# Dovecot privacy rating

IMAP and POP3 server for Linux and Unix that stores and serves mailboxes, with support for Sieve filtering through Pigeonhole. The Community Edition is open source.

## Summary

Dovecot scores 90 out of 100 (grade A) on the mail server software criteria. It meets 3 of 4 criteria: open source, no trackers or telemetry and no ads or data sales. It partly meets independent audit. It is based in Finland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR).

- Website: https://dovecot.org
- Source code: https://github.com/dovecot/core
- Jurisdiction: Finland. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Platforms: Linux
- Home page trackers: none found
- Category: [Mail server software](https://privacyratings.com/mail-server-software/)
- Grade: A (90/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | LGPL-2.1 and MIT. | https://github.com/dovecot/core/blob/main/COPYING |
| No trackers or telemetry | Yes | No telemetry or analytics in the source code. | https://github.com/dovecot/core |
| No ads or data sales | Yes | Funded by the commercial Dovecot Pro edition sold by Open-Xchange. No ads. | https://www.dovecotpro.com/ |
| Independent audit | Partial | Code audit by Cure53, older than three years. | https://cure53.de/pentest-report_dovecot.pdf |

Source: https://privacyratings.com/mail-server-software/dovecot/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/mail-server-software/dovecot.md
