Privacy Ratings

Webmail

Cypht privacy rating

Self-hosted, open-source webmail that combines several IMAP, JMAP and SMTP accounts, plus feeds, in one interface, built from optional modules.

License: LGPL-2.1Platforms: Web

Summary

Cypht scores 84 out of 100 (grade B) on the webmail criteria. It meets 7 of 9 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content, works with any provider and self-hostable. It partly meets OpenPGP support. It does not meet independent audit.

Score 84 out of 100. How scoring works

Criteria

  • Yes

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    LGPL-2.1.

    github.com

  • Yes

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    No telemetry or analytics in the source code. Error reporting to a GlitchTip server runs only when the administrator configures one.

    github.com

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free open-source software with no ads.

    github.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

  • Partial

    OpenPGP support Weight 2 of 3

    Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?

    PGP signing and encryption come from a bundled module that is experimental and off by default.

    github.com

  • Yes

    Connects directly Weight 3 of 3

    Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?

    Self-hosted. Connects from the server where it is installed directly to the IMAP and SMTP servers, with no vendor service involved.

    github.com

  • Yes

    Blocks remote content Weight 2 of 3

    Are remote images and tracking pixels blocked by default?

    External image sources are disabled by default with ALLOW_EXTERNAL_IMAGE_SOURCES=false.

    github.com

  • Yes

    Works with any provider Weight 1 of 3

    Does the app work with any standard IMAP and SMTP provider?

    Works with any IMAP, JMAP and SMTP server.

    github.com

  • Yes

    Self-hostable Weight 1 of 3

    Can the webmail be installed on your own server?

    Self-hosted software with an official installation guide.

    cypht.org

Other webmail

All 10 webmail