# MailerSend privacy rating

Transactional email API and SMTP relay from the makers of MailerLite, with templates, inbound routing and SMS.

## Summary

MailerSend scores 27 out of 100 (grade F) on the email sending services criteria. It meets 2 of 12 criteria: TLS configuration and EU data location. It partly meets no ads or data sales, message content deleted after delivery and open and click tracking off by default. It does not meet open source, no trackers or telemetry and security headers. Still needing evidence: independent audit, transparency report, tells users about requests and encrypted delivery can be enforced. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade F.

- Website: https://www.mailersend.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Fathom (cookieless analytics), Google Tag Manager, PostHog
- Category: [Email sending services](https://privacyratings.com/email-sending/)
- Grade: F (27/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website loads Google Tag Manager and PostHog. |  |
| No ads or data sales | Partial | Funded by paid plans and states personal data is never sold, but third-party partners use cookies on the website for advertising on other sites. | https://www.mailersend.com/legal/privacy-policy |
| Independent audit | Unknown |  |  |
| Transparency report | Unknown |  |  |
| Tells users about requests | Unknown |  |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=mailersend.com&hideResults=on |
| Security headers | No | Grade F (5/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=mailersend.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Message content deleted after delivery | Partial | Activity data is kept for 7 or 30 days depending on the plan. A "Don't store content" option is available. | https://www.mailersend.com/whats-new/data-retention-add-on |
| Open and click tracking off by default | Partial | Domain settings for open, click and content tracking are on by default and can be turned off. | https://developers.mailersend.com/api/v1/email/domains |
| Encrypted delivery can be enforced | Unknown |  |  |
| EU data location | Yes | The privacy policy states data storage centers are in the European Union. | https://www.mailersend.com/legal/privacy-policy |

Source: https://privacyratings.com/email-sending/mailersend/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/email-sending/mailersend.md