Attributes
What a service's score is built from. The bot establishes an attribute by quoting the clause that says so; a moderator can assign one by hand.
What it asks for (9)
The service can be used without registering. No identifier is tied to usage.
Privacy +10 · Transparency 0 · 10 services
An email address is mandatory to register or to use core features.
Privacy -4 · Transparency 0 · 4 services
A phone number is mandatory to register, verify, or recover an account.
Privacy -9 · Transparency 0 · 1 service
A government-issued identity document is required for registration or for key features.
Privacy -14 · Transparency 0 · 2 services
Only identity-bearing payment methods are accepted, so the account carries a real name.
Privacy -6 · Transparency 0 · no services
Cash, vouchers, Monero or an equivalent payment method that carries no identity is accepted.
Privacy +7 · Transparency 0 · 21 services
The service collects GPS-level or equivalently precise location data.
Privacy -8 · Transparency 0 · no services
The service uploads or reads the user's contact list or address book.
Privacy -8 · Transparency 0 · 1 service
The policy names the specific data it collects and states it collects nothing beyond what a named purpose needs.
Privacy +5 · Transparency +2 · 10 services
What watches you (7)
The policy states no third-party analytics, advertising or tracking code is loaded.
Privacy +7 · Transparency 0 · 3 services
Usage is measured by a third-party analytics provider that receives user data.
Privacy -5 · Transparency 0 · 9 services
Advertising or marketing trackers are embedded, so ad networks observe usage.
Privacy -9 · Transparency 0 · 5 services
The service derives a device or browser fingerprint to recognise users.
Privacy -10 · Transparency 0 · 1 service
User activity is correlated across other sites, apps or services.
Privacy -8 · Transparency 0 · 2 services
Usage is measured, but on infrastructure the service runs itself, with no third party receiving the data.
Privacy -1 · Transparency +1 · 1 service
The policy states it honours Do Not Track or Global Privacy Control signals.
Privacy +3 · Transparency +1 · no services
Who else gets the data (8)
The policy permits selling, renting or licensing personal data to other parties.
Privacy -16 · Transparency 0 · no services
The policy commits to handing user data to authorities on legal request.
Privacy -3 · Transparency 0 · 11 services
The policy reserves the right to disclose user data without a warrant, subpoena or court order.
Privacy -10 · Transparency 0 · 7 services
The policy states plainly that personal data is never sold or rented.
Privacy +5 · Transparency 0 · 10 services
Every third party that processes user data is named in a published list.
Privacy +2 · Transparency +7 · 3 services
Data is transferred to a country other than the one the service operates from.
Privacy -3 · Transparency 0 · 8 services
What is kept (6)
The policy states no logs of user activity are kept.
Privacy +9 · Transparency 0 · 2 services
IP addresses are recorded and associated with usage.
Privacy -7 · Transparency 0 · 7 services
The policy sets no end to how long personal data is kept, or keeps it 'as long as necessary' without a bound.
Privacy -9 · Transparency 0 · 9 services
The policy names a concrete period after which data is deleted.
Privacy +5 · Transparency +4 · 4 services
Personal data is retained after the user deletes their account, beyond a stated short grace period.
Privacy -6 · Transparency 0 · 3 services
An outside auditor examined the infrastructure and published a report on the no-logs claim.
Privacy +4 · Transparency +10 · no services
What protects it (8)
User content is end-to-end encrypted by default, so the service cannot read it.
Privacy +12 · Transparency 0 · 3 services
End-to-end encryption exists but is off unless the user turns it on.
Privacy -2 · Transparency 0 · no services
The service holds the keys to user content and can read it.
Privacy -8 · Transparency 0 · 1 service
Stored data is encrypted at rest under keys the service holds.
Privacy +3 · Transparency +1 · no services
The client software is published under a licence that lets anyone inspect and build it.
Privacy +4 · Transparency +8 · 2 services
An outside firm audited the service and the report is public.
Privacy +3 · Transparency +10 · 1 service
The service has disclosed a past breach. The disclosure is worth something; the breach is not.
Privacy -2 · Transparency +5 · no services
Accounts cannot be protected with a second factor.
Privacy -3 · Transparency 0 · no services
What you control (6)
An account and its data can be deleted from within the product, without contacting support.
Privacy +6 · Transparency +2 · 2 services
Deleting an account means emailing support or filing a form, with no in-product route.
Privacy -3 · Transparency 0 · 7 services
Users can export the personal data the service holds on them.
Privacy +3 · Transparency +2 · 3 services
Optional collection, such as analytics or marketing, can be refused separately from using the service.
Privacy +4 · Transparency +2 · 5 services
Using the service at all requires accepting optional collection such as advertising or profiling.
Privacy -6 · Transparency 0 · 3 services
The policy may change at any time with no notice to users, and continued use counts as acceptance.
Privacy -3 · Transparency -2 · 12 services
Where it stands (8)
Users are granted access, correction, deletion and portability rights under GDPR or an equivalent regime.
Privacy +4 · Transparency +5 · 8 services
Access, deletion or opt-out rights are offered only to users in certain regions.
Privacy -4 · Transparency -2 · 2 services
The service publishes a recurring report of the data requests it received and how it answered them.
Privacy +2 · Transparency +11 · no services
A warrant canary is published and updated.
Privacy +3 · Transparency +7 · 1 service
The documents never say which country's law governs the service or where it is established.
Privacy -3 · Transparency -10 · 2 services
The service is established in a Five/Nine/Fourteen Eyes country, which shapes what it can be compelled to hand over.
Privacy -3 · Transparency 0 · 8 services
The service is reachable over Tor, or publishes an onion address, without penalising those users.
Privacy +5 · Transparency +2 · 10 services
Access over Tor, a VPN or a proxy is blocked or degraded.
Privacy -5 · Transparency 0 · 4 services
Your money (8)
The documents state outright that the service will not ask anyone to prove who they are.
Privacy +8 · Transparency +2 · 4 services
Ordinary use needs no ID, but a clause lets the service demand it from a user whenever it chooses.
Privacy -12 · Transparency 0 · 7 services
Getting money back can depend on proving who you are.
Privacy -6 · Transparency 0 · 4 services
The service may hold or withhold a user's money pending a review, a check or its own decision.
Privacy -8 · Transparency 0 · 9 services
Payments or deposits are run through automated risk scoring or chain analysis.
Privacy -5 · Transparency +1 · 7 services
The service states it does not take custody of user money or keys at any point.
Privacy +6 · Transparency +1 · 3 services
User money or keys sit with the service, so access depends on the service.
Privacy -3 · Transparency 0 · 9 services
A clause lets the service end an account and keep what it holds.
Privacy -9 · Transparency -2 · 7 services