VPN providers
AirVPN privacy rating
VPN service run by Air di Paolo Brini in Italy. Accounts need no email address, and the open-source Eddie client supports WireGuard and OpenVPN.
Summary
AirVPN scores 62 out of 100 (grade C) on the VPN providers criteria. It meets 6 of 13 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, anonymous payment, open-source apps and modern protocols. It partly meets open source, security headers and audited no-logs policy. It does not meet independent audit, transparency report, tells users about requests and modern web standards. It is based in Italy: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade B+ and Internet.nl website score 68%.
Score 62 out of 100. How scoring works
Criteria
-
Partial
Open source Weight 3 of 3
Is all the source code needed to run the product public?
The Eddie client is open source under GPL-3.0. The server side is closed source.
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The privacy notice states no third-party add-ons or tracking cookies are used on the website. The Android app has no known trackers on Exodus.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid plans. The privacy notice states data is not passed to third parties.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
No
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
No transparency report or government request policy is published.
-
No
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
No published policy on notifying users about data requests.
-
Partial
Audited no-logs policy Weight 3 of 3
Has an independent audit confirmed that activity and connection logs are not kept?
The privacy notice states traffic and IP addresses are not logged. Not audited.
-
Yes
Anonymous payment Weight 2 of 3
Can an account be created and paid for without an email address, name or card?
No email address is required, and Monero and other cryptocurrencies are accepted directly.
-
Yes
Open-source apps Weight 2 of 3
Are the apps for every platform open source?
The Eddie apps for Windows, macOS, Linux and Android are open source under GPL-3.0. There is no iOS app.
-
Yes
Modern protocols Weight 1 of 3
Is WireGuard (or another modern audited protocol) supported?
WireGuard is supported alongside OpenVPN.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B+ (80/100+)
-
No
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Score 68%