{
  "slug": "mailtrap",
  "category": "email-sending",
  "name": "Mailtrap",
  "description": "Email API and SMTP relay for transactional and bulk email, with an email testing sandbox and marketing campaigns.",
  "website": "https://mailtrap.io",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": null,
  "score": 13,
  "coverage": 46,
  "summary": "Mailtrap is not graded yet: 46% of its criteria have evidence, and 60% is needed. It meets 1 of 12 criteria: TLS configuration. It partly meets no ads or data sales. It does not meet open source, no trackers or telemetry and security headers. Still needing evidence: independent audit, transparency report, tells users about requests, message content deleted after delivery, open and click tracking off by default, encrypted delivery can be enforced and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C.",
  "url": "https://privacyratings.com/email-sending/mailtrap/",
  "markdown": "https://privacyratings.com/email-sending/mailtrap/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "The website loads Google Tag Manager, Microsoft Clarity, HubSpot and Meta, TikTok, LinkedIn and X advertising scripts."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://mailtrap.io/privacy/",
      "note": "Funded by paid plans, but Meta, LinkedIn and X are listed as processors for marketing analytics."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=mailtrap.io&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "no",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=mailtrap.io",
      "note": "Grade C (50/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "content_retention": {
      "title": "Message content deleted after delivery",
      "weight": 3,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "tracking_off_by_default": {
      "title": "Open and click tracking off by default",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "enforced_tls": {
      "title": "Encrypted delivery can be enforced",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "eu_data_location": {
      "title": "EU data location",
      "weight": 1,
      "answer": "unknown",
      "evidence": null,
      "note": null
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "C",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Cookiebot",
        "host": "consentcdn.cookiebot.com",
        "effect": "none"
      },
      {
        "name": "Facebook SDK",
        "host": "connect.facebook.net",
        "effect": "no"
      },
      {
        "name": "Google Fonts",
        "host": "fonts.googleapis.com",
        "effect": "none"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "LinkedIn Insight",
        "host": "snap.licdn.com",
        "effect": "no"
      },
      {
        "name": "Microsoft Clarity",
        "host": "scripts.clarity.ms",
        "effect": "no"
      },
      {
        "name": "X (Twitter) Pixel",
        "host": "static.ads-twitter.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:26:21.309Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}