Live data from Hacker News

We are removing the option to create new subscriptions

mullvad.net

21–30 of 453 posts

Re: We are removing the option to create new subscriptions

#21
post #17

This is a great idea! In practice, how would you go about this e.g. if you're using Stripe? After a few weeks, delete the customer information in Stripe?

That's a very good question. I wonder why companies don't push hard to disallow third-party services from storing their customers' data. I had this issue as an employe. My employer used a third-party service for onboarding. This service had a breach and my data (including my SSN) was leaked. I've been begging my employer (one reason I wish I lived in California) to take action and have them remove my data, because another breach is inevitable. They've finally sent a request to delete all employees' data. Now I am waiting.

Re: We are removing the option to create new subscriptions

#23
post #18

Would it be possible to store subscription data without actually linking it to the account that is affected? Sort of like a one way encryption.

You'd have to have some form of connection, but it might be possible to design it in such a way that it could be plausibly denied. Holomorphic?

All the ways I come up with (giving out keys) have the problem of how do you renew the key, and how do you cancel it, without knowing which is which.

Re: We are removing the option to create new subscriptions

#24
post #17

This is a great idea! In practice, how would you go about this e.g. if you're using Stripe? After a few weeks, delete the customer information in Stripe?

Even if you delete it in Stripe, I very much doubt that stripe or the credit card providers will be deleting the data.

Someone will know that Mr Smith has a mulvad VPN subscription. They just won't know his username on the service.

Re: We are removing the option to create new subscriptions

#25
post #17

This is a great idea! In practice, how would you go about this e.g. if you're using Stripe? After a few weeks, delete the customer information in Stripe?

That's a very good question. I wonder why companies don't push hard to disallow third-party services from storing their customers' data. I had this issue as an employe. My employer used a third-party service for onboarding. This service had a breach and my data (including my SSN) was leaked. I've been begging my employer (one reason I wish I lived in California) to take action and have them remove my data, because an…

If you accept payment, it's very hard not to relay some information to a third party, except if you build your own payment provider service... But I'd love to see Stripe make more effort here and e.g. start allowing EU hosting for EU customers and so on.

Re: We are removing the option to create new subscriptions

#26

Earlier quoted context omitted.

No need, just send them cash in an envelope, which works just as well. I wish more services supported this, but I understand it adds a lot of hassle for them as well.

How do they handle VAT via cash in an envelope? Do you need to provide a billing address?

Mullvad's advertised pricing already includes VAT is my understanding.

Re: We are removing the option to create new subscriptions

#27
Wow.

Hadn't heard of Mullvad before reading this, figured I'd give it a try. That is hands down the BEST onboarding experience for an app (let alone a VPN) I've had in I don't know how long. Took me maybe 2 minutes to go from no account to a working VPN connection.

I love that everything is anonymous (down to the account credentials just being a randomly generated token).

Re: We are removing the option to create new subscriptions

#30

Great benefit. I also recommend to find a reputable masked card service provider if you plan to use a credit/debit card. Autopay is just another way for banks and providers to circumvent overdraft protection legislation and hopefully new legislation will remove any "perks" that providers offer for autopay services.

Is there such a thing as a truly private “masked card service?” I’m genuinely curious because I use virtual cards supplied by my online bank, but I’m sure they retain records for each virtual card I use. Are there services that do not record this information?
Post reply on HN