Proton Mail
CFS 1 — Simple
The most accessible encrypted email service; works like normal email but your provider cannot read your messages. Cancel guide →
Services We Trust
Cancel Freely exists because too many services make it hard to leave. This page is about the opposite: services that make it easy to stay because they earn your trust, and easy to leave because they respect your right to go.
These are services that align with the principles Cancel Freely is built on. Most are end-to-end encrypted. Most are open source. All of them let you cancel without calling a retention team or mailing a certified letter. We use many of them ourselves.
We have no financial relationship with any service listed here. We receive no referral fees, no affiliate commissions, and no sponsored placements. If any of these services makes it hard to cancel in the future, we will document that too.
What is not on this page
- No affiliate links. None. Not even disclosed ones.
- No services we haven't evaluated. If we don't know the cancel flow, the privacy architecture, or the experience, it's not listed.
- No services with a CFS of 3 or above. If a service makes it hard to cancel, it doesn't belong here — regardless of how excellent it is for privacy.
Tuta
CFS 1 — Simple
Encrypts more than any other email provider, including subject lines and calendar notifications; accepts the tradeoff of less convenience for less exposure.
VPN
Proton VPN
CFS 1 — Simple
One of the few VPNs with a genuinely free tier, audited no-logs policy, and open source code.
Mullvad VPN
CFS 1 — Simple
The most anonymous VPN available. You get a random account number. You add time to it. When you stop paying, the account expires. There is no email, no password, no identity. There is no account to cancel.
Cloud Storage
Proton Drive
CFS 1 — Simple
Encrypted cloud storage from the same team that built Proton Mail; your files are encrypted before they leave your device.
Cryptomator
Not a subscription
Your files are encrypted on your device before they touch the cloud. Your cloud provider sees encrypted blobs. Cryptomator never sees anything — it runs locally.
Browser
Brave
Free — no subscription
The privacy you get by default in Brave requires multiple extensions and settings changes in Chrome. Brave starts where Chrome needs to be configured to get to.
DuckDuckGo Browser
CFS 1 — Simple
On mobile, the simplest path to a private browser; one tap clears everything.
Search
Brave Search
Free — no subscription
One of the only search engines with its own independent index that does not track your searches or build a profile of your interests.
DuckDuckGo
Free — no subscription
The original private search engine; well-established, widely trusted, and a sensible default for anyone leaving Google Search.
Password Manager
Proton Pass
CFS 1 — Simple
A fully encrypted password manager with a generous free tier and email alias generation, from a company with a long track record in privacy.
Bitwarden
CFS 1 — Simple
Open source from client to server, independently audited, and the free tier has no meaningful limitations. Can be self-hosted if you want to control the server as well as the client.
Messaging
Signal
Free — no subscription
The gold standard for encrypted messaging. The Signal Protocol is so good that WhatsApp and Google Messages adopted it — but Signal is the implementation that doesn't monetize your metadata.
Office & Documents
Proton Docs
CFS 1 — Simple
Encrypted document editing within the Proton ecosystem; if you're already using Proton Mail and Drive, the natural choice.
CryptPad
CFS 1 — Simple
The encrypted alternative to Google Docs that supports real-time collaboration. Documents are encrypted before reaching the server. The server operator cannot read your documents. Open source, run by a nonprofit.
DNS
Cloudflare DNS (1.1.1.1)
Free — no subscription
A massive improvement over ISP defaults, which often log and sell your browsing data.
⚠ Tradeoff: Cloudflare handles a significant percentage of global internet traffic. Using their DNS means they see your query patterns even if they don't log them. For most people this is a reasonable tradeoff. For more separation, see NextDNS or Quad9 below.
NextDNS
CFS 1 — Simple
Gives you the control that Cloudflare doesn't. You decide what gets blocked, what gets logged, and how long logs are retained. If you want DNS-level ad blocking without running your own Pi-hole, this is the answer.
Quad9
Free — no subscription
A nonprofit DNS resolver that blocks malicious domains and does not log your queries. Swiss jurisdiction, funded by donations, no commercial interest in your data. The most privacy-aligned DNS option for people who want to trust the architecture, not the company.
Domain Registration
INWX
CFS 1 — Simple
Most registrars (GoDaddy, Namecheap) monetize your relationship with aggressive upselling, auto-renewal traps, and transfer friction. INWX is transparent, clean, and operates under German privacy law.
Njalla
CFS 1 — Simple
The most anonymous way to register a domain. Your name appears nowhere in WHOIS records.
⚠ Tradeoff: You don't technically own the domain — Njalla does, and you have a usage agreement. For activists, journalists, and privacy-critical projects, this may be worth it. For business domains, standard registration with WHOIS privacy (which INWX offers) may be more appropriate.
This page was last updated April 2026. Services and their privacy practices change. If you believe a service listed here has changed its practices in a way that conflicts with the principles above, let us know →
We are not affiliated with any service on this page. We receive no compensation for these listings. This is what we use. Your needs may differ.
Last updated: April 2026