right to Limit Use of Sensitive Personal Information.You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes (e.g., fraud prevention). However, Surfshark does not process personal information in a manner that gives rise to this right.
7. How do we use cookies and other tracking technologies?
Most sites on the internet, including Surfshark’s, use cookies, pixels, web beacons, and other similar technologies (collectively called “cookies”), as they’re pretty convenient to help provide, protect, and improve our Services and Website. If you want to, you can reject those, but some things may not work completely or as well as they should.
You can check what cookies we use in our Cookie Policy which is an integral part of this Privacy Policy.
8. How do we protect personal data?
We really care about your security and privacy and do a lot to protect it. However, anyone who tells you that 100% anything-proof security is possible either doesn’t know much about it or is trying to mislead you. Please keep that in mind.
We have implemented appropriate organizational, physical and technical security measures, including SSL/TLS encryption for data transfers, hashed passwords, firewalls, and regular audits. We take all the reasonably necessary steps to ensure that your personal data is treated securely.
While we implement security measures on our Website and through our Services, you should be aware that 100% security is not always possible. Whenever you give out your information online there is a risk that a third party may intercept and use that information. While we strive to protect your information and privacy, we cannot guarantee 100% security of any information you disclose online. By using the Services, you expressly acknowledge and agree that we cannot guarantee the security of any information provided to or received by us through the Services and that any general information, other information, or information received from you through the Website or our Services is provided under your own responsibility.
9. Children’s data
We do not knowingly collect or solicit personal data from anyone under the age of 18.
We don't offer services to anyone under 18 and don't knowingly collect personal data from them. If you're under 18, please don't send us any personal data. If we find out that we have received personal data from someone under 18, we will delete it right away. If you believe that we might have any such data, please contact [email protected].
10. Who should you contact with questions or concerns?  
Our 24/7 Customer Support Team will help you out as soon as they can.
If you have any questions, concerns or complaints relating to this Privacy Policy and / or Surfshark Services, or you would like to exercise your privacy rights, please feel free to contact us at the following email address [email protected] or chat with us on the Website.
11. Are there any other terms you should know?
The English version of this Privacy Policy prevails.
While translations of this Privacy Policy may be provided in other languages, they may not be fully up-to-date or comprehensive. Thus, in case of any conflict between the English version and the translated versions of this Privacy Policy, the English version shall always take precedence.

No-Logs Policy

According to Surfshark, it does not keep logs of user activity or connection data. Its privacy policy states:

“Surfshark is based in the jurisdiction, which does not require information storage or reporting. We do not collect any information about what you do online (your visited IP addresses, browsing history, session information, used bandwidth, connection time stamps, network traffic, or any other similar information).”

It does store information about your IP address and which VPN server you connect to, but this is deleted once you end your session:

“Our servers do store information about your connection to a particular VPN server (user ID and/or IP address and connection time stamps), BUT this information is automatically deleted within 15 minutes after termination of your session. And be assured that no information is stored about the websites you visit.
However, Surfshark does collect:

  • Aggregated performance data
  • Frequency of use
  • Unsuccessful connection attempts and “other similar information”

Surfshark says this does not contain uniquely identifiable information and it is meant strictly for diagnostic purposes.

When using the app, you will be asked if Surfshark can collect your location data (only your wifi name), which is stored on your device to use the “auto-connect feature” for trusted wifi networks. Surfshark says: “Please rest assured that we do not share this information to any third party. In fact we do not store this information on our end and it is stored only on your device.”

Additionally, users who choose to purchase a Dedicated IP will be required to link their email address to it. However, Surfshark developed a solution for those wishing to remain private by creating an anonymous mode for Dedicated IP, which allows users to unlink their email address and ensure Surfshark remains unaware of the IP owner’s identity.

For the process of payments, Surfshark’s payment processing partners collect the usual data necessary for this, and Surfshark will only process small payment-related information (such as part of the credit card number or payment amount) for payment-related issues (like fraud prevention).
If you need complete anonymity, Surfshark offers the option of using cryptocurrencies.
In December 2022, Surfshark passed an independent audit by Deloitte that tested and confirmed Surfshark’s no-logs policy. Surfshark’ss no-logs claim is audit-verified but has not been tested under adversarial conditions (law enforcement or server seizure).

Privacy is among the main reasons for acquiring a VPN. Surfshark provides privacy and security by:

Audits

With Surfshark’s network containing thousands of servers, having an independent and expert third-party check and report on Surfshark’s claims is important to ensure users receive the service they expect.

Cure53, which is a Germany-based cybersecurity firm that has been running software tests and code audits for more than 15 years, has assessed Surfshark’s security twice, most recently in April 2021. The test took seven days over two weeks and found “no doubt that the Surfshark maintainers have a clear understanding of security and privacy challenges associated with being a VPN provider.” More recently, an independent audit was undertaken by Deloitte, in December 2022, to test Surfshark’s no-logs policy.

Surfshark passed, with Deloitte’s findings concluding:

“Based on the procedures performed and the evidence obtained, in our opinion, the configuration of IT systems and management of the supporting IT operations is properly prepared, in all material respects, in accordance with Surfshark’s description of its no-logs policy.”

Encryption

VPN Protocol Encryption Open Source Windows macOS iOS Android Linux
WireGuard ChaCha20-Poly1305 Yes Default
OpenVPN (UDP) AES-256-GCM Yes
OpenVPN (TCP) AES-256-GCM Yes
IKEv2/IPsec AES-256 No
Open-Source Client

The encryption cipher protects your traffic in transit. All ciphers listed here are considered secure by current standards. Open source protocols can be independently audited. The default protocol is what the app uses unless you change it.

A VPN hides your activities, data, and identity through encryption – which, simply put, is the practice of turning normal text into a ciphertext no one can read.

Surfshark uses AES-256 encryption, which is virtually impenetrable and the most effective encryption algorithm available. (It would take the world’s fastest computer billions of years to crack an AES-256 encryption!) As a result, AES-256 is one of the most respected encryption options you can get, used by the majority of big VPN providers, like ExpressVPN and NordVPN.

However, Surfshark also uses ChaCha20 encryption, depending on the protocol it uses. A protocol is a set of rules that determine how data will be moved over a VPN, including how it will be encrypted.

Surfshark uses IKEv2, OpenVPN, and WireGuard protocols, and will automatically recommend the best protocol for you depending on the device you’re using and your reasons for needing a VPN (though you can choose any of Surfshark’s available protocols in the app’s settings).

  • WireGuard is the newest and lightest protocol, which means it should be the fastest option.
  • IKEv2 is similar, and a great choice for on-the-go.
  • OpenVPN is often a great choice for routers.

IKEv2 and OpenVPN both use AES-256 encryption, whereas WireGuard uses ChaCha20. The key difference between AES-256 and ChaCha20 is how their ciphers convert text. ChaCha20 is believed to be faster, though it doesn’t yet have the same trustworthy reputation as AES-256 since it’s still fairly new.

Surfshark lets you choose the protocol your device uses in its app settings, so you can change your mind at any time.

DNS Leak Protection

In addition, Surfshark ensures DNS leak protection, so your activities and data should remain secure. If a VPN has DNS leaks, it means some of your activity and/or privacy data is not being encrypted and is therefore not anonymous or protected. You may not even know, as you’d expect the VPN to be working.

Each Surfshark server has its DNS with leak protection to prevent this from happening.

What Features Does Surfshark Offer?

Our Take
The feature set punches above its price point. Nexus (their proprietary server networking tech), IP Rotator, and Dynamic MultiHop are genuine innovations, not marketing rebrandings. CleanWeb handles ad/tracker blocking at the DNS level. The main gap: no split tunneling on iOS or Linux.
Surfshark Feature Comparison
Kill Switch WinMaciOSAndroidLinux
Split Tunneling WinMaciOSAndroidLinux
Dedicated IP
Multihop (Double VPN)
Ad/Tracker Blocker
Open-Source Client
Warrant Canary
P2P/Torrenting
Tor/Onion Support
Smart DNS
Obfuscated Servers
2FA/MFA
Post-Quantum Encryption (WireGuard)
Custom DNS
Developer Tools
Simultaneous Devices Unlimited
What Unique Features Does Surfshark Offer?
Unlimited Devices No limit on simultaneous connections per account Similar to: IPVanish
CleanWeb Blocks ads, trackers, malware, and phishing attempts Similar to: NordVPN, ExpressVPN, ProtonVPN
MultiHop (Dynamic) Route traffic through two VPN servers in different countries Similar to: NordVPN, ProtonVPN
Nexus Server network technology routing traffic through multiple servers simultaneously Only at Surfshark
IP Rotator Automatically changes exit IP address every 5-10 minutes without disconnecting Only at Surfshark
Camouflage Mode OpenVPN-based obfuscation that makes VPN traffic look like regular web traffic Similar to: VyprVPN, Astrill VPN
NoBorders Detects network restrictions and provides optimized server list for censored regions Only at Surfshark
Alternative ID Generates alternative email address and virtual identity for website registrations Only at Surfshark

Surfshark is stuffed with useful features. This includes the basic VPN features you would expect from any provider, such as DNS leak protection, secure encryption, and an automatic kill switch.
On top of that, Surfshark offers additional special features of its own, to help keep your data and privacy secure (though not all of these are available on all platforms):

CleanWeb 2.0

(Available on browsers Chrome, Firefox, and Edge.)

CleanWeb 2.0 is Surfshark’s new, upgraded ad and tracker blocker. Combining four key features into one, CleanWeb 2.0 can be used as an ad blocker, cookie pop-up blocker, data breach alert, and malware alert. By blocking ads and malware before they can load, CleanWeb 2.0 also helps save mobile data and boost browsing speeds.

Regular CleanWeb is available with the VPN app on iOS, macOS, Android, Windows, Linux, and Fire TV. However, this lacks CleanWeb 2.0’s ability to block video ads, its integrated cookie pop-up blocker, or offer data breach and malware alerts.

Kill Switch

Surfshark Kill Switch & Split Tunneling
Platform Kill Switch Split Tunneling
Windows Internet-level No always-on App-based, Inverse
macOS Internet-level No always-on App-based, Inverse
iOS Internet-level No always-on Not available
Android Internet-level Always-on App-based, Inverse
Linux Internet-level No always-on Not available

(Available on Android, iOS, macOS, and Windows.)

If your VPN connection unexpectedly disconnects, Surfshark’s Kill Switch will automatically cut you off from the internet to prevent any information from being leaked. This can be turned on and off in settings.

Camouflage Mode

(Available on Android, iOS, macOS, Windows, and Linux.)
Camouflage mode disguises your connection to look like regular browsing traffic, so even your internet service provider can’t tell you’re using a VPN. This helps you bypass any content filtering, especially if your country blocks VPN ports.

Override GPS Location

(Available on Android)
Location override lets you match your GPS location to the Surfshark server you’re connected to. This can be useful if you need to use an app that only provides a service in certain countries.

NoBorders

(Available on Android, Windows, macOS, and iOS.)
If NoBorders detects you’re connected to a network with certain restrictions (usually enforced by the country you’re in), it can help you find servers that will work the best.

Obfuscated Servers

Obfuscated servers hide the fact that you’re using a VPN, by making your internet traffic look like regular traffic. You might need this to unblock your VPN so it can work in the first place if you’re in a country that places restrictions on the use of VPNs, but also to hide your use of a VPN from your internet service provider, prevent government tracking, and bypass any blocks strict internal networks may have placed on VPN usage to ensure you can get internet access.

Multi-Hop Servers

(Available on Android, Windows, macOS, and iOS.)

Instead of connecting to just one server at a time, Multi-Hop switches your connection from one server to another across multiple countries at a time, enabling a greater level of ID protection and footprint masking.

Pause VPN

(Available on Android and iOS – and coming soon to Windows and macOS)

Using a button on your app’s connection screen, you can choose to pause your VPN for 5, 30, or 120 minutes. During this time, your entire internet traffic will skip the encryption and private tunneling part of your VPN, but you won’t be disconnected from it.

Your connection will automatically resume after the selected time is up.

IP Rotator

(Part of Surfshark’s new Nexus technology, being rolled out gradually across 2022 and 2026)

To prevent privacy concerns from having the same IP address when connected to a VPN for a long period, IP Rotator changes your IP address periodically, without disconnecting you from the VPN network. This makes you even more difficult to track than with a standard VPN.

Dedicated IP

(Available on Windows, macOS, Android, and iOS.)

VPN services usually provide their users with a new IP address for each session. As a result, the one used by you today could be used by someone else tomorrow.

Surfshark now offers the option to have a dedicated IP address – one unique and anonymous to the user that doesn’t change. No one else will be able to access or associate you as the owner of the IP, but it prevents websites from blacklisting unstable IPs or from thinking you’re a bot and triggering interrupting verifications like CAPTCHA requests.

Currently, Surfshark’s dedicated IPs exist in a few locations, including Los Angeles, New York, Dallas, and San Jose in the US, as well as in the UK, Netherlands, and Germany. Availability is limited, so not every location may be guaranteed for purchase, but Surfshark says it’s working on making more countries available soon.

It should also be noted that Surfshark’s dedicated IPs have an additional monthly cost, with users required to pay an extra $3.75 a month.

Manual WireGuard Connection

Instead of using the WireGuard protocol through the Surfshark app, you can also opt to use it for manual connections.

Manual connections allow for a faster and more stable connection on devices not compatible with the Surfshark app, provide a faster connection on compatible routers, protect all devices without affecting network speed, and allow users in countries with VPN restrictions to access WireGuard benefits.

Alternative ID

Alternative ID is a feature that gives you a new identity and email to use online protecting your real identity online. You give information about the persona you want to create and it gives you a new email address and profile. This prevents your real information from falling into malicious sites and databases safeguarding your identity.

This feature is available for all plans – VPN, Surfshark One and Surfshark One+.

Graphical User Interface (GUI)

(Available on Linux)

The Surfshark app for Linux provides a genuine GUI, meaning users can browse, connect to, and mark their favorite servers without having to enter a single into the terminal. It also allows seamless switching between OpenVPN and WireGuard, without the need to adjust any settings.

How many Servers does Surfshark have?

Surfshark has 4,500+ servers across 100 countries, on six continents.
The further the server is from your actual location, the slower your internet speed will be, so it’s good to have a wide selection of servers available, and Surfshark’s should be enough for most users. Additionally, Surfshark claims its number of servers is continually growing. 

Most of the servers offer P2P support, URL and ad blocking, VPN chaining, and split tunneling. All servers will support your choice of VPN protocol.
When you open the Surfshark app, you will also be able to choose between the different types of servers: Locations, Static IP, or MultiHop.
mac_locations.png

Which one to choose depends on your preferences. Static IP means you always have the same IP address, whenever you use that specific server and reconnect – this gives you faster speeds and better access to geo-restricted content. On the downside, that IP address is also always linked to you.

The MultiHop option gives you better security, by sending traffic through two different servers. Users’ speeds will be slower, but the IP address is masked better. This is also known as a Double VPN.

All of Surfshark’s servers are 100% RAM only – Surfshark is one of the first VPN providers in the industry to upgrade all its servers to a RAM-only infrastructure. RAM-only servers are more secure as no information can physically be taken from them (should any malicious third party gain access to them), and any information on the hard drive is automatically wiped off whenever the server is turned off.

Additionally, every server on Surfshark’s network offers private DNS, as well as leak protection when using the IPv4 stack, ensuring your requests won’t be accessible in an unencrypted format.

Surfshark has also recently introduced its new Nexus technology which connects all of Surfshark’s VPN servers into a single, global network. This means, that instead of going through a single VPN tunnel, your traffic is routed through an entire network of servers. As a result, your VPN’s security and privacy are improved, its performance is stabilized, and the connection speed is enhanced.

Defense Against Malware and Data Breaches

Malware is software (like a program or file) that is harmful to your computer and could be used by scammers to steal your data. You can get malware through a variety of ways, but some of the most common are by accidentally clicking on an infected website or email, or by downloading an infected file.

VPNs can’t always help against malware, as they don’t prevent you from opening links or making downloads. However, Surfshark could help prevent malware from carrying out its intended task by making it harder for the malware to connect with its handler to transfer data or receive commands.

Additional Protection

For greater protection, Surfshark has an antivirus feature in its Surfshark One bundle, which you can add to your VPN subscription for an additional monthly cost. This will notify you immediately should you download any malicious files, schedule scans to check for malware, and remove any threats in real-time before they can harm your device. It will also inform you if any databases containing your sensitive data (such as email, password, ID, or bank information) have been breached.

In addition, Surfshark One subscribers have access to Incogni. This tool contacts data brokers (organizations that collect and sell data) to request they delete any data they have on you. This should help prevent online marketing ploys from targeting you.

Incogni: Personal Data Removal Service

Surfshark recently introduced Incogni, a personal information removal service to help you take back control of your data. Incogni allows you to opt out of the collection and sale of your personal information by data brokers and people search sites.

Typically, the steps required to remove yourself from the internet are a hassle to deal with. But Incogni makes the process easier. By removing your personal information, you can lower your risk of invasion of privacy, scams, and even identity theft. What’s more, it’s the most comprehensive data removal service on the market and is fully automated.

The prices of Incogni are:

  • 1-month plan for $12.99/mo (plus tax);
  • 1-year plan for $6.49/mo (billed $77.88 annually (plus tax)).

We haven’t tried Incogni yet, but once we’ve completed our test, we’ll post our results on this review.

Bypasser (Split Tunneling)

(Available on Android, Windows 7,8, 10, 11, and routers.)

Bypasser is what Surfshark calls VPN split tunneling (and is very similar to whitelisting). It allows you to choose which information uses the VPN connection (and is therefore encrypted) and which can be transmitted via the standard internet.

This is useful if you find some sites are slow on the VPN, as you can make those run faster by having them bypass the VPN, while other services you use remain protected. It’s also helpful if a legitimate site, like your bank, needs to confirm your real location.

Reverse Bypasser (Route via VPN)

(Available on Android, Windows 7,8, 10, 11, and routers.)

In contrast to the standard Bypasser, Surfshark’s Reverse Bypasser allows you to choose which sites will only go through the VPN (and therefore will always be encrypted). Any other apps and websites will be able to see your real IP address.

P2P Servers

Peer-to-peer (P2P) networks allow all connected computers access to all or some part of the same resources and data. This lets you share files fast and safely, without the use of a central server (known as torrenting).

All Surfshark servers support P2P traffic.

Which Apps & Devices Are Supported?

Our Take
App support is comprehensive across all major platforms, including browser extensions for Chrome, Firefox, and Edge. Router support means you can cover devices that can't install VPN apps directly. The unlimited device policy eliminates the usual headache of choosing which devices to protect.

Here are some other questions our readers have asked us about Surfshark.

How to Install

Surfshark has an app for each of the platforms it’s available on (iOS, Android, macOS, Windows, Amazon Fire TV), so installing it is as simple as clicking “download” on the relevant app store for your device. Each option is linked on Surfshark’s website, so you don’t even need to search for it.

There are also dedicated user guides for each app, platform, and browser extension on Surfshark’s “Setup & Installation” section within its Help Centre.

If you’re unable to install the app, there are walk-through guides on how to install Surfshark manually.

Setting up on a router is slightly more complicated, as you can’t simply download an app. However, even this isn’t particularly complicated, if you follow one of the many step-by-step illustrated guides Surfshark offers.

Though it depends on the exact router you’re using (and Surfshark explains how to find out if your router is compatible), you should just need to find your Surfshark credentials (which can be located in the “setup” part of your Surfshark account), choose a server, and then configure your chosen protocol. Again, this is all explained in detail in the “Router” section of Surfshark’s Help Centre.

VPN Server Locations

Our Take
The server network covers 100 countries - more than most competitors. All servers are RAM-only (diskless), which means they can't store data even if seized. Physical server locations are supplemented by virtual servers in some regions for better coverage.

Surfshark has servers in 100 countries across 6 continents. Last updated: 29/03/2026

VPN Server Locations: Surfshark
Simple World MapAuthor: Al MacDonald Editor: Fritz Lekschas License: CC BY-SA 3.0 ID: ISO 3166-1 or "_[a-zA-Z]" if an ISO code is not available
FewMany No servers

Surfshark has servers in 19 US states across 24 cities . Last updated: 29/03/2026

US Server Locations: Surfshark
1 city3+ No servers

US Server Locations

Customer Support

Our Take
Live chat support is available around the clock and generally responds within minutes. The knowledge base is well-organized. No phone support, which is standard for VPN providers at this price point.

Live Chat

Surfshark offers 24/7 live chat with support agents who can help with technical issues, billing questions, and setup guidance. It’s the fastest way to get help at any hour.

Email Support

You can also reach Surfshark’s support team via email for less urgent queries or issues that need more detailed investigation.

Knowledge Base

Surfshark maintains a comprehensive Help Center containing step-by-step guides and video instructions for everything from getting started and common issues, to billing and account questions. It also has an impressive range of setup guides and tutorials for all supported platforms and devices, including routers.

Each help article shows when it was last updated, with the majority checked within the previous two weeks. The longest gap we found was three months.

Community & Forums

Surfshark maintains an active blog with new articles posted every couple of weeks, usually covering important service updates or helpful tips on VPN technology.

Who Isn’t Surfshark Right For?

Based on our testing and research:

9-Eyes jurisdiction – Surfshark is based in the Netherlands, a member of the 9-Eyes intelligence-sharing alliance. While Surfshark maintains a no-logs policy audited by Deloitte, users in high-risk situations – journalists, activists, whistleblowers – may prefer a VPN based outside this alliance entirely.

Consider instead: Proton VPN (Switzerland) or IVPN (Gibraltar)

Corporate consolidation – Surfshark merged with Nord Security in 2022. Both brands now operate under the same parent company. While they are run as separate services, users who prefer independently-owned providers should consider Proton VPN or Mullvad instead.

Consider instead: Proton VPN or Mullvad

Fewer independent audits – Surfshark launched in 2018 and has completed two Deloitte audits. Established competitors like NordVPN (4 audits) and ExpressVPN (4 audits including server architecture) have longer audit histories. For users where audit depth matters, this is a relevant gap.

Surfshark Competitors

Surfshark ExpressVPN NordVPN CyberGhost Private Internet Access
Best rate $1.99/mo $3.49/mo $3.09/mo $2.19/mo $2.19/mo
Monthly price $15.45 $12.99 $12.99 $12.99 $11.99
Servers 4,500+ 3,000+ 8,400+ 9,700+ Undisclosed
Countries 100 105 167 100 90
Devices Unlimited 8 10 7 Unlimited
Jurisdiction 🇳🇱 Netherlands 🇻🇬 BVI 🇵🇦 Panama 🇷🇴 Romania 🇺🇸 USA
Money-back 30 days 30 days 30 days 45 days 30 days
Kill switch
Split tunneling
No-logs audited
Dedicated IP
Open source
RAM-only servers
Ad/tracker blocker
Our rating 8.2/10 8.6/10 8.8/10 7.4/10 7.2/10
Review Read review → Read review → Read review → Read review → Read review →

Our Verdict

Our Take
Surfshark delivers the best value proposition in the VPN market right now. Unlimited devices, competitive speeds, a Deloitte-audited privacy policy, and genuine feature innovation - all at one of the lowest prices among premium providers. The trade-offs (newer track record, Netherlands jurisdiction, some platform feature gaps) are worth weighing, but for most households, Surfshark is the smart pick.

Based on our hands-on testing and data analysis, here is our overall assessment of Surfshark.

How we tested Surfshark Review: Unlimited Devices, 4,500+ Servers, $2.19/Month
🔒 Purchased with our own money (no free accounts)
🧪 3 leak tests: IP, DNS, WebRTC
📊 Scored using published methodology
💰 Affiliate partnerships do not influence scores
28,947 VPN tests run on this site · latest 8 Jun 2026
💡 We check IPv4, IPv6, and WebRTC leak vectors

Frequently Asked Questions

Is Surfshark trustworthy?

Yes, Surfshark is trustworthy. Being based in the Netherlands, Surfshark is legally bound to comply with strict GDPR standards, and its comprehensive no-logs policy has been confirmed with multiple independent audits.

In addition, Surfshark uses RAM-only servers that each have their own DNS leak protection and obfuscation settings, and when paired with Surfshark’s industry-standard encryption, choice of protocols, and privacy-focused features (such as IP rotator and camouflage mode), its VPN is a secure choice.

What’s Surfshark’s company history?

Surfshark is a cybersecurity company based in the Netherlands, focused on developing humanized privacy and security solutions.
Its VPN service launched in 2018 and is now one of the major VPN brands worldwide, having grown to include the new WireGuard protocol, an additional package of antivirus and alert features (known as its Surfshark One bundle), and a single, global network of 100% RAM-only servers spanning 100 countries across Europe, America, Asia, and Middle East & Africa.
In 2022, Surfshark merged with Nord Security (which owns the VPN brand NordVPN), at which time it received a valuation of $1.6 billion. NordVPN and Surfshark remain separate, independent businesses, though both are two of the five founding members of the VPN Trust Initiative, which aims at fostering cooperation in the VPN industry.

Can you be tracked using Surfshark?

No. There is no way to be tracked using a Surfshark, as long as the VPN is encryption and working as expected. Surfshark uses industry-standard AES-256 encryption and ensures DNS leak protection, so your web traffic, data, and traffic cannot be tracked while you are connected to Surfshark.

In addition, Surfshark offers extra features that ensure users’ privacy and anonymity, such as camouflage mode, multi-hop, IP rotator, and obfuscated servers.

Can you use Surfshark for Netflix?

Yes, Surfshark can be used for Netflix. Once you have active subscriptions for both Surfshark and Netflix, install Surfshark on the device or router you want to watch Netflix on. Once installed, connect to the VPN, and then open and log into your Netflix account. You can now securely stream all your favorite shows on Netflix.

For smart TVs incompatible with apps, you can use Surfshark’s Smart DNS setting to change your virtual location while streaming.

What is the monthly fee for Surfshark?

Surfshark’s monthly fee depends on the length of the subscription plan you choose, with the monthly price cheaper the longer you’re signed up. For the basic Surfshark Starter plan, monthly prices range from $15.45 to $1.99 if you pay for 24 months (+3 months free) upfront. Please note that any plan longer than one month is billed as one lump sum, and the prices don’t include tax.

Please see our “Surfshark Plans and Pricing” section above for more details.

Is Surfshark safe?

Yes, Surfshark is safe. It uses industry-standard AES-256 encryption, ensures DNS leak protection, and maintains 100% RAM-only servers. This means your data is virtually impossible to decrypt, and nothing is kept on the servers themselves should hackers gain physical access to them.

In addition, Surfshark upholds a strict no-logs policy, which has been tested and verified through multiple independent audits, and is based in a country within GDPR jurisdiction.

What is the difference between Surfshark and PureVPN?

Surfshark and PureVPN are both secure VPN providers that work across the majority of platforms and devices, with a similar price structure. While PureVPN offers more servers, Surfshark’s network spans more countries and all of its servers are 100% RAM-only, meaning they’re safer and more secure.

A Surfshark subscription also allows users to connect an unlimited number of devices simultaneously, whereas PureVPN restricts users to a maximum of 10 devices.

8.2 / 10 Excellent

Unlimited devices at a rock-bottom price. Good enough for most people, not the best at anything.

Best for: Families and multi-device households on a budget
Not for: Privacy purists (Netherlands is 9-Eyes, owned by Nord Security)
Leak Tests No-Logs Audit Kill Switch Split Tunneling Jurisdiction Open Source
From $1.99/mo (best plan)
$15.45/mo if paying monthly
30-day money-back guarantee
Our rating scale
Rating Rubric
9 - 10Exceptional - best in class, no significant weaknesses
8 - 8.9Excellent - highly recommended with minor trade-offs
7 - 7.9Good - solid choice for most users
6 - 6.9Adequate - works but has notable limitations
5 - 5.9Below average - consider alternatives
Below 5Not recommended

Update history

This page was revised 51 times between June 2021 and April 2026.

Added corporate structure references with links to ownership records.

Restructured Customer Support section with dedicated subsections for live chat availability, email support, and the Help Center's step-by-step guides and video tutorials.

Linked device and money-back guarantee references to verified hub data so figures stay current.

Added WireGuard protocol details with Nexus networking architecture, Deloitte-audited privacy credentials, Netherlands jurisdiction context, and unlimited device support across all platforms.

Added company background section covering Surfshark's 8-year history since 2018.

Added RAM-only server infrastructure detail explaining how Surfshark's diskless servers protect user data.

Added ecosystem overview showing Alternative ID, Surfshark Antivirus, Surfshark Alert, and 3 more bundled products available alongside the VPN subscription.

Added table of contents with section-by-section navigation for faster access to specific topics.

Updated server network overview covering 4,500 servers across 100 countries, with interactive coverage map and nearest-server highlighting.

Redesigned quick-reference spec table showing unlimited simultaneous connections, 4,500 servers, 100 countries, AES-256-GCM encryption, and 30-day money-back guarantee.

Added source citations and verification dates to all factual claims in the Surfshark review.

Added policy change monitoring showing recent updates to Surfshark's privacy policy with paragraph-level diffs.

Added transparency tracker with transparency report data showing government and DMCA request volumes.

Reordered sections to match how readers evaluate a VPN: streaming first, then speed, privacy, features, and pricing.

Expanded privacy section with Netherlands jurisdiction analysis, Deloitte-audited no-logs policy (2 independent audits).

Improved pros and cons with more specific language grounded in test data and verified claims.

Added curated "Not Right For" section with severity-coded concerns addressing speed and compatibility limitations.

Removed outdated editorial commentary and unverifiable claims from the Surfshark review.

Added payment methods section for Surfshark covering accepted cards, digital wallets, and cryptocurrency options.

Rewrote protocol comparison covering WireGuard, OpenVPN (UDP), OpenVPN (TCP), IKEv2/IPsec with per-platform availability and security ratings.

Added platform compatibility breakdown for Surfshark showing kill switch and split tunneling availability per operating system.

Added ownership transparency section identifying Nord Security as parent company, with links to NordVPN as sibling brands.

Reorganized review content into clearer sections, moving misplaced blocks and removing layout inconsistencies.

Replaced static overview tables with live data-driven spec cards for Surfshark, ensuring pricing and server counts stay current.

Added pros/cons table, detailed overview specifications table covering 17 key features, streaming compatibility information across 8 gaming platforms and 10+ services, and expanded platform support details.

Removed verbose introductory paragraphs and restructured opening with clearer, more direct language about Surfshark's key strengths.

Restructured introduction by removing redundant opening statement and condensing overview into clearer, more focused narrative.

Restructured opening paragraphs for improved flow, added pros/cons table and overview table with 16 key specifications, expanded streaming section with platform and service compatibility details.

Restructured introduction by removing redundant opening paragraph and replacing vague phrasing with clearer, more direct language about Surfshark's market position and review scope.

Reorganized and expanded the introduction with a pros/cons table, detailed specifications overview, and restructured section headings for improved clarity and navigation.

Restructured opening paragraphs for improved clarity and removed "comprehensive" descriptor from review introduction.

Restructured introduction with improved clarity and flow, reorganized Pros & Cons table, and added overview table with key specifications including server count, encryption protocols, and supported platforms.

Reorganized introduction paragraphs for improved flow and removed "comprehensive" descriptor before "Surfshark review."

Rewrote opening paragraph for clarity and removed "comprehensive" descriptor from review introduction.

Restructured opening section with clearer headline and improved introduction flow, reorganized pros/cons with supporting callouts, and added overview table with key specifications.

Rewrote introduction to be more concise, removed "comprehensive" descriptor, and reorganized opening paragraphs for better flow.

Restructured introduction, added brand background section with company history and GDPR compliance details, created pros/cons list, and added overview table with specifications.

Restructured opening paragraphs for better flow, added brand background section with company history and GDPR compliance details, and created overview table with 16 key specifications.

Restructured introduction by moving opening summary sentence to standalone paragraph, expanding brand background section with company history and regulatory compliance details.

Restructured introduction, expanded brand background with merger details and GDPR compliance information, and added overview table with 16 key service specifications.

Restructured introduction by expanding brand background section with merger details, GDPR compliance explanation, and VPN Trust Initiative membership while streamlining opening paragraphs.

Restructured introduction with expanded company background, added pros/cons section, and created overview table with 16 key specifications.

Restructured opening section by moving introductory paragraph before pros/cons list and reorganizing content flow for better readability.

Restructured introduction by breaking up a lengthy paragraph into multiple focused sections with clearer hierarchy and added a quick-reference pricing callout.

Restructured opening section by moving introductory overview higher in the page and expanding the pros & cons list with three new items.

Added introductory paragraph, pros/cons list, detailed overview table, and streaming compatibility section to provide readers with quick reference information.

Corrected spelling error "Suirfshark" to "Surfshark" and fixed incomplete sentence about OpenVPN protocol options.

Corrected spelling of "Surfshark" and fixed platform typo ("Linus" to "Linux"), plus rewrote multiple sections for clarity and added detailed testing data on DNS leaks.

Added Surfshark review content including pricing, features table, advantages list, leak testing results, logging policies, protocol details, and streaming capabilities analysis.

Corrected grammar ("That is not lost on Surfshark" phrasing), fixed incomplete sentence in Protocols section, and clarified logging policy language throughout.

Corrected 3 spelling errors ("1,99" to "$1.99", "know" to "known", "ap" to "app") and removed redundant text about unique user IDs.

Show all 51 updates (48 more)

Who Owns Surfshark?

Nord Security Lithuania / Panama

Nord Security Inc.

Surfshark was acquired Feb 2022.

Also owns NordVPN, Atlas VPN.

Key People
Tomas Okmanas Co-founder & Co-CEO
Eimantas Sabaliauskas Co-founder
Quick Facts
Founded 2012
~2,000 employees
Notable Events
Oct 2019 Breach Data center breach disclosed (Finland server, 2018). Server provider compromised via expired remote management credentials. No user data affected.
Not quite right? Consider these alternatives
Trust No One (Test Yourself)

Run our independent leak test while connected to your VPN and see the results for yourself. We check for IP, DNS, and WebRTC leaks in under 30 seconds. Every test adds to our public dataset.

Join Our Test Panel →

Surfshark Alternatives

Considering Surfshark? See how it compares

Based on independent testing data and specifications from each provider.

CyberGhost

Streaming with huge server network

9,700+ servers100 countries
Read our CyberGhost review →

IPVanish

Unlimited connections on a budget

3,200+ servers113 countries
Read our IPVanish review →

NordVPN

All-round protection

8,400+ servers167 countries
Read our NordVPN review →

Compare all VPNs →

How we test VPNs

Our testing process involves purchasing each VPN with our own money and installing it on Windows, macOS, and mobile devices. We run a three-stage leak test (IP, DNS, and WebRTC) multiple times across different servers to check for data exposure.

We also test streaming access, kill switch reliability, and split tunneling functionality. All testing is conducted without notifying the provider. Specifications and pricing are verified directly from the provider's website.

Our full testing methodology is published at vpntesting.com/methodology.