Privacy policy — Proton Pass

Cited by

Facts read from this source

• Entity Report an error

  “The Services are operated by Proton AG (the “Company”, “We”), domiciled at Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland. It is therefore governed by the laws and regulations of Switzerland.”

• GDPR representative Report an error

  “We are also GDPR compliant and fully committed to DSA compliance for users within the European Union. The designated representative of the Company in the European Union (notably for the purpose of art. 27 GDPR) is Proton Europe sàrl, rue de Grünewald 94, L-1912 Luxembourg.”

• Encryption access Report an error

  “We do not have the technical means to access the content of your encrypted emails, files, calendar events, passwords, or notes.”

• Analytics Report an error

  “We employ a local installation of self-developed analytics tools. Analytics are anonymized whenever possible and stored locally (and not on the cloud). IP addresses are not retained and stored for such analytics.”

• No location tracking Report an error

  “Our applications do not access or track any location-based information from your device.”

• Ip logging Report an error

  “By default, we do not keep permanent IP logs in relation with your Account. However, IP logs may be kept temporarily to combat abuse and fraud, and your IP address may be retained permanently if you are engaged in activities that breach our Terms of Service (e.g. spamming, DDoS attacks against our infrastructure, brute force attacks).”

• Authentication logs Report an error

  “If you enable authentication logging for your Account or voluntarily participate in Proton's advanced security program, the record of your login IP addresses is kept for as long as the feature is enabled. This feature is off by default, and all the records are deleted upon deactivation of the feature.”

• Card retention Report an error

  “We do not retain full credit card details, we only save your name and the last 4 digits of the credit card number. Anonymous cash or Bitcoin payments and donations are accepted.”

• Scribe local Report an error

  “By default, this feature operates locally on your device. You also have the possibility to have it operate server side, in which case only the minimal data necessary to make our service function will be shared with the servers. No log, account data or content data will be stored on our servers. Proton Scribe does not use content data or any of your data to train its models.”

• Dark web monitor Report an error

  “Dark Web Monitor is an opt-in feature that scans hidden parts of the internet for breached or stolen personal data in relation with your Account.”

• Alternative routing Report an error

  “By default, alternative routing is not used for Proton apps unless they detect that censorship measures are active on your network. Alternative routing can also be disabled in the settings panel of our mobile and desktop applications.”

• Disclosure Report an error

  “We will only disclose the limited user data we possess if we are legally obligated to do so by a binding request coming from the competent Swiss authorities.”

• E2e decryption Report an error

  “Under no circumstances can Proton decrypt end-to-end encrypted content and disclose decrypted copies.”

• Rights Report an error

  “Through your Account interface, you can directly access, edit, delete, or export personal data processed by the Company in your use of the Services.”

• Services Report an error

  “By using the proton.me or protonvpn.com website and making use of a Proton Account (the “Account”) and all its related features, including Proton Mail, Proton Calendar, Proton Drive, Proton VPN and Proton Pass (the “Services”) and other services like Proton Wallet operated by Proton Financial AG”

• Account creation Report an error

  “It is not necessary to provide personal information in order to create an Account. You can provide an external email address for notification or password recovery purposes.”

• Support no profiling Report an error

  “The information you provide when you contact our support team is processed for analytics purposes (such as to obtain aggregate statistics), but we do not do any targeted advertising or any profiling.”

• Policy version Report an error

  “Last modified: 12th May 2026”

10 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer European sovereignty
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic European sovereignty
• The SME Owner Sharing, roles & recovery
• The SME Owner Encryption model & independent audits
• The SME Owner Sharing, roles & recovery
• The SME Owner European sovereignty