Gmail vs Outlook privacy: what their own policies say

Most comparisons of these two inboxes settle the privacy question in a paragraph, usually with a claim nobody checked. This one uses a single rule: every statement about Gmail comes from a Google page, and every statement about Outlook comes from a Microsoft page. All were read on October 11, 2026.

Gmail vs Outlook privacy: the short answer

Neither is private from the company that runs it. Google and Microsoft both store your mail in a form they can read, both show ads in free inboxes, and both hand over data under legal process. The real differences are narrower: where the ads go, what feeds them, and which settings are yours to change.

This comparison covers the free personal products, Gmail and Outlook.com (which includes Hotmail addresses). Work and school accounts follow different rules set by your employer's contract.

Gmail and Outlook.com side by side

Each row is explained, with its source, below.

Is Outlook more private than Gmail?

On the evidence in each company's own pages, no, and Gmail is not more private than Outlook either. The belief that Outlook is the private one usually rests on a single idea: Gmail reads your mail for ads and Outlook doesn't. Both halves of that need correcting.

Gmail. Google's Gmail privacy page says ads on personal accounts appear when you "open the promotions or social tabs," that they "are shown to you based on your online activity while you're signed into Google," and that "we do not process email content to serve ads" (Google). Google's privacy policy, effective October 1, 2026, repeats it: "We don't show you personalized ads based on your content from Drive, Gmail, or Photos."

Outlook. Microsoft's privacy statement says it "does not use what you say in email, human-to-human chat, video calls or voice mail, or your documents, photos, or other personal files stored on your device or cloud storage to target ads to you" (Microsoft). Microsoft's help page on Outlook ads adds a detail the comparisons leave out. "In some geographies," it says, users can opt in to more ad personalization, and then "Outlook may also use the email you receive to identify the brands and businesses you prefer and shop with." That applies to mail from commercial senders, such as receipts and newsletters. Microsoft says it does "not analyze the content of emails from your friends, family, or other individuals to personalize your ads" (Microsoft Support).

So by default, neither company uses the body of your email to choose ads. Both build ad profiles from everything else you do while signed in.

Where the ads appear, and who is behind them

In free Outlook, Microsoft says "ads appear alongside messages in your inbox," marked with an Ad label, and "Outlook on the web also includes a larger, visual display ad on the side of the screen."

Microsoft also describes the plumbing. When it shows an ad, "we pass an ID, such as a cookie or device ID, that represents you or your device to an advertising network," and it names two networks: "the Microsoft Audience Network and Meta Audience Network." It says it does not pass your name or email address, and that "the content of your emails is never shared."

Outlook's ads go away if you pay: Microsoft says you can "stop seeing ads in Outlook by purchasing a Microsoft 365 subscription." Google's ads page says that if you turn off ad personalization, "you may still see Gmail ads, but they will not be based on personal data Google has associated with your Google Account" (Google).

What each company does with the content of your mail

Not using mail for ads is different from not processing it. Both companies say they process it.

Google's privacy policy: "We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive." And: "We use automated systems that analyze your content to provide you with things like tailored search results, personalized ads, or other features tailored to how you use our services." In Gmail that processing powers sorting, Smart Compose, summary cards and Gemini. Google's smart features page lists two settings that control it, and notes they start switched off in the European Economic Area, Japan, Switzerland and the United Kingdom. What Google has said about Gemini and training is covered in does Google's AI read your Gmail?

Microsoft's privacy statement: "Our processing of personal data involves both automated and manual (human) methods, which often work together." On AI, the same statement says "we may use your data to develop, train, and fine-tune our AI models, including large language models (LLMs)." Its Copilot privacy FAQ narrows that: "We do not train AI models on" a list that includes "personal account data like your Microsoft account profile data or email contents."

The plain reading of both: software at each company reads every message to run the service, and the commitments are about purpose, not access.

Who else can get your email?

Anyone with valid legal process served on the provider.

Google's policy says it will share personal information when it has "a good-faith belief that disclosure of the information is reasonably necessary to" respond to "any applicable law, regulation, legal process, or enforceable governmental request." Its Transparency Report data for July to December 2025 shows more than 300,000 government requests for user information worldwide. In the United States alone, that included 22,060 search warrants, the kind of order used to obtain content, and Google produced some data for 88 percent of them.

Microsoft's privacy statement says it will "retain, access, transfer, disclose, and preserve personal data, including your content (like the content of your emails in Outlook.com or files in OneDrive), when we have a good faith belief that it is necessary" to comply with the law, protect customers, secure its products, or protect its own rights and property. Its government requests report for July to December 2025 lists 27,412 law enforcement requests for consumer data. Content was disclosed for 5.14 percent, non-content data such as account details for 61.30 percent, 20.60 percent were rejected, and 12.96 percent found no data.

The totals are not a score. Google's figure covers every Google service, from Search to Android to YouTube, and Microsoft's covers all its consumer services. What the two reports share is the important part: both companies receive requests in the tens or hundreds of thousands, and both can produce readable email when the paperwork is valid.

Which is more secure, Gmail or Outlook?

Security and privacy are separate questions. Security is about keeping strangers out of your account. Privacy is about what the provider itself can see.

Both encrypt mail in transit with TLS. Google says "all Gmail messages use TLS automatically." Microsoft describes Outlook.com's default as "opportunistic Transport Layer Security (TLS)," which means it is used when the other mail server supports it. Both store your mail under keys the company controls. Google's wording is "data is encrypted in transit and at rest," which describes where encryption is applied, not who can undo it.

Neither offers end-to-end encryption on a free personal account. Google lists S/MIME and client-side encryption as available for "work or school Gmail accounts," and its admin documentation limits client-side encryption to certain Workspace editions. Microsoft's Encrypt option requires "a Microsoft 365 Family or Microsoft 365 Personal subscription," and Microsoft says the message "stays encrypted and doesn't leave Microsoft 365" (Microsoft Support).

A five-minute privacy check for each account

The table tells you the policy. These settings tell you what applies to you.

If you use Gmail

1. Open My Ad Center (myadcenter.google.com) and turn off personalized ads, or prune the topics Google has attached to you.
2. In Gmail settings, on the General tab, find "Smart features" and decide whether you want Gmail content used for them. Then open the Workspace smart features settings and review both toggles.
3. In your Google Account, open Security, then your connections to third-party apps and services. Remove anything with Gmail access that you no longer use.

If you use Outlook.com

1. In Outlook.com or the new Outlook for Windows, go to Settings, then General, then Advertising Preferences. On the phone apps it is Settings, then Privacy Settings, then Advertising Preferences. This is where the optional email-based ad personalization lives, if it is offered where you are.
2. Open the Microsoft privacy dashboard (account.microsoft.com/privacy) and review the personalized ads setting and the activity data stored against your account.
3. If you sign in to Copilot with the same Microsoft account, open its privacy settings and choose whether your conversations are used for model training.

A fuller walkthrough of the Gmail side, including the tests that show who holds the keys, is in is Gmail private?

If you want an inbox neither company can read

Changing settings reduces what gets used. It doesn't change who can open the mailbox. That takes a provider built so the company running it has no usable key.

That is the design of Secria Mail. Your keys are created on your device and only ever reach our servers encrypted, so every message in your mailbox is sealed with your keys. There are no ads on any plan. Tracking pixels are removed automatically and senders never see your IP address. Every plan, including the free one, uses post-quantum ML-KEM-1024 with X25519, and you can bring your old mail along as a Google Takeout MBOX file or an Outlook PST file. Plans and prices are here.

Frequently asked questions

Does Outlook scan emails for ads? Not by default. Microsoft says it does not use what you say in emails to target ads. In some regions it offers an opt-in that lets Outlook use email from commercial senders, such as stores and newsletters, to personalize ads. Check Advertising Preferences in Outlook's settings to see what you have chosen.

Does Gmail scan emails for ads? Google says "we do not process email content to serve ads." Gmail ads are based on your activity elsewhere while signed in to Google. Gmail does process email content for other purposes, including spam filtering and smart features.

Is Outlook safer than Gmail? Against outside attackers, both offer two-step verification and passkeys, and how safe your account is depends mostly on whether you turn those on. On privacy from the provider, neither personal product encrypts mail end to end, so both companies can access stored messages.

Do Gmail and Outlook sell my data? Google's Gmail privacy page says "we never sell your personal information." Microsoft says advertisers do "not get access to any of your personal Outlook information." Both companies still use data about you to target the ads they sell.

Can I move my email out of Gmail or Outlook? Yes. Google offers Download Your Data, which exports mail as an MBOX file. Microsoft's privacy statement says you can download your Outlook.com email from your Privacy and data settings. Both files can be imported into another mail service.

Gmail and Outlook.com differ in where they put the ads and how the settings are labeled. On the question that decides privacy, who can read the mail, their own documents give the same answer.