StartMail Review

Reviewed by Tom · Founder & lead reviewer

The problem it solves

There are two separate problems in a small business inbox, and they are usually confused with each other. The first is confidentiality: client correspondence held on a mailbox whose economics depend on reading it. The second is contamination: a business address that has been handed to every supplier portal, software trial and newsletter over a decade, and now receives more marketing than work.

Most people notice only the second problem, because it is the one that costs them time every day. The first tends to surface at a specific moment - a client asks where their information is held, a professional body publishes guidance, or somebody reads their own terms of service properly for the first time.

StartMail addresses both with one structural change and one feature. The structural change is who pays: a subscription rather than advertising, which removes the commercial reason to scan content. The feature is unlimited disposable aliases, which fixes contamination in a way no amount of filtering ever does.

Who it is built for

The clearest fit is a professional whose inbox holds other people's sensitive information: bookkeepers, consultants, therapists, lawyers, agents, anyone whose confidentiality is part of what they are hired for. For that group, where email is held is a professional question rather than a preference, and a Dutch provider operating under EU privacy law is a defensible answer.

The second fit is the freelancer or small-shop owner who wants a clean separation between a professional address clients use and a disposable layer that absorbs everything else the internet demands an email address for. That is where the alias system earns its subscription, daily.

The poor fit is stated in the entry and should be taken seriously: this is not a replacement for Google Workspace or Microsoft 365. It replaces the mailbox, not the office suite. If your business runs on shared documents, a shared calendar and the integrations built around them, StartMail is an addition to that stack rather than a substitute for it, and running both means paying twice.

Pricing structure explained

The entry lists the shape: roughly five to seven dollars a month when billed annually, with a plan that supports custom domains. There is no free tier, which is the honest consequence of the business model - a mailbox nobody mines has to be paid for by the person reading it.

We are not quoting beyond that because plan names, limits and currency pricing change, and we could not confirm current figures against the live pricing page for this update. Check it before budgeting. The more useful exercise is working out what the total cost of the change is, because the subscription is rarely the whole of it.

• Mailboxes, not seats-you-might-add. Per-mailbox pricing means each person in the business who needs an address is a line item. Decide who genuinely needs one.
• The custom-domain plan. If you want mail at your own domain - which is the difference between a professional mailbox and a privacy hobby - confirm which tier includes it before pricing the cheapest one.
• Storage. Mailbox storage limits are the usual ceiling in this category, and a decade of imported Gmail history is larger than people expect. Check yours before migrating.
• What you are still paying elsewhere. If you keep Workspace or 365 for documents and calendar, this is an additional subscription rather than a replacement. Budget the sum, not the difference.
• Domain registration, if you do not already own one. Small, annual, and easy to forget in the arithmetic.

Core features: the alias system

Most privacy features are invisible until something goes wrong. Aliases pay rent every day, which is why they are the feature worth buying this product for rather than a bullet point on a list.

The mechanic is simple. For every service that demands an email address you create a new one - the supplier portal, the software trial, the trade newsletter, the conference registration - and it forwards to your real inbox. Each alias is disposable on command.

Two things follow, and both are worth more than they sound. First, attribution: when spam starts arriving at the alias you created for one specific vendor, you know precisely who leaked or sold your address. No guessing, no pattern-matching. Second, and more practically, the unsubscribe problem disappears. You do not negotiate with a mailing list, argue with a dark-pattern preference centre, or hope that clicking unsubscribe removes you rather than confirming you exist. You delete the alias and the channel is closed permanently.

The professional version of this is the one that matters most: your real business address, the one on your invoices and in your email signature, never enters the churn at all. It goes to clients and nobody else. That address stays clean for years, which is something no filter can achieve after the fact.

Custom-domain users get the same mechanic on their own domain, so the client-facing addresses look exactly as professional as any other business mailbox while the disposable layer absorbs the noise.

Core features: encryption and message controls

PGP encryption is offered with one-click handling, which is the only way PGP has ever worked for people who are not enthusiasts. The honest limitation of PGP in general is that it requires the other party to participate, and most clients will not, so in practice it covers correspondence with technically inclined counterparts rather than everyday client mail.

The feature that covers the everyday case is the password-protected message: you send to a recipient on any provider, they open it with a password shared through another channel. That is the mechanism that actually gets used when a bookkeeper needs to send something sensitive to a client who uses whatever their internet provider gave them.

Used properly it is genuinely useful and used carelessly it is theatre. Sending the password in a follow-up email to the same address defeats the entire exercise, which is a mistake made often enough to be worth stating. Ring them, or text it.

Beyond that, the security posture is the ordinary modern set: two-factor authentication, no content scanning, no advertising profile, and a jurisdiction - the Netherlands, under EU law - that determines what happens if anybody ever asks for your data. For a professional answering a client's question about where their information is held, jurisdiction is the part of the answer that carries weight.

Clients, mobile and daily workflow

The webmail interface is clean and the entry rates ease highly. This is a mailbox, not an application platform, and the interface reflects that - it does the things a mailbox does without a sidebar full of adjacent products.

The gap the entry names is mobile: there are no dedicated apps, so mobile use means setting up IMAP in whichever mail client you prefer. In practice this is a fifteen-minute configuration and then invisible, because a standards-based mailbox works in every serious mail client on every platform. Whether it is a drawback depends entirely on whether you wanted an app with the provider's name on it.

There is an argument that IMAP is the better arrangement. A mailbox that works over open standards is a mailbox you can point any client at, including a different client next year, and that portability is the practical form of not being locked in.

What is genuinely absent is the surrounding suite. No calendar to share with a team, no document storage, no meeting tool. For a solo professional whose calendar lives on their phone that is a non-issue. For a three-person business that shares a calendar daily, it means keeping something else, and the entry is right to call that the reason not to buy.

Migration and getting data out

The entry describes migration honestly: moving years of Gmail history and contacts takes a real afternoon. That is the accurate estimate and the reason to schedule it rather than attempt it opportunistically.

The order that works is the same for any mailbox move. Register or point your domain first if you are using one. Set up forwarding from the old address so nothing is lost during the transition. Import history. Then change the address on the accounts that matter, which is the genuinely long part - banks, registries, clients, platforms - and expect to be discovering stragglers for months. Keep the old mailbox alive and forwarding for a year; the cost of doing so is small and the cost of not doing so is a missed renewal notice.

A useful thing to do at the same time, since you are already going account by account: give each service its own alias as you re-register it. The migration is the one moment when the effort is nearly free, because you are visiting every account anyway.

On exit rights, which matter more for a paid mailbox than people think: IMAP access means your mail is downloadable to any client, and standard formats mean it is portable. A mailbox you cannot leave is a mailbox you do not own, and this one you can leave. What does not transfer is the alias structure - those addresses belong to the service, and if you leave, everything pointed at them stops arriving. That is the lock-in to be aware of, and it grows the longer you use the system.

Support and the business behind it

Support is email-based and the entry notes it can be slow at peak times. For a mailbox that is a moderate risk rather than a serious one, since the common problems - client configuration, alias behaviour, filter rules - are documented and self-serviceable, and mail delivery itself either works or is visibly broken.

The provider is StartMail B.V. in the Netherlands, associated with the Startpage search engine, and the business model is the part worth evaluating rather than the feature list. A subscription-funded mailbox has an alignment that an advertising-funded one cannot have, and that alignment is the entire product. Everything else - aliases, PGP, custom domains - is available in some form elsewhere.

The corollary is that you should evaluate it as a supplier relationship rather than a purchase. A mailbox is infrastructure you are betting will still be there in five years, and the questions that matter are whether the company is funded by its customers, subject to a legal regime you find acceptable, and clear about what it does with your data. Those are answerable questions and they are the right ones.

Limits and dealbreakers

The reasons not to buy this are mostly reasons of scope, and one of them is decisive for a lot of businesses.

• It is not an office suite. No calendar, no document storage, no shared drive. If your business depends on Google Workspace or Microsoft 365 integration, this is an addition to your costs rather than a replacement, and that is the entry's own stated reason to skip it.
• No free plan. The subscription is the model. If you want mail that nobody mines, somebody has to pay for it, and it is you.
• No dedicated mobile apps. IMAP in the client of your choice, which works fine and is a one-time setup, but it is not the experience of installing an app.
• Migration is an afternoon. Plus months of finding accounts still pointed at the old address. Plan it into a quiet week.
• Email-based support, sometimes slow. Acceptable for a mailbox, worth knowing before an urgent configuration problem.
• Alias lock-in grows over time. Every service registered to an alias is a service that stops reaching you if you leave the provider. Worth noting precisely because the feature is so useful.

Alternatives and adjacent tools

There is no second private-email provider in this catalogue, so the honest comparison is against what you are using now, and it has two parts. Against Gmail or Outlook on a free tier, the trade is clear and the entry states it: you gain confidentiality, alias hygiene and a provider whose incentives match yours, and you lose a bundled suite and pay money. Against a paid Workspace or 365 subscription, the comparison is narrower than it looks, because those are suites and this is a mailbox.

The adjacent tools here address the parts a private mailbox does not touch. Jotform is the one to pair it with if clients send you sensitive information through forms, since a confidential mailbox does not help if the intake channel is careless. Foxit PDF Editor covers the documents that travel through that mailbox - a password-protected message carrying an unprotected attachment is a common gap.

And if the reason you are reading this is client confidentiality as a professional obligation rather than a preference, the rest of that obligation is in your books and your payment records, not only your inbox: FreshBooks and QuickBooks Online hold client data too, and deserve the same question about where it lives.

Frequently asked questions

Can I use my own domain? Yes, on the plan that supports it - confirm which tier that is on the current pricing page. Custom domains are what make this a business mailbox rather than a privacy experiment, since client-facing addresses then look like any other professional address.

What are aliases actually for? Giving every service its own disposable address. Two payoffs: you learn exactly who leaked your address when spam arrives at a specific alias, and you close the channel by deleting it rather than trusting an unsubscribe link. The main business address stays out of the churn entirely.

Does the encryption work with clients who use Gmail? PGP requires the other side to participate, so mostly not. The password-protected message feature covers that case - the recipient can be on any provider. Send the password through a different channel than the message.

Will it replace Google Workspace? No, and the entry says so plainly. There is no calendar, document storage or shared drive. It replaces the mailbox only, which is why businesses that depend on the suite should expect to pay for both.

Is there a mobile app? No dedicated apps. You set it up over IMAP in the mail client you prefer, which works on every platform and takes a few minutes once.

How hard is moving from Gmail? An afternoon for the history and contacts, then a long tail of updating accounts that still point at the old address. Keep the old mailbox forwarding for a year, and take the opportunity to give each service its own alias while you are visiting all of them anyway.

Bottom line

StartMail does one job with conviction, and the job is worth doing. A mailbox funded by its user rather than by advertising, in a jurisdiction with real privacy law, with unlimited disposable aliases that make spam a thing you close rather than a folder you manage. For a professional holding other people's sensitive information, that is a straightforward and inexpensive improvement to a genuine obligation.

The alias system is the feature to buy it for. Confidentiality is the reason it exists, but aliases are what you will notice daily, and the discipline of giving every service its own address is the one habit that keeps a business address usable for a decade.

Skip it if your business runs on Google Workspace or Microsoft 365 integration, because this replaces the mailbox and not the suite, and paying for both to gain one is a poor trade. Otherwise: pair it with your own domain, plan the migration into a quiet week, and check the current pricing before you commit.

Best for

Freelancers and small-business owners who want client correspondence off Big Tech's servers - and a burner alias for every service that demands an email address.