Tuta
Tuta is a genuinely privacy-focused email service that encrypts your data end-to-end, stores everything in Germany under strict GDPR protections, and commits to never selling your data or using third-party trackers. However, the terms of service contain some user-unfavorable provisions, including treating your silence as acceptance of minor changes, allowing unlimited third-party subprocessors without notice, and giving free account users almost no legal recourse if something goes wrong. Free accounts can be deleted after six months of inactivity with no warning, and you are entirely responsible for backing up your own data before termination. Disputes are governed by German law and must be litigated in Hanover, with the German-language version of the terms taking legal precedence over the English translation.
Last analyzed
Heads up: this analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original document before you agree — see our Terms.
Clause-by-clause breakdown
Every clause we flagged in Tuta's agreement, with what it means for you.
Not objecting to minor term changes counts as your agreement.
“If such an alteration to the content of the contract or these Terms and Conditions does not contain a reduction of a principal contractual service offered by Tutao or an increase in price or any other more than insignificant change in the mutual contractual rights and responsibilities, the following shall apply: In the event of such an alteration, the customer's consent to the alteration of the contract or the T&Cs shall be considered to be granted if the customer receives the wording of the alteration in text form alongside the notification of the alteration and the customer does not object to the alteration within one month after receipt of the notification of the alteration sent to the customer by Tutao.”
Quoted verbatim from the agreement What this means: For changes Tuta considers minor (no reduction in core services, no price increase), your silence for one month after receiving a notification counts as your agreement to the new terms. You don't have to actively accept — not objecting is treated as consent. This is a common but user-unfavorable clause.
What you can do: Watch for any email notifications from Tuta about Terms changes. If you disagree, you must actively object within one month or cancel your account within that same window.
Tuta can use any third-party services without notifying you.
“Tutao has the right to use services of third parties for the service provision at any time and in any amount.”
Quoted verbatim from the agreement What this means: Tuta can bring in any third-party service providers at any time, in any quantity, without needing to notify you or get your approval. While this is common in the industry, it means the list of companies that may handle parts of your service can change without warning.
What you can do: Periodically check Tuta's privacy policy for updates on which third parties are involved in service delivery.
Free accounts get almost no legal protection if Tuta makes mistakes.
“10.5. The liability for any lost profit is excluded. 10.7 In the event that the system was provided as a free version (i.e. free of charge), Tutao accepts liability in accordance with the above provisions only for willful and malicious acts.”
Quoted verbatim from the agreement What this means: For free accounts, Tuta is only liable if they act intentionally or maliciously — meaning if they make a mistake that causes you harm, you have no recourse. Even for paid accounts, lost profits are entirely excluded from any claim. This significantly limits your ability to seek compensation if something goes wrong.
What you can do: Understand that free accounts have very limited legal protection. For critical communications, consider a paid plan, and always maintain your own backups of important data.
You are solely responsible for backing up your data.
“5.5 After termination of the contract, Tutao is no longer obligated to provide the contractual services. The timely storage and backup of the data, is the customer's responsibility.”
Quoted verbatim from the agreement What this means: Once your account is terminated — whether by you or by Tuta — they have no obligation to preserve your data. You are solely responsible for backing up your emails, contacts, and other data before termination. Tuta can also terminate free accounts with no notice after six months of inactivity.
What you can do: Regularly export and back up your important emails and contacts. If you plan to close your account, download everything first.
Free accounts can be deleted without warning after six months inactive.
“Tutao is entitled to terminate the contract without notice in case of a free of charge tariff if the account was not used for at least six months.”
Quoted verbatim from the agreement What this means: If you have a free Tuta account and don't log in for six months, Tuta can delete your account and all its data without any prior warning. This could result in permanent loss of emails and contacts if you're not actively monitoring the account.
What you can do: Log into your free Tuta account at least once every six months to prevent automatic termination. Consider setting a calendar reminder.
Signing up via an ad link ties campaign tracking data to your account.
“In order to be able to evaluate campaigns with partners and advertising campaigns (e.g. advertising via Google or other search engines), we store an ID of the campaign with your Tuta account when you reach Tuta via a campaign link and register a Tuta account. To be able to assign returning users to a campaign, we store a cryptographic hash of connection data like the IP address and the user agent (including information about the user's browser and operating system) together with the campaign ID when you visit our website via a campaign link. The hash and the campaign ID, keywords and search query are stored together with the hash and deleted at the latest after 30 days. Beyond this period, for the purpose of evaluating the campaign and until the completion of the evaluation, only completely anonymized campaign data (keywords and search query) are stored and processed without any link to the hash.”
Quoted verbatim from the agreement What this means: If you arrive at Tuta through an ad link (e.g., from a Google search ad), Tuta stores a campaign ID linked to your account, and a hashed version of your IP address and browser details. This is used to measure advertising effectiveness. The hash and campaign data are deleted within 30 days.
What you can do: Navigate directly to tuta.com rather than clicking on ads to avoid having campaign tracking data linked to your account.
The German text is legally binding; English is just a convenience translation.
“These General Terms and Conditions are provided in English for your convenience. Please note that in case of a dispute or discrepancy between the German Terms and Conditions and the English translation, the German version shall prevail. This Privacy Statement is provided in English for your convenience. Please note that in case of a dispute or discrepancy between the German Privacy Statement and the English translation, the German version shall prevail.”
Quoted verbatim from the agreement What this means: Both the Terms of Service and Privacy Policy are officially in German. The English versions are unofficial translations provided for convenience only. If there is any conflict between the two, the German text wins. Non-German speakers may be agreeing to terms they cannot fully verify.
What you can do: If you want to be certain of the exact terms you're agreeing to, use a professional translation of the German versions. The German documents are the legally binding ones.
Most data deleted in 30 days, but billing data can be kept up to two years.
“The personal data shall be deleted no later than 30 days after termination of the contract, unless specific reasons to the contrary apply in an individual case. In case a customer objected to the amount of the charged fees, the accounting data may be stored until the objections are terminally clarified. Furthermore, inventory data can be stored for up to two years if the handling of a complaint and other reasons require this for an orderly settlement of the contract. Moreover the deletion of inventory and billing data may be omitted provided that legal regulations or the prosecution of claims require this.”
Quoted verbatim from the agreement What this means: Most personal data is deleted within 30 days of account closure, which is a reasonable timeframe. However, billing and account data can be kept for up to two years if there are disputes or complaints, and indefinitely if required by law or for legal claims. This is standard practice but worth knowing.
What you can do: After closing your account, you can email [email protected] to confirm your data has been deleted after 30 days, or to request deletion of any remaining data under GDPR Article 17.
Tuta must hand over your metadata to authorities under a valid court order.
“However, we can be legally bound to provide content data and traffic data (in case of a valid court order) and inventory data to law enforcement agencies.”
Quoted verbatim from the agreement What this means: If a court orders Tuta to hand over data, they must comply. Because content is end-to-end encrypted, Tutao cannot provide readable email content — but they can provide metadata (email addresses, timestamps) and account/billing information. This is standard legal compliance, but users should understand that metadata is not protected from court orders.
What you can do: Be aware that your account metadata (who you email, when) can be disclosed under a valid court order. For maximum anonymity, consider using Tuta without linking it to real identity information.
German law applies; business disputes must be litigated in Hanover, Germany.
“15.1 The laws of the Federal Republic of Germany shall apply. This does not affect mandatory provisions of the country in which private customers who are consumers have their main residence. In all communications with consumers within the European Union the law of the domicile country of the consumer may also be used, provided that mandatory consumer laws are applicable. 15.2 The place of jurisdiction for demands resulting from differences between the parties to a contract, in particular about the conclusion of a contract, its execution or its termination - insofar as the customer is a general merchant, a corporate body under public law, or a separate estate under public law - is Hanover, Germany.”
Quoted verbatim from the agreement What this means: German law governs the contract. For private consumers, your home country's mandatory consumer protections still apply, which is a user-friendly provision. Business customers, however, must litigate disputes in Hanover, Germany, which could be costly and impractical for non-German businesses.
What you can do: If you are a private consumer, your local consumer protection laws still apply alongside German law. Business customers should factor in the cost of German litigation when evaluating the service.
Tuta can change the service unilaterally for technical or legal reasons.
“4.3 Tutao retains the right to extend services and make improvements if they are pertinent to technical progress, necessary to prevent abuse, or if required to do so by law.”
Quoted verbatim from the agreement What this means: Tuta can unilaterally change the service for technical progress, abuse prevention, or legal compliance without needing your consent for those specific changes. This is a standard clause but means the service you signed up for can evolve without your explicit agreement in these defined circumstances.
What you can do: Monitor Tuta's announcements and changelog for service changes. If a change is significant, you retain the right to cancel under the terms.
Tuta encrypts all your data — even they can't read it.
“All user data is stored end-to-end encrypted in Tuta. All textual content is encrypted for the user and its communication partners in a way that even Tutao GmbH has no access to the data.”
Quoted verbatim from the agreement What this means: Tuta encrypts all your emails, contacts, and stored data so that even Tuta itself cannot read them. This is a strong technical protection that goes well beyond what most email providers offer. Even if Tuta were compelled by a court order, they could only hand over encrypted data they cannot decrypt.
What you can do: Use Tuta as your primary email for sensitive communications. For emails sent to non-Tuta users, use the password-protected email feature to maintain end-to-end encryption.
All data is stored in certified German data centers.
“All data is stored in ISO 27001 certified data centers in Germany.”
Quoted verbatim from the agreement What this means: All your data is stored in Germany, which is subject to strict German and EU data protection laws (GDPR). This means your data benefits from some of the strongest legal privacy protections in the world, and Tuta must follow GDPR rules for any data requests.
What you can do: No action needed — this is a user-protective feature. You can file complaints with German data protection authorities if you believe your rights are violated.
No Google Analytics or third-party tracking tools are used.
“In particular, we do not use analysis tools such as Google Analytics or other third-party tools. In order to improve our service, we store visitor data from visitors to our website and the Tuta application, such as geolocation and device types used. This data is anonymized, stored only on our own servers, and not shared with third parties.”
Quoted verbatim from the agreement What this means: Tuta does not use Google Analytics or any other third-party tracking tools. Any analytics they do collect are anonymized, kept on their own servers, and never shared with outside companies. This is a meaningful departure from most websites that rely heavily on third-party trackers.
What you can do: No action needed — this is a user-protective practice. You can still opt out of the optional usage statistics in your account settings for maximum privacy.
You can turn off usage data collection anytime in settings.
“You can revoke your consent to participate in the anonymized usage statistics at any time by deactivating this function in the settings of your account.”
Quoted verbatim from the agreement What this means: Usage statistics collection is opt-in and can be turned off at any time directly within your account settings. You also have the ability to delete the locally stored random ID yourself through your browser, app, or desktop client settings.
What you can do: Go to your Tuta account settings and disable usage statistics if you haven't already. You can also clear the random ID from your browser or app data.
Tuta explicitly commits to never selling your data.
“With the exception of payment data as stated above, we will not disclose your personal data including your email address to third parties. However, we can be legally bound to provide content data and traffic data (in case of a valid court order) and inventory data to law enforcement agencies. There will be no sale of data.”
Quoted verbatim from the agreement What this means: Tuta explicitly commits to never selling your data. The only third-party disclosures are payment processors (for billing) and law enforcement when legally compelled by a valid court order. This is a strong and clear commitment compared to most services.
What you can do: No action needed — this is a user-protective commitment. Be aware that metadata (email addresses, timestamps) can still be disclosed under a court order, even though email content is encrypted.
You can request a copy of your data under GDPR.
“in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller”
Quoted verbatim from the agreement What this means: Under GDPR, you have the right to request a copy of your personal data in a portable, machine-readable format. Tuta explicitly acknowledges this right. However, the policy does not describe a self-service export tool — you would need to make a formal request.
What you can do: Email [email protected] to request a copy of your personal data. Note that your encrypted email content can be exported directly from the Tuta app.
Email metadata logs are deleted after 7 days and never include your IP address.
“In order to maintain email server operations, for error diagnosis and for prevention of abuse, mail server logs are stored max. 7 days. These logs contain sender and recipient email addresses and time of connection but no customer IP addresses.”
Quoted verbatim from the agreement What this means: Mail server logs — which include who you emailed and when — are kept for a maximum of 7 days and then deleted. Crucially, your IP address is not stored in these logs. This is a strong data-minimization commitment that limits the metadata trail available to Tuta or law enforcement.
What you can do: No action needed — this is a user-protective policy. Be aware that within the 7-day window, this metadata could be disclosed under a court order.
Frequently asked questions
Is Tuta's Terms & Conditions agreement fair?
- BeforeYouClick grades Tuta B on an A–E scale, where A is the fairest. Its agreement contains 1 critical clause, 10 warnings and 7 good practices.
What are the biggest problems with Tuta's terms?
- The most serious clauses we flagged are: Silence Treated as Consent to Term Changes.
How long does it take to read Tuta's terms?
- Tuta's agreement takes about 42 minutes to read in full, across 18 clauses we reviewed. The summary on this page covers the same ground in under a minute.
When was Tuta's agreement last analyzed?
- We last read Tuta's Terms & Conditions on July 4, 2026. Companies change their terms without notice, so check the original document for the current version.
Is this analysis legal advice?
- No. This analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original agreement before you agree to it.
More agreements to read
- PosteoProductivityGrade A
- KagiProductivityGrade C
- NotionProductivityGrade D
- FastmailProductivityGrade D
- ProtonProductivityGrade D
- AppleProductivityGrade E