Mullvad Browser vs GNOME Web: privacy compared
Mullvad Browser and GNOME Web are both rated in browsers against the same 8 public criteria. Mullvad Browser does better on fingerprinting protection, no calls to big-tech services and timely security updates.
| Criterion | Mullvad Browser Our pick | GNOME Web |
|---|---|---|
| Grade | Grade A A (90/100) | Grade C C (68/100) |
| Jurisdiction | Sweden Fourteen Eyes | Unknown |
| Open source Is all the source code needed to run the product public? | Yes source | Yes source |
| No trackers or telemetry Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default? | Yes source | Yes source |
| No ads or data sales Is the product funded without advertising, ad targeting or selling user data? | Yes source | Yes source |
| Independent audit Has an independent security or privacy audit been published within the last three years? | No | No |
| Blocks trackers by default Are third-party trackers blocked by default, without installing extensions? | Yes source | Yes source |
| Fingerprinting protection Does the browser defend against fingerprinting by default? | Yes source | No |
| No calls to big-tech services Does the browser work without background connections to Google, Microsoft or Apple services? | Yes source | Partial source |
| Timely security updates Are security fixes from the upstream engine shipped quickly and automatically? | Yes source | Partial source |
Summaries
Mullvad Browser. Mullvad Browser scores 90 out of 100 (grade A) on the browsers criteria. It meets 7 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, blocks trackers by default, fingerprinting protection, no calls to big-tech services and timely security updates. It does not meet independent audit. It is based in Sweden: Fourteen Eyes member; EU member (GDPR).
GNOME Web. GNOME Web scores 68 out of 100 (grade C) on the browsers criteria. It meets 4 of 8 criteria: open source, no trackers or telemetry, no ads or data sales and blocks trackers by default. It partly meets no calls to big-tech services and timely security updates. It does not meet independent audit and fingerprinting protection.