Proton

Minimal collection is the stated overriding policy — no permanent IP logs by default, no access to encrypted content, and self-hosted analytics that don't retain IP addresses.

No data selling, no advertising networks, and legal disclosure only under binding Swiss authority requests — but payment processing and customer support rely on US-based third-party processors.

Full access, edit, delete, and export rights via the account interface; IP logging, marketing emails, and the AI writing assistant are all opt-in or easily disabled — though policy change notification relies on you checking the date.

Swiss legal jurisdiction, GDPR compliance, published transparency reports, end-to-end encryption as an architectural commitment, and explicit data minimisation as an overriding policy principle — among the strongest promise sets of any consumer platform.