When Mullvad VPN co-founder Daniel Berntsson's personal donation of 5 million Swedish kronor - roughly $514,000 - to a controversial Swedish populist party became public, the privacy industry took notice. The disclosure, which revealed that Berntsson's contribution accounted for approximately 72% of the Örebro Party's total annual income, sent Mullvad into damage-control mode almost immediately. Windscribe, a Canadian rival, chose not to stay quiet - but rather than a pointed political critique, it delivered a parody.
A Calculated Joke With a Serious Undertone
Windscribe's social media response was written in the unmistakable register of a corporate crisis communication: earnest, self-flagellating, and full of promises to "make things right." The punchline arrived early. After warning users that it needed to "get ahead of any potential public outcry," the company revealed that CEO Yegor Sak had indeed been donating personal funds to a cause - specifically, to Save Our Scruff, a dog rescue organization in Toronto. Sak, the statement noted, is the proud owner of a corgi named Snoop.
Anticipating the obvious counterargument - that an exclusively pro-dog stance risked alienating a portion of its user base - Windscribe swiftly disclosed a balancing act: Sak had also donated to the Annex Cat Rescue in Toronto, ensuring ideological neutrality on the matter of domestic pets. The statement concluded in the style of a standard corporate disclaimer, assuring users that these donations had no bearing on the security or operation of the service.
The joke lands because the structure is so faithful to the original. Mullvad's actual response to the Berntsson controversy followed the standard playbook precisely: distance the company from the individual, reaffirm organizational values, and offer refunds to users who felt their trust had been compromised. Windscribe simply applied that template to an entirely benign situation, making the template itself the subject of scrutiny.
Why Executive Conduct Matters More in Privacy Than in Most Industries
The Mullvad episode illustrates something specific to the VPN industry: the product being sold is trust. Unlike a streaming platform or a messaging app, a VPN sits directly between a user's device and the internet. It sees connection metadata, timing data, and in some configurations substantially more. The entire value proposition rests on the belief that the provider will not misuse what it technically could access.
This is why VPN users tend to scrutinize providers with unusual intensity. They read audit reports, parse privacy policies for jurisdiction-specific loopholes, and follow the professional conduct of company leadership. A no-logs policy is only as credible as the people enforcing it. When an executive's personal values diverge sharply from the image a company projects, that gap becomes a legitimate concern - not merely a PR problem.
Mullvad has, over the years, built a reputation for principled stances: it accepts anonymous cash payments, it removed support for port forwarding when it concluded the feature was being misused, and it has consistently avoided the affiliate marketing arrangements common among competitors. That record made Berntsson's disclosure more jarring, not less. Users who chose Mullvad precisely for its apparent ideological coherence found themselves reassessing that judgment.
Brand Identity as a Competitive Dimension
Windscribe's response is also a reminder that competitive positioning in the VPN market extends well beyond technical specifications. Encryption protocols, server counts, and jurisdiction matter - but so does the perceived character of the organization. In a market where most reputable providers offer comparable core functionality, differentiation increasingly happens at the level of identity and credibility.
By responding with humor rather than condemnation, Windscribe avoided the risk of appearing opportunistic while still ensuring its name entered the conversation. The parody also communicated something implicitly: that its own CEO's financial activities are mundane enough to be used as a punchline. That is, in context, a form of reassurance.
The broader dynamic at work here - where a single executive's private conduct can destabilize a company's relationship with its users - reflects how fundamentally personal the privacy industry has become. Choosing a VPN provider is increasingly less like selecting a utility and more like deciding whom to trust with sensitive information. That shift places unusual pressure on the humans behind the product, not just the product itself.
