this post was submitted on 11 Jul 2025
474 points (89.9% liked)
Privacy
39871 readers
463 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
What's wrong with it?
proton has already shared user details with authorities.
Any compliant commercial service will share user data with authorities - you don't get to operate a company and skip local laws. That's a non argument.
What's important is what "user details" they had on hand to share. If I create my service in such a way that I have zero data about you except some random useless string, I can "hand over all user data" to authorities and it would mean absolutely nothing for your privacy.
except they shared the IP address of an account even though they state "No personal information is required to create your secure email account. By default, we do not keep any IP logs which can be linked to your anonymous email account. Your privacy comes first." on their homepage
It's right there in your copy-paste my dude, "BY DEFAULT".
The jackass(es) who actually was at risk went the extra step to enable IP address logging, which means that when Proton had to comply with a lawful court order, they actually had data to give.
Proton is a company like any other that has to comply with laws in the country they operate in, but unlike a lot of other companies, they don't log data UNLESS YOU ASK THEM TO.
Moral of the story is, like has oft been repeated, know your threat model and plan appropriately.
If I understood correctly from Proton's privacy policy, VPN does not log IP addresses but at least in some circumstances Mail does. This is from their privacy policy:
Due to limitations of the SMTP protocol, we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, attachment name, message subject, and message sent and received times.
One thing must be remembered: Even Proton must follow the law and rules.
And those are the limitations created by the fact that email was never meant to be truly secure, not in the way we define and expect security and privacy nowadays at least.