[Hakkin]

> is there a reason they can't simply store a token from stripe/paypal/etc, or is that still considered PII?

They do still accept those payment methods, and that is exactly what they do for them[0], but recurring payments forced them to retain that data for longer than they were comfortable with, and they decided that the cost to privacy outweighed the convenience recurring subscriptions offered[1].

Another thing to note is that you won't be getting any e-mails from them reminding you to renew your plan, since they never had your e-mail in the first place (Mullvad "accounts" are anonymous numeric tokens).

[0] https://mullvad.net/en/help/no-logging-data-policy/#payments

[1] https://mullvad.net/en/blog/2022/6/20/were-removing-the-opti...