Webmail
RoundCube privacy rating
Browser-based multilingual IMAP client with an application-like user interface.
Summary
RoundCube scores 84 out of 100 (grade B) on the webmail criteria. It meets 7 of 9 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content, works with any provider and self-hostable. It partly meets OpenPGP support. It does not meet independent audit.
Score 84 out of 100. How scoring works
Criteria
- Yes
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free software developed with support from Nextcloud and hosting partners. No ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Partial
OpenPGP support Weight 2 of 3
Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?
PGP needs the bundled Enigma plugin enabled by the server admin, or the Mailvelope browser extension.
-
Yes
Connects directly Weight 3 of 3
Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?
Self-hosted. Connects from the server where it is installed directly to the IMAP and SMTP servers, with no vendor service involved.
-
Yes
Blocks remote content Weight 2 of 3
Are remote images and tracking pixels blocked by default?
The default show_images setting never loads remote images without asking.
-
Yes
Works with any provider Weight 1 of 3
Does the app work with any standard IMAP and SMTP provider?
Works with any IMAP and SMTP server.
-
Yes
Self-hostable Weight 1 of 3
Can the webmail be installed on your own server?
Self-hosted software with an official installation guide.