No, Mozilla VPN doesn’t log your browsing or network activity. Its privacy notice states that neither Mozilla nor its server partner Mullvad keeps logs of what you do while connected. Mozilla does collect some account and technical data, including your IP address in its own server logs for 90 days, and optional usage stats if you opt in. The free VPN now built into Firefox works differently again. Here’s what each one keeps.
Who actually runs Mozilla VPN?
Mozilla VPN is a Mozilla product, but the VPN servers belong to Mullvad, the Swedish provider best known for letting you sign up without an email address. Mozilla builds the apps, handles accounts and billing, and sends your encrypted traffic through Mullvad’s WireGuard network.
That split matters for logging. Your browsing traffic passes through Mullvad’s infrastructure, which has been audited several times and was famously raided by Swedish police in 2023 without them finding any user data. We covered that episode in Does Mullvad keep logs?. Your account, payment and app data stay with Mozilla, which is based in the US.
What Mozilla VPN says it doesn’t log
Mozilla’s subscription services privacy notice (effective December 17, 2025) is direct about it: no logs of your network activity are kept by Mozilla or Mullvad when you use Mozilla VPN. That covers the sites you visit, the apps you use and the content of your traffic.
This is the part that matters most, and on paper it’s as strong as any VPN we rate.
What Mozilla VPN does collect
Reading the rest of the notice, Mozilla collects four kinds of data.
Technical data, including your IP address. Mozilla says your IP address is temporarily collected as part of its server logs for 90 days, along with your app version, operating system and hardware details. These are Mozilla’s own servers (accounts, updates, service delivery), not the Mullvad VPN servers that carry your browsing. It’s still a longer retention period than most privacy-focused VPNs would accept.
Interaction data, only if you opt in. Usage statistics about features like app exclusions or device count. This is disabled by default. If you turn it on, some of it is shared with Adjust, a marketing analytics company, to measure campaigns.
Approximate location. Derived from your IP to check that the service is available in your country and to prevent fraud.
Payment data. Handled by Stripe, Apple, PayPal or Google Pay. Mozilla receives your billing address and the last four digits of your card, not the full number.
None of this is a browsing log. But it does mean Mozilla holds an account tied to your email and payment method, plus IP addresses for 90 days. Mullvad on its own asks for none of that.
Has Mozilla VPN been audited?
Yes, twice by Cure53, but not in the way many people assume.
In 2021 and again in 2023, Cure53 audited the Mozilla VPN client apps. The 2023 audit covered the Windows, macOS, Linux, iOS and Android apps and found six medium-to-high severity issues, all of which Mozilla says were fixed and verified. These were security audits of the apps. They didn’t examine server-side logging.
The no-logs guarantee for your traffic rests on Mullvad’s infrastructure, which Cure53 has also audited separately. That’s why our table marks Mozilla VPN as audited (Cure53) and gives it 4/5 on the no-logs criterion rather than 5/5.
What could Mozilla hand over if asked?
Mozilla is a US company, so it can receive subpoenas, court orders and national security requests like any other American service. Based on its own privacy notice, what it could provide is limited but not nothing: the email address and billing details on your account, your subscription history, and IP addresses from its server logs if the request falls inside the 90-day window. It couldn’t provide a list of sites you visited through the VPN, because that traffic runs through Mullvad and neither company says it records it. For most people, that’s an acceptable trade. For someone whose threat model includes a US legal request, a provider outside the Five Eyes that doesn’t need your email is the safer choice.
How Mozilla VPN scores in our table
| Criterion | Mozilla VPN | Mullvad (for comparison) |
|---|---|---|
| Overall score | 3.05 / 5 | 4.04 / 5 |
| No-logs policy | 4 / 5 (Cure53) | 4 / 5 (Cure53) |
| Jurisdiction | USA, Five Eyes (2 / 5) | Sweden, Fourteen Eyes (4 / 5) |
| Leak protection | 5 / 5 | 5 / 5 |
| Transparency (ownership) | 5 / 5 | 5 / 5 |
| Bug bounty | Yes | No |
| Streaming | 2 / 5 | 2 / 5 |
| Servers | 500 in 30 countries | 769 in 37 countries |
| Price | $9.99/mo, $59.88/yr | $5.50/mo flat |
Mozilla VPN inherits Mullvad’s strong privacy foundation and adds a friendlier app and Mozilla’s bug bounty. It loses points on US jurisdiction, customer support (no live chat) and features: it only offers WireGuard, has no obfuscated servers and is weak on streaming.
Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.
What about Firefox’s free built-in VPN?
In March 2026, Mozilla started rolling out a free VPN built into Firefox on desktop, first in the US, the UK, Germany and France, then on Android from July 28, 2026, according to Mozilla’s announcement. It gives you 50 GB a month and only protects traffic inside Firefox, not your whole device.
On logging, Mozilla’s support page says the built-in VPN never logs the websites you visit or the content of your communications. It does collect technical data, like connection success or failure, and daily data usage records to enforce the 50 GB cap. Mozilla also says it doesn’t sell browsing data or inject ads.
It’s a decent option for casual browsing on public Wi-Fi. It’s not a replacement for a full VPN: your other apps, your email client and your streaming apps stay outside the tunnel, and Mozilla hasn’t published which infrastructure runs it or an audit specific to it.
Mozilla VPN vs Mullvad: which should you pick?
If you’re considering Mozilla VPN for its privacy, Mullvad direct is cheaper ($5.50 flat per month), needs no email and takes cash, while using the same servers. Mozilla VPN makes sense if you want a polished app, a familiar brand and a single account alongside Firefox and other Mozilla services, and you’re comfortable with an account that Mozilla can identify.
If you want better streaming or live chat support, neither is the right tool. ProtonVPN (4.24/5) offers a similar privacy stance with better streaming and a free plan, and NordVPN (4.63/5) is our top all-round pick. Our Mozilla VPN review covers speed and apps in detail, and our guide to VPN telemetry explains what “no-logs” apps still collect in general.
How to reduce what Mozilla collects
- Leave interaction data (usage stats) switched off in the app settings. It’s off by default.
- Use a dedicated email alias for your Mozilla account.
- Pay through a method you’re comfortable sharing a billing address with.
- If the 90-day IP retention in Mozilla’s server logs bothers you, use Mullvad directly instead.
Mozilla VPN doesn't log your network activity, and it runs on Mullvad's audited servers, which is a strong foundation. It does keep account data, your IP address in its own server logs for 90 days and optional telemetry. It scores 3.05/5 in our table, mostly held back by US jurisdiction and limited features. Firefox's free built-in VPN is fine for casual browsing, but for full-device privacy, Mullvad, ProtonVPN or NordVPN are better picks.