Case file · Email
StartMail
A competent PGP-friendly provider from the makers of Startpage, but weaker on the no-KYC axis: it is paid-only after a short trial and typically takes an alternate email at signup, so the account is tied to a card and a contact address. No prominent disclosure incident on record.
The systematized overview
The bureau vs the internet.
6.1/10 · Payment identity required
StartMail, from the team behind the Startpage search engine, is a capable privacy-oriented mailbox with one-click PGP and a Dutch jurisdiction - but it is the weakest of our live picks on the no-KYC axis. It is paid-only after a 7-day trial, so a payment method (and typically an alternate email) ties the account to you, and it is not full zero-access on all stored mail. We found no prominent disclosure incident, but the payment-identity requirement is the ceiling on its privacy.
2 recurring praises · 2 recurring gripes
Most praised: startpage pedigree and one-click pgp. Most cited downside: paid-only ties account to a card.
We track our editorial score and community sentiment separately — neither moves the other. Read together, they're the systematized overview.
The facts
Jurisdiction, sign-up & encryption.
- Jurisdiction
- Surfboard Holding BV, Netherlands
- Sign-up needs
- Alternate email typically required; paid-only after a 7-day trial
- KYC trigger
- Payment method required after trial ties the account to identity
- Encryption
- One-click PGP; IMAP/SMTP; not full zero-access on all stored mail
- Provider access
- Can access non-PGP stored mail; content disclosure requires a court order
- Anon. payment
- Card; crypto acceptance unverified
- Logging
- Dutch/EU jurisdiction; retention specifics to verify
- Open source
- No
- Audited
- No prominent public audit found
- Custom domain
- Yes (custom domains + aliases)
- Free tier
- No (7-day trial only)
- Since
- 2016
The full read
Our analysis, in plain words.
StartMail comes with a genuine privacy pedigree - it is built by Surfboard Holding, the company behind the Startpage search engine - and it delivers a competent mailbox with one-click PGP, custom aliases and a Dutch jurisdiction. For a paying user who wants confidential email and does not need anonymity, it is a reasonable choice, and we found no prominent disclosure incident against it.
It scores lowest of our live picks because it is the payment-identity archetype. There is no free tier - after a 7-day trial you must subscribe, and unless anonymous crypto payment is accepted (which we could not verify), the required card ties the mailbox directly to your legal identity. Signup also typically takes an alternate email, adding a second link, and it is not full zero-access on all stored mail. None of that harms content confidentiality, but all of it caps how no-KYC the account can be.
So StartMail is the "private but not anonymous, and you pay with your name" case. Include it if you value the Startpage pedigree and one-click PGP and are paying openly anyway; skip it if identity-free signup is the point, where Posteo, Tuta or Mailbox.org are clearly stronger.
The score, broken down
How the 6.1 is built.
Privacy
weight 50%What identity, data and metadata the service can demand or collect.
55 × 50% = 2.8 of 10
Trust
weight 30%Whether it can technically deliver what it claims — code, audits, age.
68 × 30% = 2.0 of 10
Reliability
weight 20%Whether the no-KYC claim holds under real-world pressure.
66 × 20% = 1.3 of 10
Weighted total 6.1 / 10 · no reliability rule triggered, so the score stands. See the rubric →
Every point, sourced
What earned the score.
Privacy
The fine print, read for you
The clause they bury.
“StartMail is a subscription service (free trial only); a valid payment method is required to continue, and account setup typically involves providing an alternate email address.”
What it meansThe privacy features are real, but the on-ramp is not anonymous: once the trial ends you must pay, and unless crypto is accepted (unverified), a card ties the mailbox to your legal identity, while the alternate email gives a second link. For confidentiality that is fine; for anonymity it is the weak point. This is the payment-identity archetype - private in content, but not identity-free.
Read the source →StartMail is paid-only after a 7-day trial, so a payment method is required to keep the account, and an alternate email is typically taken at signup. Unless anonymous crypto payment is accepted (which we could not verify), the account is linked to your identity through the card. We rate it KYC level 3 - payment-identity required.
Policy review — point by point
-
Paid-only, card required
After a 7-day trial a payment method is required, tying the account to identity unless anonymous crypto is accepted (unverified). ↗
-
Alt-email at signup
Account setup typically involves providing an alternate email, a second identity link. ↗
-
One-click PGP, EU jurisdiction
Offers easy PGP and sits in a Dutch/EU jurisdiction requiring a court order for content; no prominent disclosure incident found. ↗
StartMail operates under Dutch/EU law, which requires a court order for content disclosure. Its privacy ceiling is not jurisdiction but the paid-only, alt-email signup that links the account to identity. We could not verify anonymous crypto payment or full retention specifics; those are audit-to-do items. Sources are StartMail’s own pages and a privacy review.
We keep watching
Incident & policy timeline.
- 2016
Launched by the Startpage team
StartMail launched as a paid privacy mailbox from Surfboard Holding, the company behind the Startpage search engine, offering one-click PGP and custom aliases.
source ↗
The verdict
Where it stands.
Strengths
- One-click PGP and custom aliases
- Built by an established privacy company (Startpage)
- Dutch/EU jurisdiction; no prominent disclosure incident
Trade-offs
- Paid-only - a card ties the account to your identity
- Alternate email typically required at signup
- Not full zero-access on all stored mail
- Not open source; crypto payment unverified
Across the internet
What reviewers report.
Consistently praised
- Startpage pedigree and one-click PGP
- No known disclosure incident
Recurring complaints
- Paid-only ties account to a card
- Alt-email required; not full zero-access
Reviewers regard StartMail as a solid, if unexciting, paid privacy mailbox, repeatedly noting that the paid-only signup makes it less suitable for anonymous use than free no-KYC providers. Synthesized from StartMail sources and privacy reviews.
Keep exploring
Related lists & categories.
Ask the bureau
StartMail, common questions.
Is StartMail no-KYC?
Not really. It is paid-only after a 7-day trial, so a payment method is required, and an alternate email is typically taken at signup - both tie the account to you unless anonymous crypto payment is available (unverified). We rate it KYC level 3.
Is StartMail private?
For content, reasonably - it offers one-click PGP and sits in a Dutch/EU jurisdiction that requires a court order for content, and we found no prominent disclosure incident. The limitation is anonymity: the paid-only, alt-email signup links the mailbox to your identity.
Who is behind StartMail?
Surfboard Holding BV in the Netherlands, the same company behind the Startpage private search engine. That gives it a real privacy pedigree, but the product is aimed at confidentiality for paying users rather than anonymous, identity-free mail.
Your exact case not covered? The live Ask the bureau answers it and turns it into a public FAQ.