Proton

Network traffic visible to third parties during censorship bypass

When alternative routing is enabled to bypass censorship, unencrypted network metadata (your IP address and that you're using Proton) passes through third-party networks you cannot control, potentially exposing your connection patterns even though your message content remains encrypted.

Payment data shared with multiple processors in US jurisdictions

Your payment information is processed by Chargebee, Stripe, and PayPal, all with data processing locations in the United States, creating multiple points where financial data could be subject to U.S. government requests outside Swiss legal protections.

IP addresses retained permanently for Terms of Service violations

If Proton determines you've violated their Terms of Service (such as spamming), your IP address is permanently stored without a defined retention limit, creating an indefinite surveillance record tied to your account.