“We view consumer data as toxic waste,” Obscura founder Carl Dong said in an October 3, 2026 interview. He was describing a data-minimization goal—not claiming that the VPN collects no information at all. In the same answer, Dong acknowledged that Obscura can see a user’s connecting IP address. That distinction matters when you are weighing what a privacy subscription can, and cannot, protect.
What does “consumer data as toxic waste” mean?
Dong’s phrase expresses Obscura’s stated preference to avoid collecting consumer data it does not need. He put it this way: “We view consumer data as toxic waste. We don’t want it, don’t need it, and do as much as possible to make sure you don’t have to give us any.” The quote comes from an interview answer about whether Obscura can avoid seeing a user’s connecting IP address; it is a statement by the company’s founder, not independent proof of every operational data practice. It’s FOSS interview with Carl Dong.
The qualification is explicit: Dong also said, “But you’re absolutely right. We can still see the user’s connecting IP address.” So the phrase is best understood as a data-minimization principle, not a claim that no data is visible to the service.
How Obscura describes its two-company VPN model
Obscura describes its service as a two-hop arrangement: Obscura operates the first relay hop, while Mullvad operates the exit hop. According to the interview and Obscura’s technical description, traffic is encrypted to Mullvad’s keys while Obscura relays it. The intended division is that Obscura can see the connecting IP but not the actual traffic, while Mullvad can see traffic leaving through its exit but not the user’s connecting IP. The interview and Obscura’s relay and exit node explanation describe this design.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
| Operator | What the stated design says it can see | What it is intended not to see |
|---|---|---|
| Obscura, first-hop relay | The user’s connecting IP address | The actual traffic content, which the service says is encrypted to Mullvad’s keys |
| Mullvad, exit hop | Traffic leaving from its exit | The user’s connecting IP address |
This is a description of the architecture and its intended privacy effects by the interview and Obscura—not an independent finding that every user’s activity is untraceable.
What trust assumption does the design make?
Dong qualifies the privacy claim: “as long as either Obscura or Mullvad isn’t compromised, no one can correlate your personal identity with your internet activity.” In other words, the explanation depends on the separation between the two operators holding: the model is intended to make one operator insufficient to link identity and browsing activity. It is not a promise that collusion, compromise, a compromised device, or other threats are impossible. The interview’s description of a conventional VPN provider seeing both a user’s identity and traffic is a comparison made in that conversation, not a universal finding about every VPN or multi-hop configuration. Read the interview’s explanation of the trust model.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
What verification is available?
Obscura’s blog says the company completed its first independent audit with Cure53, covering its macOS app, network extension, and protocol. That is a company announcement about a defined audit scope; it does not establish that every operating system, product release, or possible threat has been independently validated. Obscura’s announcement of the Cure53 audit.
The interview also raises reproducible builds as a way for non-developers to assess whether published software corresponds to the source code, but the cited materials here do not establish a specific verification procedure for users. An audit and a privacy architecture are useful evidence to consider, not a substitute for understanding what each claim covers.
Recommended Free Tools
What does the service cost and support?
As listed on Obscura’s official pricing page on October 3, 2026, the subscription costs $8 per month and allows five simultaneous connections. The page lists apps for iOS, macOS, Android, Windows, and Linux, plus card, Lightning, and Monero payment options. These are Obscura’s published terms on that date and may change. Obscura pricing and plan details.
For a personal-finance decision, separate the recurring subscription cost from the privacy claims: the monthly fee buys access to the service, while the architecture and data-handling statements describe the protection Obscura says it is designed to provide.
Quick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
