# Nextcloud Mail privacy rating

Open-source mail app for self-hosted Nextcloud servers that adds webmail for any IMAP account, with S/MIME, Mailvelope support and integration with Nextcloud contacts and calendar.

## Summary

Nextcloud Mail scores 84 out of 100 (grade B) on the webmail criteria. It meets 7 of 9 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content, works with any provider and self-hostable. It partly meets OpenPGP support. It does not meet independent audit. It is based in Germany: Fourteen Eyes member; EU member (GDPR).

- Website: https://apps.nextcloud.com/apps/mail
- Source code: https://github.com/nextcloud/mail
- License: AGPL-3.0
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Platforms: Web
- Home page trackers: none found
- Category: [Webmail](https://privacyratings.com/webmail/)
- Also rated: [Nextcloud Talk](https://privacyratings.com/team-chat/nextcloud-talk/) (Team chat), [Nextcloud Calendar](https://privacyratings.com/calendars/nextcloud-calendar/) (Calendars), [Nextcloud Deck](https://privacyratings.com/task-management/nextcloud-deck/) (Task management), [Nextcloud](https://privacyratings.com/file-sync/nextcloud/) (File sync and backup), [Nextcloud Forms](https://privacyratings.com/forms/nextcloud-forms/) (Forms and surveys)
- Grade: B (84/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | AGPL-3.0. | https://github.com/nextcloud/mail/blob/main/COPYING |
| No trackers or telemetry | Yes | No telemetry or analytics in the source code, and the app store page loads no third-party trackers. | https://github.com/nextcloud/mail |
| No ads or data sales | Yes | Free software funded by Nextcloud enterprise subscriptions. No ads. | https://nextcloud.com/pricing/ |
| Independent audit | No | No independent audit of the Mail app is published. |  |
| OpenPGP support | Partial | OpenPGP works through the Mailvelope browser extension. S/MIME is built in. | https://github.com/nextcloud/mail/blob/main/README.md |
| Connects directly | Yes | Self-hosted. Connects from the Nextcloud server directly to the IMAP and SMTP servers, with no vendor service involved. | https://docs.nextcloud.com/server/latest/admin_manual/groupware/mail.html |
| Blocks remote content | Yes | External images are proxied and hidden until the user chooses to show them, and tracking pixels are blocked. | https://github.com/nextcloud/mail/blob/main/lib/Service/HtmlPurify/TransformImageSrc.php |
| Works with any provider | Yes | Works with any IMAP and SMTP server. | https://docs.nextcloud.com/server/latest/admin_manual/groupware/mail.html |
| Self-hostable | Yes | Installed as an app on a self-hosted Nextcloud server, with official administrator documentation. | https://docs.nextcloud.com/server/latest/admin_manual/groupware/mail.html |

Source: https://privacyratings.com/webmail/nextcloud-mail/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/webmail/nextcloud-mail.md