| ▲ | potato-peeler 8 hours ago | |||||||||||||||||||||||||
Upto you how much you want to disclose. If I purchase directly from mullvad, only mullvad and my bank knows. If I purchase from amazon or other online retailers, now even amazon knows. God knows what they do with it. | ||||||||||||||||||||||||||
| ▲ | fwn 8 hours ago | parent [-] | |||||||||||||||||||||||||
Hmm, no. I think your worry requires a proper, explicit threat model. It is also not "even Amazon" knowing about the sale. When you buy from a reseller using a non-cash payment method, you shift the link to your identity from Mullvad to the reseller. You are compartmentalizing the transaction to isolate the payment flow from the account registration. To stick with your example: If you buy from Amazon, you remove that payment information from Mullvad and add it to Amazon, a generic mass market online shop. The reseller does not know if you will activate the voucher, and if you do, they don't know if you will activate it yourself or give it to someone else. Mullvad does not know the ID that might have been used to buy the voucher. Having niche as well as mainstream resellers is also a good thing: Many users buy from Amazon all the time. For those people, being able to use Amazon means they do not have to add payment details to another store, which might result in an unusual payment compared to their usual purchasing behavior. For users not wanting to use Amazon, there is no harm in ignoring this specific reseller on Amazon. Having the ability to use resellers adds privacy. | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||