stackpeek
← back to leaderboard

audit report

Proton

https://proton.me · privacy suite

warn
scanned 2026-04-16 23:36:56 utc permalink · /audit/proton

Proton loaded 14 third-party domain(s), of which 1 is privacy-sensitive. 1 warn finding(s): No privacy policy found. Privacy-sensitive vendors observed: Twitter/X.

findings


  1. warn

    No privacy policy found

    stackpeek could not discover a privacy policy for this page. This is unusual for anything serving real users.

    how we detected this →
  2. note

    Twitter/X loaded (social)

    Observed 2 time(s) on the page.

    
                CSP: https://platform.twitter.com
              
    how we detected this →

third parties observed


vendor domain category hits disclosure
Twitter/X twitter.com social 2 not named
Algolia algolia.net api 1 not named
Algolia algolianet.com api 1 not named
Cloudinary cloudinary.com cdn 1 not named
PayPal paypal.com payments 5 not named
PayPal paypalobjects.com payments 5 not named
YouTube youtube.com video 1 not named
Zendesk zdassets.com chat_support 3 not named
Zendesk zendesk.com chat_support 1 not named
getproton.me getproton.me other 1 not named
greenhouse.io greenhouse.io other 1 not named
noembed.com noembed.com other 1 not named
protonweb.com protonweb.com other 107 not named
youtube-nocookie.com youtube-nocookie.com other 1 not named

policy claims


No privacy policy could be located on this site.

response headers


hsts
yes
csp
yes
server

run this yourself


Every audit on this site is reproducible. Install stackpeek and run the same check against https://proton.me from your own machine — the tool is MIT-licensed and runs locally.

pip install stackpeek
stackpeek audit https://proton.me

source on GitHub · methodology · cli docs

provenance


This audit was generated by running stackpeek against https://proton.me from a public IP, using only HTTP GET and standard browser headers. The findings compare the observed HTML against the policy discovery results (no policy document was located) using the public methodology. Re-scans append new findings at new permalinks and never overwrite the historical record.