They forward your encrypted VPN traffic over their servers onto Mullvad servers. They themselves can't decrypt the traffic, because it is encrypted using the wireguard to the public key of the mullvad exit node (verifiably). They also handle the mullvad subscription for you so you don't leave any da...