0)Please tell us, what is your role (in the email provider company, where do you stand, owner, marketer, advertiser etc)?
1) Does Tutanota keep or enforce any logs, IP Addresses, Timestamps, Bandwidth caps, Traffic or other data on users?
We do not log IP addresses of our users.
2) What type of Encryption do you use to secure emails?
While developing our end-to-end encryption solution called “Tutanota” (Latin for “secure message”) we focused on usability because we want to offer anybody an easy access to secure communication with anybody in the world! The entire encryption process takes place in the background and no software needs to be installed. We use a standardized, hybrid method consisting of symmetric and asymmetric algorithms with AES and RSA. With Tutanota users can reach everybody end-to-end encrypted. The encryption with external recipients takes place with a symmetric algorithm (AES).
3) Where are your servers located and what jurisdiction do you operate under?
Our servers – as well as the company – are located in Germany and underlie the strict German data privacy laws. However, all data – even emails sent in unencrypted form – are only stored end-to-end encrypted on our servers and can only be accessed by the user. We would only see jumble of data. And that’s good!
4) How do you generally handle requests from law enforcement?
We have no access to the encryption keys of our users. This means we cannot – by default – access their data. If a German court order forces us to turn over data, this could only be in encrypted form. We would never turn over any data without an enforceable German court order.
5) Do you track users in any way with trackers, advertisements, or cookies?
We do not track our users in any way. There are no advertisements or cookies in our web application (https://app.tutanota.de).
6) How much do your encrypted email services cost?
Tutanota Free is available for free with 1 GB of free storage. In the future we will offer premium versions with additional storage and with the possibility to keep your domain.