# Mailtrap privacy rating

Email API and SMTP relay for transactional and bulk email, with an email testing sandbox and marketing campaigns.

## Summary

Mailtrap is not graded yet: 46% of its criteria have evidence, and 60% is needed. It meets 1 of 12 criteria: TLS configuration. It partly meets no ads or data sales. It does not meet open source, no trackers or telemetry and security headers. Still needing evidence: independent audit, transparency report, tells users about requests, message content deleted after delivery, open and click tracking off by default, encrypted delivery can be enforced and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C.

- Website: https://mailtrap.io
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Cookiebot (not scored), Facebook SDK, Google Fonts (not scored), Google Tag Manager, LinkedIn Insight, Microsoft Clarity, X (Twitter) Pixel
- Category: [Email sending services](https://privacyratings.com/email-sending/)
- Grade: Not graded (46% evidence)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website loads Google Tag Manager, Microsoft Clarity, HubSpot and Meta, TikTok, LinkedIn and X advertising scripts. |  |
| No ads or data sales | Partial | Funded by paid plans, but Meta, LinkedIn and X are listed as processors for marketing analytics. | https://mailtrap.io/privacy/ |
| Independent audit | Unknown |  |  |
| Transparency report | Unknown |  |  |
| Tells users about requests | Unknown |  |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=mailtrap.io&hideResults=on |
| Security headers | No | Grade C (50/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=mailtrap.io |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Message content deleted after delivery | Unknown |  |  |
| Open and click tracking off by default | Unknown |  |  |
| Encrypted delivery can be enforced | Unknown |  |  |
| EU data location | Unknown |  |  |

Source: https://privacyratings.com/email-sending/mailtrap/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/email-sending/mailtrap.md