Gmail vs Fastmail: Free With Ads or Paid Without
Neither keeps your mail from the provider. What differs is who pays for the service, which country answers legal process, and what the money buys.
Published October 6, 2026· By Juan Martinez
Gmail and Fastmail are both conventional email services. Each company manages the keys to the mail it stores, each processes message content on its own servers (Google’s privacy policy lists email among the content it collects, and Fastmail’s documentation says server-side processing powers its search and spam filtering), and neither builds end-to-end encryption into its apps. What separates them is who pays. Gmail costs nothing and is run by Google LLC of Mountain View, California, a company funded by advertising. Fastmail costs US$5 a month and is run by Fastmail Pty Ltd of Melbourne, which describes itself as independent and employee-owned. Most of the differences that matter follow from that: what each company says it will and will not do with your data, which country’s legal process reaches the mailbox, and whether you can put your own domain on it.
| Gmail | Fastmail | |
|---|---|---|
| Rating | 5.4 | 6.8 |
| Jurisdiction | United States | Australia |
| Price (individual) | Free, 15 GB shared with Drive and Photos; custom domain only via Workspace at US$7.00/user/mo after the first year | US$5/mo (60 GB total; same rate on monthly or annual billing) |
| Free Tier | limited | none |
| Zero-Access Encryption | ❌ | ❌ |
| Custom Domain | ❌ | ✅ |
| Aliases | limited | unlimited |
| Platforms | Android, iOS | Windows, macOS, Linux, Android, iOS |
| Est. | 2004 | 1999 |
Want to compare every field side by side? Open the full comparison table.
What the two have in common
Start with the part that does not decide anything. Google’s Workspace encryption documentation describes default encryption at rest with keys managed inside Google’s own infrastructure. The paper does not name personal accounts, but Google offers none that puts the keys elsewhere. Fastmail’s Data Protection Agreement states that all encryption keys are retained solely under Fastmail’s control. Neither encrypts stored mail so that the provider cannot reach it, and both services process mail on the server: Google’s privacy policy lists email among the content it collects, Fastmail states that server-side processing of unencrypted content powers search, spam filtering and previews, and Fastmail’s own security FAQ lists message previews among the features end-to-end encryption would cost.
Neither offers end-to-end encryption in its own apps. On a personal Gmail account there is no end-to-end encryption, Google’s help pages describe no PGP support, and Google limits S/MIME to work and school accounts and client-side encryption to specific Workspace editions. Confidential mode sets an expiry and blocks forwarding, but it is access control applied by Google’s servers, and Google’s page warns that recipients can still take screenshots. Fastmail’s position is a stated design choice: its security FAQ argues that end-to-end encryption in webmail adds little against a compromised server, which delivers the decryption code itself, and would cost server-side search, previews and spam analysis. Fastmail does support PGP and S/MIME through third-party clients with manual key management.
Neither service is open source. Fastmail’s service and client apps are proprietary, though it maintains Cyrus, the open-source mail server its infrastructure runs on, and designed the JMAP protocol. Google publishes no code for consumer Gmail. Neither has a named, dated, public independent audit: Fastmail’s agreement mentions external audits and penetration tests with no firm, date or report, alongside a public bug bounty running since 2014.
Recovery follows from the same key model. A forgotten password does not mean lost mail at either one. Google’s recovery relies on a recovery phone number or email, with no limit on attempts. Fastmail resets through a recovery email or phone and adds a 24-hour wait when the reset comes from an unrecognized device, browser or location.
If keeping message content away from the provider is the requirement, neither one meets it, and the case for providers that hold no keys is made in why not just use Gmail.
Who pays, and what that changes
Gmail is funded by advertising. Free accounts can show ads, and the Android app’s Google Play listing says it contains ads. What feeds those ads is narrower than many people assume. Google states that consumer Gmail content has not been used or scanned for ads personalization since a change announced on 23 June 2017, and its help page says “We will not scan or read your Gmail messages to show you ads.” The ads draw on activity while signed in to Google. Google’s privacy policy lists “email you write and receive” among the content it collects, says it does not personalize ads based on content from Drive, Gmail or Photos, and says it does use activity from other Google services for ad personalization. Google states that it does not sell personal information.
So Gmail content is collected and processed, and Google’s stated limit covers one use of it. Smart features are another: with them on, Google can use Gmail, Chat and Meet data for features such as Smart Compose and Smart Reply. Switching them off stops that use going forward, though Google’s page says “the learnings developed from this improvement process may persist.” Google’s documentation does not say whether Gmail content trains generative models.
Fastmail is paid for by its customers, and its stated limits are wider. Its privacy policy says it does not use profiling for personalized content or ads, does not sell personal information and does not use customer data to train AI; any optional AI connection routes through Anthropic’s API with model training switched off. Its values page adds no ad sales, no third-party data sharing and no data mining. Remote images are proxied through Fastmail’s servers by default, so a tracking pixel does not learn your location or device.
Ownership sits behind both sets of promises. Google’s are policy statements from a company that funds Gmail through advertising. Fastmail has operated since 1999 and describes itself as independent and employee-owned, which leaves fewer outside owners whose incentives could change the terms. Neither structure is a technical guarantee, since both companies can still read the mail.
Jurisdiction and legal requests
Google LLC, the controller named in Google’s privacy policy, is in California, so Gmail answers to US law. Google’s transparency report covers every Google product together, not Gmail alone. For July to December 2025 it lists 304,915 requests covering 748,475 accounts, with some information disclosed in 84% of requests at the July 2025 data point. US national-security requests are reported separately, in ranges: in the same period, FISA content requests numbered 0 to 499 and affected 211,000 to 211,499 accounts. Google notes that such a request can include a demand for Gmail messages.
Fastmail is Australian, and its legal position is more specific than “outside the US.” Fastmail states that Australian Privacy Principle 6 forbids it from disclosing information directly to foreign authorities, so a foreign request has to come through Australian law-enforcement channels. A US-Australia CLOUD Act agreement signed in 2021 came into force in practice in January 2024, when Fastmail received its first requests under it. Fastmail says it responds only to warrants for specific user data. Its transparency report is itemized by year, by requesting authority and by data type: in 2025, 16 valid requests and 5 actioned, resolving to 2 subscriber-information disclosures and 3 of stored communications.
The two reports have different scopes. Google’s spans every Google product; Fastmail’s covers one mail service. Each is useful within its own scope, and setting the raw counts side by side mostly measures the size of the two companies.
Fastmail added a data-residency choice in August 2026. Until then all accounts lived in the US; now the primary copy can sit in the EU (Amsterdam) or the US (Philadelphia or St Louis), on hardware Fastmail owns. Fastmail states the limits itself: an EU account’s replica still sits in a US location, emergency backups for every account are stored in Philadelphia, system logs are consolidated in the US, and some metadata replicates to every site. Fastmail also runs a US entity, Fastmail US LLC, from Philadelphia. Choosing the EU region moves the primary copy and does not change which country’s law applies.
Addresses, apps and everyday use
Addressing is where the price shows most clearly. A personal Gmail account cannot use a custom domain. Aliases are limited to plus-addressing, where any name+label@gmail.com variant lands in the main inbox and reveals the real address to anyone who removes the suffix. “Send mail as” allows up to 99 additional addresses, though Google says “Send as” for addresses at other providers ends in January 2027. Fastmail allows up to 100 custom domains per account with catch-all addressing on each, and Masked Email generates a separate disposable address for every signup, with direct integration into 1Password and Bitwarden. One documented gap: Fastmail’s X-Resolved-To header can expose the real primary address when alias mail is forwarded as a raw attachment, and support’s position was that it cannot be stripped.
Fastmail has native apps for Windows, macOS, Linux, iOS and Android, all with offline access to mail, calendar and contacts. Gmail has no official desktop client; on a computer it means the web interface or a third-party client over IMAP, always on since January 2025. Its phone apps count 10B+ downloads on Android and a 4.7 rating from 2.4 million ratings on iOS.
Both filter spam on the server. Google states that Gmail stops more than 99.9% of spam, phishing and malware. Fastmail blocks known spam-sending infrastructure before a message is accepted, then scores accepted mail by content and adapts to each user’s Report spam and Not spam actions. Account protection is strong at both: Google supports passkeys and hardware security keys, and its Advanced Protection Program requires one to sign in; Fastmail supports U2F hardware keys and passkeys.
On AI, Gemini in Gmail gives every user summaries, Help Me Write and Suggested Replies, while inbox questions and Proofread require a Google AI Pro or Ultra subscription. Fastmail’s stated position covers training only: customer data is not used, and optional AI goes through Anthropic’s API with training off.
One Gmail-specific trap: Google’s inactive-account policy says it may delete an account and its data after at least two years without activity across Google, after sending notices. A Gmail address kept as a dormant backup needs an occasional sign-in.
Price
Gmail costs nothing. Every Google account gets up to 15 GB, shared across Gmail, Google Drive and Google Photos, so a photo backup and the mailbox draw on the same allowance. More storage comes through Google One plans (Lite at 30 GB, Basic at 100 GB, Google AI Pro at 5 TB); their US-dollar prices were not confirmed, so none are given here. The only route to a custom domain is Google Workspace: Business Starter costs US$4.90 per user per month for the first 12 months on annual billing, then US$7.00, with 30 GB per user.
Fastmail has no free tier, only a 30-day trial. Individual is US$5 a month, or US$60 a year with no annual discount, for 50 GB of mail, calendar and contacts plus 10 GB of files. Duo is US$8 a month for two inboxes, and Family US$11 a month for up to six, under US$2 per person when all six are used. Prices exclude tax.
For anyone who wants their own domain, the real comparison is US$7.00 a month per user for Gmail through Workspace after the first year against US$5 for one Fastmail account with up to 100 domains. For everyone else, free Gmail is paid for with ads and with activity that feeds Google’s ad personalization across its other products.
Which one fits
Gmail is covered on this site as the mailbox most people already have, not as a pick. It fits someone who wants a free address, strong protection against account takeover and widely used phone apps, and who accepts that an advertising company manages the keys, processes the mail for its own features and answers US legal process for it. The full Gmail review covers Advanced Protection and smart-feature controls.
Fastmail fits someone ready to pay to take advertising out of the arrangement: a person who wants their own domain, a disposable address per signup, native desktop apps, and a company whose stated limits rule out ad profiling, data sale and AI training. It does not fit anyone who needs stored mail kept out of the provider’s reach, or anyone who needs an EU-only data guarantee, which Fastmail says it cannot give. The full Fastmail review covers the transparency figures and data-residency limits.
The ratings are 5.4 for Gmail and 6.8 for Fastmail. Privacy & Trust decides it: Fastmail scores 6.5 against Gmail’s 1.0, a 5.5-point gap in a category weighted at 30%. Gmail leads on Price & Value by 2.5 points (8.5 against 6.0) and on Usability by 0.5 (8.5 against 8.0). Security is level at 6.5, and Fastmail leads on Features by 0.5 (7.0 against 6.5). Gmail’s leads narrow the gap without closing it. Neither service keeps your mail from its provider; the choice is between paying with money and paying with your activity.