{
  "slug": "mailo",
  "category": "email-providers",
  "name": "Mailo",
  "description": "Email service from France, formerly Net-C and NetCourrier, with calendar, contacts and cloud storage. Mailo Free shows advertising banners. Paid Premium plans have no ads and add POP3 access.",
  "website": "https://www.mailo.com",
  "license": null,
  "platforms": [
    "web",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "FR",
    "name": "France",
    "eyes": "Nine Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 34,
  "coverage": 100,
  "summary": "Mailo scores 34 out of 100 (grade F) on the email providers criteria. It meets 5 of 21 criteria: TLS configuration, open protocols, custom domains, sign up without personal data and POP3 support. It partly meets no ads or data sales, transparency report, end-to-end encryption, IMAP support and SMTP submission. It does not meet open source, no trackers or telemetry, independent audit, tells users about requests, security headers, modern web standards, encrypted mailbox storage, email security standards, mail transport security, Sender Rewriting Scheme and ARC sealing. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade B-, Internet.nl website score 51% and Internet.nl email score 59%.",
  "url": "https://privacyratings.com/email-providers/mailo/",
  "markdown": "https://privacyratings.com/email-providers/mailo/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.mailo.com/mailo/en/technology.php",
      "note": "Closed source. The service runs on Mailo's own MailObject technology."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.mailo.com/mailo/en/privacy-rules.php",
      "note": "The home page loads no third-party trackers, but the free webmail lets advertising agencies set cookies after consent through the Sirdata consent platform."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.mailo.com/mailo/en/privacy-rules.php",
      "note": "Mailo Free shows advertising banners, personalized by agency cookies only with consent. Mail content is not used for ads, data is not shared with ad agencies, and paid plans have no ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": "https://www.mailo.com/mailo/en/privacy-rules.php",
      "note": "No independent audit is published. The privacy rules mention internal audits only."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.mailo.com/mailo/en/privacy-rules.php",
      "note": "Data is given to police and justice authorities only within a legal framework with a magistrate's authorization. No request counts are published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=www.mailo.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "no",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=www.mailo.com",
      "note": "Grade B- (65/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "no",
      "evidence": "https://batch.internet.nl/site/www.mailo.com/22660203/",
      "note": "Score 51%"
    },
    "e2ee": {
      "title": "End-to-end encryption",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://www.mailo.com/mailo/en/pgp-encryption.php",
      "note": "OpenPGP is built into the webmail, with keys held on Mailo's servers as a trusted third party. Not on by default. Keeping keys away from Mailo needs a mail app with PGP support."
    },
    "encrypted_storage": {
      "title": "Encrypted mailbox storage",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.mailo.com/mailo/en/privacy-rules.php",
      "note": "Encryption at rest for stored mail is not documented. Mail is scanned on Mailo's servers for spam and viruses."
    },
    "open_protocols": {
      "title": "Open protocols",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://faq.mailo.com/synchronisation/configurer-mailo-dans-outlook-pour-windows.htm",
      "note": "IMAP, SMTP, CalDAV and CardDAV work on every plan, including Mailo Free. POP3 needs a Premium plan."
    },
    "custom_domains": {
      "title": "Custom domains",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://faq.mailo.com/compte/creer-des-adresses-avec-mon-propre-nom-de-domaine.htm",
      "note": "An external domain can be added for free and used with a Premium, Family or Pro subscription."
    },
    "anonymous_signup": {
      "title": "Sign up without personal data",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.mailo.com/mailo/en/privacy-rules.php",
      "note": "No phone number or other email address is required. Registration asks for a name and date of birth to check the minimum age."
    },
    "mail_standards": {
      "title": "Email security standards",
      "weight": 2,
      "answer": "no",
      "evidence": "https://batch.internet.nl/mail/mailo.com/22855366/",
      "note": "Score 59%"
    },
    "imap_standards": {
      "title": "IMAP support",
      "weight": 2,
      "answer": "partial",
      "evidence": null,
      "note": "mail.mailo.com:993 (implicit TLS). IMAP4rev1 advertised, no IDLE before login."
    },
    "pop3_standards": {
      "title": "POP3 support",
      "weight": 1,
      "answer": "yes",
      "evidence": null,
      "note": "mail.mailo.com:995 (implicit TLS). CAPA: TOP, UIDL, USER, STLS."
    },
    "smtp_standards": {
      "title": "SMTP submission",
      "weight": 2,
      "answer": "partial",
      "evidence": null,
      "note": "mail.mailo.com:465 (implicit TLS). Missing: SMTPUTF8, 8BITMIME."
    },
    "transport_security": {
      "title": "Mail transport security",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Passes: SPF, DMARC quarantine. Missing: MTA-STS missing, TLS-RPT, DNSSEC, DANE none."
    },
    "srs": {
      "title": "Sender Rewriting Scheme",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on SRS for forwarded mail."
    },
    "arc": {
      "title": "ARC sealing",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on ARC signing or validation."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B-",
    "internetnl_web": 51,
    "internetnl_mail": 59,
    "trackers": [],
    "tested_at": "2026-11-14T11:33:41.876Z"
  },
  "last_modified": "2026-11-14T11:57:57Z"
}