NordVPN

Where NordVPN keeps its logs

NordVPN logs to %LOCALAPPDATA%\NordVPN\logs\ on Windows.

NordVPN logs to /var/log/nordvpn/daemon.log on Linux.

Paths are printed exactly as NordVPN writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.

Finding your way around Windows and Linux.