Privacy Ratings

Webmail

Nextcloud Mail privacy rating

Open-source mail app for self-hosted Nextcloud servers that adds webmail for any IMAP account, with S/MIME, Mailvelope support and integration with Nextcloud contacts and calendar.

Germany Fourteen EyesLicense: AGPL-3.0Platforms: Web

Summary

Nextcloud Mail scores 84 out of 100 (grade B) on the webmail criteria. It meets 7 of 9 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content, works with any provider and self-hostable. It partly meets OpenPGP support. It does not meet independent audit. It is based in Germany: Fourteen Eyes member; EU member (GDPR).

Score 84 out of 100. How scoring works

Criteria

  • Yes

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    AGPL-3.0.

    github.com

  • Yes

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    No telemetry or analytics in the source code, and the app store page loads no third-party trackers.

    github.com

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free software funded by Nextcloud enterprise subscriptions. No ads.

    nextcloud.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit of the Mail app is published.

  • Partial

    OpenPGP support Weight 2 of 3

    Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?

    OpenPGP works through the Mailvelope browser extension. S/MIME is built in.

    github.com

  • Yes

    Connects directly Weight 3 of 3

    Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?

    Self-hosted. Connects from the Nextcloud server directly to the IMAP and SMTP servers, with no vendor service involved.

    docs.nextcloud.com

  • Yes

    Blocks remote content Weight 2 of 3

    Are remote images and tracking pixels blocked by default?

    External images are proxied and hidden until the user chooses to show them, and tracking pixels are blocked.

    github.com

  • Yes

    Works with any provider Weight 1 of 3

    Does the app work with any standard IMAP and SMTP provider?

    Works with any IMAP and SMTP server.

    docs.nextcloud.com

  • Yes

    Self-hostable Weight 1 of 3

    Can the webmail be installed on your own server?

    Installed as an app on a self-hosted Nextcloud server, with official administrator documentation.

    docs.nextcloud.com

Other webmail

All 10 webmail