Tuta

End-to-end encryption means Tuta cannot access email content, contacts, or calendar data; IP addresses are stored only in anonymised form; no cookies are used; analytics are opt-in, consent-gated, and anonymised — one of the cleanest collection profiles of any email provider.

No data sold; personal data not disclosed to third parties except payment processors; law enforcement requests require a valid court order under German and EU law; all data stored in Germany with no cross-border transfers to non-adequate countries.

Full GDPR rights under German law; data deleted within 30 days of contract termination; user can delete all encrypted content themselves at any time; analytics and usage statistics are reversible opt-ins with user-controlled deletion.

ISO 27001-certified German data centres, open-source codebase, GDPR compliance under German law with a named DPO, data breach notification obligations, and end-to-end encryption as an architectural commitment — Tuta's promises are among the most structurally sound of any consumer email provider.