Jump to content

Proton Mail: Difference between revisions

From Consumer Rights Wiki
Raster (talk | contribs)
fix citations; some tone edits in second section
Raster (talk | contribs)
m fix citations; still kinda messy though
Line 7: Line 7:
Up to 2021, Protonmail has advertised itself as a private and secure service with the following under "Anonymous email" :  <blockquote>"No personal information is required to create your secure email account. By default, we do not keep any IP logs which can be linked to your anonymous email account. Your privacy comes first."<ref>{{Cite web |title=Secure email: Proton is free encrypted email. |url=https://proton.me/mail |url-status=live |archive-url=https://web.archive.org/web/20210831234120/https://protonmail.com/ |archive-date=2021-08-31 |website=ProtonMail}}</ref>  </blockquote>As it turned out, that statement was false. In September 2021, a member of a French activist group had been using Protonmail to communicate with other groups, and as an investigation was launched involving them, the email provider handed over the user's IP address and other data like the device they were using.<ref>{{Cite web |last=Lomas |first=Natasha |date=2021-09-06 |title=ProtonMail logged IP address of French activist after order by Swiss authorities |url=https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/ |url-status=live |access-date=2025-11-19 |website=TechCrunch}}</ref><ref>{{Cite web |last=Salter |first=Jim |date=2021-09-07 |title=ProtonMail removed “we do not keep any IP logs” from its privacy policy |url=https://arstechnica.com/information-technology/2021/09/privacy-focused-protonmail-provided-a-users-ip-address-to-authorities/ |access-date=2025-11-19 |website=Ars Technica}}</ref> The section was changed shortly after getting attention from new outlets and the general public.<ref>{{Cite web |title=Secure email: ProtonMail is free encrypted email. |url=https://proton.me |archive-url=https://web.archive.org/web/20210907033644/https://protonmail.com/ |archive-date=2021-09-07 |access-date=2025-11-19 |website=ProtonMail}}</ref>  <!-- This needs a format restructure or a main incident page, but I can't be bothered to learn it right now. I just do tone and citations... -raster -->   
Up to 2021, Protonmail has advertised itself as a private and secure service with the following under "Anonymous email" :  <blockquote>"No personal information is required to create your secure email account. By default, we do not keep any IP logs which can be linked to your anonymous email account. Your privacy comes first."<ref>{{Cite web |title=Secure email: Proton is free encrypted email. |url=https://proton.me/mail |url-status=live |archive-url=https://web.archive.org/web/20210831234120/https://protonmail.com/ |archive-date=2021-08-31 |website=ProtonMail}}</ref>  </blockquote>As it turned out, that statement was false. In September 2021, a member of a French activist group had been using Protonmail to communicate with other groups, and as an investigation was launched involving them, the email provider handed over the user's IP address and other data like the device they were using.<ref>{{Cite web |last=Lomas |first=Natasha |date=2021-09-06 |title=ProtonMail logged IP address of French activist after order by Swiss authorities |url=https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/ |url-status=live |access-date=2025-11-19 |website=TechCrunch}}</ref><ref>{{Cite web |last=Salter |first=Jim |date=2021-09-07 |title=ProtonMail removed “we do not keep any IP logs” from its privacy policy |url=https://arstechnica.com/information-technology/2021/09/privacy-focused-protonmail-provided-a-users-ip-address-to-authorities/ |access-date=2025-11-19 |website=Ars Technica}}</ref> The section was changed shortly after getting attention from new outlets and the general public.<ref>{{Cite web |title=Secure email: ProtonMail is free encrypted email. |url=https://proton.me |archive-url=https://web.archive.org/web/20210907033644/https://protonmail.com/ |archive-date=2021-09-07 |access-date=2025-11-19 |website=ProtonMail}}</ref>  <!-- This needs a format restructure or a main incident page, but I can't be bothered to learn it right now. I just do tone and citations... -raster -->   


=== ProtonMail's Response ===
===ProtonMail's Response===
The company tried to excuse their behavior by stating, that they do not have to comply with authorities such as EUROPOL, and although this may be true, in cases of investigations the bigger organizations from outside simply use the Swiss government as a middleman to get any request through that they wish. Protonmail is not anonymous and any information will be handed over when requested by the Swiss government, which does also cooperate with other investigative authorities, leading to essentially no protection in case of any such event.   
The company tried to excuse their behavior by stating, that they do not have to comply with authorities such as EUROPOL, and although this may be true, in cases of investigations the bigger organizations from outside simply use the Swiss government as a middleman to get any request through that they wish. Protonmail is not anonymous and any information will be handed over when requested by the Swiss government, which does also cooperate with other investigative authorities, leading to essentially no protection in case of any such event.{{Citation needed|reason=link below is not for this topic}}    


[https://www.reddit.com/r/ProtonMail/comments/1i2nz9v/on_politics_and_proton_a_message_from_andy/ Proton official response on the Proton subreddit] <!-- < Huh? This is for a completely different topic... Probably leftover when cleaning up political statements -->
[https://www.reddit.com/r/ProtonMail/comments/1i2nz9v/on_politics_and_proton_a_message_from_andy/ Proton official response on the Proton subreddit]<!-- < Huh? This is for a completely different topic... Probably leftover when cleaning up political statements -->  


Proton announced partnership with Zoom, a non private messaging platform. [https://proton.me/support/calendar-zoom How to add Zoom meetings to event invitations]. <!-- Probably needs a new section unrelated to this incident. -->
Proton has created video conferencing intergrations with Zoom, a non-private platform.<ref>{{Cite web |title=Proton opts for Zoom videoconferencing |url=https://discuss.privacyguides.net/t/proton-opts-for-zoom-videoconferencing/24569 |url-status=live |archive-url=https://archive.ph/jCW4k |archive-date=2025-11-20 |access-date=2025-11-20 |website=Privacy Guides Community}}</ref><ref>{{Cite web |title=How to add Zoom meetings to event invitations |url=https://proton.me/support/calendar-zoom |access-date=2025-11-20 |website=Proton}}</ref> <!-- Probably needs a new section unrelated to this incident. -->


==Harsh inactive account policy==
==Harsh inactive account policy==
In 2022, Protonmail announced a policy which entails the [[Inactive account deletion|deletion of inactive accounts]], resulting in a major controversy. Many users have criticized the decisions and advocated for nuanced versions of inactive account policy, such as deleting only the email contents of any inactive Protonmail accounts instead of the accounts themselves, where the latter would reportedly result in major inconvenience for users who used the accounts as multiple factor authentications for important services such as banking. It has also been said that the harsh policy will adversely affect those who had good reasons to become inactive for a long time, such as hospitalization, prison incarceration, and being in totalitarian countries which have prolonged internet shutdowns. <ref>https://old.reddit.com/r/ProtonMail/comments/u3ejjp/protonmails_dormant_policy_is_now_in_effect/</ref><ref>https://old.reddit.com/r/DataHoarder/comments/u3g406/protonmails_dormant_policy_is_now_in_effect/</ref>
In 2022, Protonmail announced a policy which entails the [[Inactive account deletion|deletion of inactive accounts]], resulting in a major controversy. Many users have criticized the decisions and advocated for nuanced versions of inactive account policy, such as deleting only the email contents of any inactive Protonmail accounts instead of the accounts themselves, where the latter would reportedly result in major inconvenience for users who used the accounts as multiple factor authentications for important services such as banking. It has also been said that the harsh policy will adversely affect those who had good reasons to become inactive for a long time, such as hospitalization, prison incarceration, and being in totalitarian countries which have prolonged internet shutdowns.<ref>{{Cite web |last=ProtonMail |date=2022-04-14 |title=Protonmail's dormant policy is now in effect. |url=https://old.reddit.com/r/ProtonMail/comments/u3ejjp/protonmails_dormant_policy_is_now_in_effect/ |url-status=live |archive-url=https://archive.ph/sn16C |archive-date=2025-11-20 |access-date=2025-11-20 |website=Reddit}}</ref><ref>{{Cite web |date=2022-04-14 |title=Protonmail's dormant policy is now in effect. |url=https://old.reddit.com/r/DataHoarder/comments/u3g406/protonmails_dormant_policy_is_now_in_effect/ |url-status=live |archive-url=https://archive.ph/3QW7N |archive-date=2025-11-20 |access-date=2025-11-20 |website=Reddit}}</ref>


In response, Protonmail added an exemption where the inactive account policy would not apply to any accounts which had premium subscriptions at one point, although the exemption was revoked as of 2024. Protonmail accounts that were created before April 9, 2024 has a two year grace period before being subjected to the policy, as opposed to one year for newer accounts.<ref>https://old.reddit.com/r/ProtonMail/comments/uca15y/update_to_our_inactive_account_policy/</ref><ref>https://www.ghacks.net/2022/04/27/protonmail-will-not-delete-inactive-user-accounts-for-former-premium-subscribers/</ref><ref>https://proton.me/support/inactive-accounts</ref> In some cases users have reported success in recovering their inactive accounts after being locked under the policy.<ref>https://old.reddit.com/r/ProtonMail/comments/1i7gbd7/account_is_no_longer_available_due_to_inactivity/</ref>
In response, Protonmail added an exemption where the inactive account policy would not apply to any accounts which had premium subscriptions<ref>{{Cite web |title=Update to our inactive account policy |url=https://old.reddit.com/r/ProtonMail/comments/uca15y/update_to_our_inactive_account_policy/ |url-status=live |archive-url=https://archive.ph/3y16r |archive-date=2025-11-20 |access-date=2025-11-20 |website=Reddit}}</ref><ref>{{Cite web |last=Ashwin |first= |date=2022-04-27 |title=ProtonMail will not delete user accounts for inactivity if the user had paid for a subscription at any point |url=https://www.ghacks.net/2022/04/27/protonmail-will-not-delete-inactive-user-accounts-for-former-premium-subscribers/ |url-status=live |archive-url=https://archive.ph/UmKca |archive-date=2025-11-20 |access-date=2025-11-20 |website=ghacks.net}}</ref> at one point, although the exemption was revoked as of 2024.{{CitationNeeded|reason=any official announcements?}} <!-- This change is visible in the support article though. before : https://archive.ph/H3jjI | after : https://archive.ph/BEEuw --> Protonmail accounts that were created before April 9, 2024 has a two year grace period before being subjected to the policy, as opposed to one year for newer accounts.<ref>{{Cite web |title=Inactive Accounts |url=https://proton.me/support/inactive-accounts |url-status=live |archive-url=https://archive.ph/A1R9B |archive-date=2025-11-20 |access-date=2025-11-20 |website=Proton}}</ref> In some cases users have reported success in recovering their inactive accounts after being locked under the policy.<ref>{{Cite web |title=Account is no longer available due to inactivity |url=https://old.reddit.com/r/ProtonMail/comments/1i7gbd7/account_is_no_longer_available_due_to_inactivity/ |url-status=live |archive-url=https://archive.ph/PwpYM |archive-date=2025-11-20 |access-date=2025-11-20 |website=Reddit}}</ref>


As of 2025 many users continue to voice their concerns regarding the inactive account policy, while advocating for sensible measures such as deleting only the contents in the inactive accounts while sparing the accounts themselves.<ref>https://protonmail.uservoice.com/forums/945460-general-ideas/suggestions/48235556-inactive-account-policy-keep-account-when-deleti</ref><ref>https://proton.me/support/inactive-accounts</ref>
As of 2025 many users continue to voice their concerns regarding the inactive account policy, while advocating for sensible measures such as deleting only the contents in the inactive accounts while sparing the accounts themselves.<ref>{{Cite web |title=Inactive account policy - keep account when deleting data {{!}} How can we improve Proton? |url=https://protonmail.uservoice.com/forums/945460-general-ideas/suggestions/48235556-inactive-account-policy-keep-account-when-deleti |url-status=live |archive-url=https://archive.ph/15xvr |archive-date=2025-11-20 |access-date=2025-11-20 |website=protonmail.uservoice.com}}</ref>


The Proton team has stated on Reddit that the inactivity account policy aims to "manage their resources in a sustainable way". In the comments, it was noted that retaining the accounts themselves indefinitely and only purging their contents would not noticably increase operating costs compared to deleting entire accounts, given that login information is all that would have to be retained. ProtonMail also does not allow registering email accounts with the same address as deleted email accounts to prevent impersonation, which only is possible because they keep the deleted email addresses in their records.<ref>[https://archive.today/2025.10.05-160133/https://www.reddit.com/r/ProtonMail/comments/1bzt1ka/protons_new_policy_for_free_inactive_accounts/ Proton's New Policy for Free Inactive Accounts : ProtonMail] - Reddit</ref>
The Proton team has stated on Reddit that the inactivity account policy aims to "manage their resources in a sustainable way". In the comments, it was noted that retaining the accounts themselves indefinitely and only purging their contents would not noticeably increase operating costs compared to deleting entire accounts, given that login information is all that would have to be retained. ProtonMail also does not allow registering email accounts with the same address as deleted email accounts to prevent impersonation, which would only be possible because they keep the deleted email addresses in their records.<ref>{{Cite web |date=2025-04-09 |title=Proton's New Policy for Free Inactive Accounts |url=https://old.reddit.com/r/ProtonMail/comments/1bzt1ka/protons_new_policy_for_free_inactive_accounts/ |url-status=live |archive-url=https://archive.ph/b6w8s |archive-date=2025-07-06 |access-date=2025-11-20 |website=Reddit}}</ref> <!-- "would only be possible / is only possible" is strong language, needs rewording. also is there an "unless...?" on this justification -->


==Data portability==
==Data portability==

Revision as of 11:04, 20 November 2025

Article Status Notice: This Article is a stub


This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Learn more ▼

Article Status Notice: Inappropriate Tone/Word Usage

This article needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Specifically it uses wording throughout that is non-compliant with the Editorial guidelines of this wiki.

Learn more ▼

ProtonMail is a privacy focused email client based in Switzerland which has partnered with non Swiss content delivery networks like Radware. ProtonMail offers cloud email, calendar, VPN, and cloud storage services and has a marketing focus on privacy over competitors like Google or Microsoft.

False advertising and work with authorities

Up to 2021, Protonmail has advertised itself as a private and secure service with the following under "Anonymous email" :

"No personal information is required to create your secure email account. By default, we do not keep any IP logs which can be linked to your anonymous email account. Your privacy comes first."[1]

As it turned out, that statement was false. In September 2021, a member of a French activist group had been using Protonmail to communicate with other groups, and as an investigation was launched involving them, the email provider handed over the user's IP address and other data like the device they were using.[2][3] The section was changed shortly after getting attention from new outlets and the general public.[4]

ProtonMail's Response

The company tried to excuse their behavior by stating, that they do not have to comply with authorities such as EUROPOL, and although this may be true, in cases of investigations the bigger organizations from outside simply use the Swiss government as a middleman to get any request through that they wish. Protonmail is not anonymous and any information will be handed over when requested by the Swiss government, which does also cooperate with other investigative authorities, leading to essentially no protection in case of any such event.[citation needed - link below is not for this topic]

Proton official response on the Proton subreddit

Proton has created video conferencing intergrations with Zoom, a non-private platform.[5][6]

Harsh inactive account policy

In 2022, Protonmail announced a policy which entails the deletion of inactive accounts, resulting in a major controversy. Many users have criticized the decisions and advocated for nuanced versions of inactive account policy, such as deleting only the email contents of any inactive Protonmail accounts instead of the accounts themselves, where the latter would reportedly result in major inconvenience for users who used the accounts as multiple factor authentications for important services such as banking. It has also been said that the harsh policy will adversely affect those who had good reasons to become inactive for a long time, such as hospitalization, prison incarceration, and being in totalitarian countries which have prolonged internet shutdowns.[7][8]

In response, Protonmail added an exemption where the inactive account policy would not apply to any accounts which had premium subscriptions[9][10] at one point, although the exemption was revoked as of 2024.[citation needed - any official announcements?] Protonmail accounts that were created before April 9, 2024 has a two year grace period before being subjected to the policy, as opposed to one year for newer accounts.[11] In some cases users have reported success in recovering their inactive accounts after being locked under the policy.[12]

As of 2025 many users continue to voice their concerns regarding the inactive account policy, while advocating for sensible measures such as deleting only the contents in the inactive accounts while sparing the accounts themselves.[13]

The Proton team has stated on Reddit that the inactivity account policy aims to "manage their resources in a sustainable way". In the comments, it was noted that retaining the accounts themselves indefinitely and only purging their contents would not noticeably increase operating costs compared to deleting entire accounts, given that login information is all that would have to be retained. ProtonMail also does not allow registering email accounts with the same address as deleted email accounts to prevent impersonation, which would only be possible because they keep the deleted email addresses in their records.[14]

Data portability

Until around 2023, there was no way for users without a paid subscription to create local backups of all of their emails at once (an example data lock-in). Paying users could use the Proton Mail Bridge to download their emails through the IMAP protocol using an external client such as Thunderbird or Outlook, whereas free users were limited to downloading each email individually, making it impractical for backup purposes.[15]

Since around 2023, Proton Technologies provides an export tool that anyone can use.[16]

References

  1. "Secure email: Proton is free encrypted email". ProtonMail. Archived from the original on 2021-08-31.
  2. Lomas, Natasha (2021-09-06). "ProtonMail logged IP address of French activist after order by Swiss authorities". TechCrunch. Retrieved 2025-11-19.{{cite web}}: CS1 maint: url-status (link)
  3. Salter, Jim (2021-09-07). "ProtonMail removed "we do not keep any IP logs" from its privacy policy". Ars Technica. Retrieved 2025-11-19.
  4. "Secure email: ProtonMail is free encrypted email". ProtonMail. Archived from the original on 2021-09-07. Retrieved 2025-11-19.
  5. "Proton opts for Zoom videoconferencing". Privacy Guides Community. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  6. "How to add Zoom meetings to event invitations". Proton. Retrieved 2025-11-20.
  7. ProtonMail (2022-04-14). "Protonmail's dormant policy is now in effect". Reddit. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  8. "Protonmail's dormant policy is now in effect". Reddit. 2022-04-14. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  9. "Update to our inactive account policy". Reddit. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  10. Ashwin (2022-04-27). "ProtonMail will not delete user accounts for inactivity if the user had paid for a subscription at any point". ghacks.net. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  11. "Inactive Accounts". Proton. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  12. "Account is no longer available due to inactivity". Reddit. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  13. "Inactive account policy - keep account when deleting data | How can we improve Proton?". protonmail.uservoice.com. Archived from the original on 2025-11-20. Retrieved 2025-11-20.
  14. "Proton's New Policy for Free Inactive Accounts". Reddit. 2025-04-09. Archived from the original on 2025-07-06. Retrieved 2025-11-20.
  15. How to export and import emails - ProtonMail Support
  16. How to export and restore emails using the Proton Mail Export Tool