# SMTP.com privacy rating

Email relay and API service from Ziff Davis for transactional and marketing email, with dedicated IP addresses and delivery reports.

## Summary

SMTP.com is not graded yet: 58% of its criteria have evidence, and 60% is needed. It meets 1 of 12 criteria: TLS configuration. It does not meet open source, no trackers or telemetry, no ads or data sales, transparency report, tells users about requests and security headers. Still needing evidence: independent audit, message content deleted after delivery, open and click tracking off by default, encrypted delivery can be enforced and EU data location. It is based in Canada: Five Eyes member. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade F.

- Website: https://www.smtp.com
- Jurisdiction: Canada. Five Eyes member.
- Platforms: Web
- Home page trackers: Google Tag Manager, OneTrust (not scored), VWO
- Category: [Email sending services](https://privacyratings.com/email-sending/)
- Grade: Not graded (58% evidence)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy covers third-party cookies for analytics and interest-based ads, and the website loads Google Tag Manager and VWO. | https://www.smtp.com/policies/privacy-policy/ |
| No ads or data sales | No | The privacy policy states personal data may be sold to customers of Ziff Davis businesses and sold or shared for targeted ads. | https://www.smtp.com/policies/privacy-policy/ |
| Independent audit | Unknown |  |  |
| Transparency report | No | No transparency report or government request policy is published. The terms only reserve the right to disclose information in response to legal process or governmental requests. | https://www.smtp.com/policies/terms-and-conditions/ |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=smtp.com&hideResults=on |
| Security headers | No | Grade F (0/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=smtp.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Message content deleted after delivery | Unknown |  |  |
| Open and click tracking off by default | Unknown |  |  |
| Encrypted delivery can be enforced | Unknown |  |  |
| EU data location | Unknown |  |  |

Source: https://privacyratings.com/email-sending/smtp-com/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/email-sending/smtp-com.md
