# proton.me EcoMark: C 72/100

proton.me scored 72/100 (C) with EcoMark algorithm v4. See evidence, improvements and history.

Canonical: https://ecomark.app/site/proton.me

Latest EcoMark · Algo v4

# proton.me

This grade belongs to proton.me. It is based on a bounded sample of up to 5 connected public pages plus public evidence. It is not a grade for any one page.

Rescan website
[View full analysis](/assessment/69e2061e-9988-4825-9b2d-500bae6d348c) C 72 #6 of 10 using v4

Improve

## Start with these changes.

EcoMark puts the lowest-scoring areas first, so the next step is obvious.
1
efficiency

### Reduce resource and third-party requests by consolidating assets and removing unnecessary integrations.

Lighter pages consume less bandwidth and device work and remain usable on slower connections.
2
sovereignty

### Avoid concentrating most third-party delivery in one provider ecosystem.

A more portable and less concentrated stack gives organisations more control over technology and jurisdiction.
3
responsibility

### Publish sustainability evidence, consider carbon.txt, and use independently verified green hosting where practical.

Transparent, secure defaults make digital impact understandable and give visitors meaningful choices.

Breakdown

## Where the score comes from.

Efficiency
55 #9 of 10
5 connected pages · ~620 KB measured/page · 0 KB JavaScript/page · 101 resource references/page · 90% sampled assets cacheable. PageSpeed-style checks: 5/7; 2 obvious blocking candidates; 0 images without width/height.

**Evidence and scoring**

Evidence: 5 connected pages · ~620 KB measured/page · 0 KB JavaScript/page · 101 resource references/page · 90% sampled assets cacheable. PageSpeed-style checks: 5/7; 2 obvious blocking candidates; 0 images without width/height.

- Payload Measured HTML and sampled asset payload is proportionate and optimised. 15/20
- JavaScript Referenced JavaScript weight is kept proportionate. 20/20
- Requests Pages avoid excessive resource references and third-party connections. 0/20
- Media Images and video avoid obvious loading and autoplay waste. 0/20
- Caching and compression Sampled static assets expose effective cache policy. 20/20

Privacy
80 #5 of 10
0 known trackers · 0 tracking-style response cookies · 90% third-party resource references.

**Evidence and scoring**

Evidence: 0 known trackers · 0 tracking-style response cookies · 90% third-party resource references.

- Behavioural tracking Known advertising pixels and cross-site trackers are absent or minimised. 20/20
- Analytics minimisation Analytics technology is absent or privacy-preserving and proportionate. 20/20
- Cookies and consent Non-essential response cookies are avoided before interaction. 20/20
- Third-party disclosure Resource loading does not unnecessarily disclose visits to third parties. 0/20
- Invasive techniques Known session replay and similarly invasive tools are absent. 20/20

Sovereignty
65 #6 of 10
1 US-headquartered visitor-facing provider ecosystems · 10% first-party assets · open technology 68/100 · Astro. DNS: NS ns1.proton.me, ns2.proton.me · MX 10 mail.protonmail.ch, 20 mailsec.protonmail.ch.

**Evidence and scoring**

Evidence: 1 US-headquartered visitor-facing provider ecosystems · 10% first-party assets · open technology 68/100 · Astro. DNS: NS ns1.proton.me, ns2.proton.me · MX 10 mail.protonmail.ch, 20 mailsec.protonmail.ch.

- Provider jurisdiction Observable visitor-facing dependencies minimise reliance on US-headquartered platform ecosystems. 15/20
- Third-party geography Known non-EU third-party data exposure is minimised. 20/20
- Portable delivery Pages minimise proprietary embeds and platform-specific content dependencies. 20/20
- Supplier concentration Third-party resource loading is not dominated by one provider ecosystem. 0/20
- Open technology Open standards, first-party delivery, open-source technology and public source code are preferred where practical. 10/20

Accessibility
100 #1 of 10
0 semantic issues · 0 keyboard markup issues · 0% unlabelled controls · 100% raw/rendered text ratio.

**Evidence and scoring**

Evidence: 0 semantic issues · 0 keyboard markup issues · 0% unlabelled controls · 100% raw/rendered text ratio.

- Semantics HTML exposes basic language, heading and landmark structure. 20/20
- Keyboard access Markup avoids obvious keyboard-hostile interaction patterns. 20/20
- Forms and controls Form controls expose labels or accessible names. 20/20
- Visual accessibility Viewport and media markup avoid obvious visual accessibility barriers. 20/20
- Resilience Meaningful text remains present without relying entirely on client rendering. 20/20

Responsibility
65 #5 of 10
Privacy ✓ · Cookies n/a · Terms ✓ · Accessibility ✗ · Contact/About ✓. Public registration IDs: none detected. no verified green-hosting evidence found. carbon.txt ✗ · sitemap ✓ · security 5/6. Missing: Permissions-Policy.

**Evidence and scoring**

Evidence: Privacy ✓ · Cookies n/a · Terms ✓ · Accessibility ✗ · Contact/About ✓. Public registration IDs: none detected. no verified green-hosting evidence found. carbon.txt ✗ · sitemap ✓ · security 5/6. Missing: Permissions-Policy.

- Public accountability Privacy, terms, accessibility, contact and applicable registration information are discoverable. 10/20
- Security basics The main response exposes sensible browser security headers. 15/20
- Consent design Tracking and consent markup avoids obvious one-sided choice patterns. 20/20
- Supplier disclosure Detected material visitor-facing providers are reflected in discoverable privacy information. 20/20
- Sustainability evidence Green hosting, carbon.txt and public sustainability information provide discoverable evidence of digital sustainability practice. 0/20

Progress

## Previous EcoMarks.
[C 72/100 Algo v4 · 30 Aug 2026 New](/assessment/69e2061e-9988-4825-9b2d-500bae6d348c)
