188
ProtonMail provides information used to identify email owner... (www.404media.co)
submitted 6 months ago by to c/privacy@lemmy.ml
105 comments fedilink hide all child comments
 

Awesome...

you are viewing a single comment's thread
view the rest of the comments
[–] 20 points 6 months ago* (7 children)

Really, this headline should be "Organization so poorly organized that they messed up having relatively secure email."

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 17 points 6 months ago (6 children)

    Not at all. Proton doesn't require any personal info at all. But if you pay with a credit card... That has your personal info tied to it. It's their fuck up paying with a credit card. Proton accepts other payment methods that aren't tied to your identity.

    Proton is required by law to provide information they have when the courts say so.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 8 points 6 months ago (2 children)

    So I'm not a criminal organization as far as I know, but if I did pay with a credit card originally can that be rectified without deleting and starting over?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 6 months ago (1 child)

    Proton uses Chargebee for payments, which has its own data retention policy of essentially "as long as we want to", but Proton does themselves keep limited data like the billing name, and last 4 digits.

    Proton's privacy policy says nothing about a pre-set time delay after which they'd delete that data. They only claim that they "reserve our right" to remove your payment information if they think it's no longer valid. So theoretically, that might mean if your card's expiry date has passed, but that's not a confirmation.

    The best way to reliably make sure Proton wouldn't have any info on you is to not have ever tied any real information about yourself or your payment info to that account.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 6 months ago (1 child)

    Are they required to keep the data?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 6 months ago

    Not sure about Swiss laws regarding merchant payment card data retention... But they aren't really going to matter with this situation either way. Even if Proton doesn't keep any identifying information directly, the payment processor for sure is going to keep identifying data. Proton will have a confirmation number for the payment being processed, which can be correlated via the payment processor anyway.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 6 months ago

    Yeah, exactly. They don't make it hard to not tie personal data to them if you want, you just have to actually DO the thing to take advantage of it. These people seemed to think it was magic, which seems to be how a lot of people think Proton or Tuta works.

  • permalink
  • fedilink
  • source
  • parent