Case file · Email
Mailbox.org
A German, privacy-first provider that allows anonymous signup and anonymous cash payment by post, with PGP and an optional encrypted "Guard" mailbox. No prominent disclosure incident on record. Encryption is opt-in rather than default, like Posteo.
The systematized overview
The bureau vs the internet.
8.0/10 · No identity required
Mailbox.org sits alongside Posteo as a genuinely private German option: anonymous registration is permitted, you can pay anonymously in cash by post, and it offers PGP plus an optional encrypted "Guard" mailbox that stores inbound mail encrypted to your key. We found no prominent data-handover incident. As with Posteo, the main caveat is that zero-access encryption is opt-in, not the default, so enable Guard for the strongest protection.
3 recurring praises · 2 recurring gripes
Most praised: anonymous signup and cash payment. Most cited downside: encryption not default.
We track our editorial score and community sentiment separately — neither moves the other. Read together, they're the systematized overview.
The facts
Jurisdiction, sign-up & encryption.
- Jurisdiction
- Heinlein Support GmbH, Berlin, Germany
- Sign-up needs
- Anonymous registration permitted; minimal data
- KYC trigger
- None documented
- Encryption
- PGP + S/MIME; optional "Guard" encrypted mailbox (opt-in, not default)
- Provider access
- Can access stored mail unless Guard is enabled
- Anon. payment
- Anonymous cash by post; card/bank; no crypto
- Logging
- Collects only technically necessary data; German jurisdiction
- Open source
- No (open standards)
- Audited
- No prominent public audit found
- Custom domain
- Yes (custom domains supported)
- Free tier
- No (from ~EUR1/month)
- Since
- 2014
The full read
Our analysis, in plain words.
Mailbox.org is the other genuinely private German mailbox, and it earns that description the same way Posteo does: it lets you keep both your identity and your payment out of the account. Registration is permitted with minimal, non-identifying data, and you can pay anonymously in cash sent by post. On top of that it offers PGP, S/MIME and an optional "Guard" encrypted mailbox that stores inbound mail encrypted to a key you control.
It scores just below Posteo mainly because Posteo’s no-IP-logging has been externally audited by the German data-protection regulator, whereas Mailbox.org rests more on its policies and jurisdiction. We also found no prominent disclosure incident for Mailbox.org, which is a point in its favour, though it publishes less public transparency detail than Tuta or Proton. As with Posteo, encryption is opt-in, so the strongest protection requires enabling Guard.
For a user who wants a genuinely anonymous, standards-based mailbox under German law, Mailbox.org is a solid, boring-in-a-good-way choice. It does not have the encryption depth of Tuta or the audit pedigree of Posteo, but it does the fundamentals - anonymous account, anonymous payment, strong jurisdiction - without a blemish on record.
The score, broken down
How the 8.0 is built.
Privacy
weight 50%What identity, data and metadata the service can demand or collect.
82 × 50% = 4.1 of 10
Trust
weight 30%Whether it can technically deliver what it claims — code, audits, age.
76 × 30% = 2.3 of 10
Reliability
weight 20%Whether the no-KYC claim holds under real-world pressure.
82 × 20% = 1.6 of 10
Weighted total 8.0 / 10 · no reliability rule triggered, so the score stands. See the rubric →
Every point, sourced
What earned the score.
Privacy
The fine print, read for you
Terms reviewed — no trapdoor found.
“Registration is possible with minimal, non-identifying data and payment can be made anonymously in cash by post; the optional Guard feature stores inbound mail encrypted to the user’s key.”
What it meansLike Posteo, Mailbox.org lets you keep both the account and the payment off your identity, which is the hard part most providers miss. The catch is the same: default storage is readable by the provider unless you enable the Guard encrypted mailbox, so turn it on if you want Mailbox.org unable to read your stored mail.
Read the source →Anonymous registration is permitted with minimal data, and you can pay anonymously in cash by post, so an account need not be tied to your identity. There is no free tier (from ~EUR1/month). We rate it KYC level 1 - identity-free in practice - with the caveat that encryption (Guard) is opt-in.
Policy review — point by point
-
Anonymous account + payment
Minimal-data registration and anonymous cash-by-post payment keep the account off your identity. ↗
-
Encrypted Guard mailbox
Optional Guard feature stores inbound mail encrypted to the user’s key. ↗
-
Opt-in encryption, no crypto pay
Zero-access storage is not the default, and there is no cryptocurrency payment option. ↗
Mailbox.org operates under German law like Posteo, benefiting from strong data-protection rules while remaining subject to valid German court orders for data it holds. It minimizes what it holds via anonymous signup and payment. Its own product pages and privacy-community assessments are the sources here; we found no prominent disclosure incident.
We keep watching
Incident & policy timeline.
- 2014
Launched by Heinlein Support
Mailbox.org launched as a privacy- and standards-focused provider under Berlin-based Heinlein Support, offering PGP, anonymous signup and anonymous payment.
source ↗
The verdict
Where it stands.
Strengths
- Anonymous registration and anonymous cash payment
- PGP + optional encrypted "Guard" mailbox
- German jurisdiction; run by an established operator
- No prominent data-handover incident found
Trade-offs
- Zero-access encryption is opt-in, not default
- No cryptocurrency payment option
- Not primarily open source; lighter public transparency reporting
Across the internet
What reviewers report.
Consistently praised
- Anonymous signup and cash payment
- Good feature set with custom domains
- Clean record under German law
Recurring complaints
- Encryption not default
- No crypto payment
Privacy communities recommend Mailbox.org alongside Posteo as a trustworthy German provider, praising anonymous payment and features while noting opt-in encryption. Synthesized from Privacy Guides and Mailbox.org primary sources.
Keep exploring
Related lists & categories.
Ask the bureau
Mailbox.org, common questions.
Is Mailbox.org no-KYC?
Yes, in practice. Registration is permitted with minimal, non-identifying data and you can pay anonymously in cash by post, so the account need not be linked to you. There is no free tier. We rate it KYC level 1.
Can Mailbox.org read my email?
By default it can access stored mail, like most providers. Enable the optional "Guard" encrypted mailbox and inbound mail is stored encrypted to your key, so the provider cannot read it. Metadata and mail in transit follow the usual limits.
How does it compare to Posteo?
They are close siblings: both German, both allow anonymous signup and cash payment, both make strong encryption opt-in. Posteo edges ahead in our scoring for its externally audited no-IP-logging; Mailbox.org offers slightly broader features and custom-domain support. Either is a genuinely private choice.
Your exact case not covered? The live Ask the bureau answers it and turns it into a public FAQ.