# Delta Chat privacy rating

Decentralized messenger that uses email servers for delivery, with automatic end-to-end encryption through Autocrypt and OpenPGP. Works with chatmail relays or existing email accounts.

## Summary

Delta Chat scores 92 out of 100 (grade A) on the email clients criteria. It meets 7 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, independent audit, OpenPGP support, blocks remote content and works with any provider. It partly meets connects directly. It is based in Germany: Fourteen Eyes member; EU member (GDPR).

- Website: https://delta.chat
- Source code: https://github.com/chatmail/core
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Platforms: Windows, macOS, Linux, Android, iOS
- Home page trackers: none found
- Category: [Email clients](https://privacyratings.com/email-clients/)
- Grade: A (92/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | The core library is MPL-2.0 and the apps are GPL-3.0. | https://github.com/chatmail/core/blob/main/LICENSE |
| No trackers or telemetry | Yes | Exodus finds 0 trackers. Usage statistics are only sent if turned on in settings. | https://reports.exodus-privacy.eu.org/en/reports/com.b44t.messenger/latest/ |
| No ads or data sales | Yes | Funded by public grants and donations. No ads. | https://delta.chat/en/help#how-are-delta-chat-developments-funded |
| Independent audit | Yes | Radically Open Security tested rPGP, the OpenPGP library Delta Chat uses, and published the full report. | https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf |
| OpenPGP support | Yes | End-to-end encryption with Autocrypt and OpenPGP is built in and automatic. | https://delta.chat/en/help#which-standards-are-used-for-end-to-end-encryption |
| Connects directly | Partial | Connects directly to mail servers, but push notifications on iOS and Android go through a notification proxy run by the developers. | https://delta.chat/en/privacy |
| Blocks remote content | Yes | HTML messages are shown with network loads blocked until the user chooses to load remote content. | https://github.com/deltachat/deltachat-android/blob/main/src/main/java/org/thoughtcrime/securesms/FullMsgActivity.java |
| Works with any provider | Yes | Works with any IMAP and SMTP provider, but the address should only be used with chatmail apps. | https://delta.chat/en/help#can-i-use-a-classic-email-address-with-delta-chat |

Source: https://privacyratings.com/email-clients/delta-chat/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/email-clients/delta-chat.md