{
  "slug": "kraken",
  "category": "crypto-exchanges",
  "name": "Kraken",
  "description": "Centralized cryptocurrency exchange from Payward for buying, selling and trading crypto, with custodial accounts that require identity verification.",
  "website": "https://www.kraken.com",
  "license": null,
  "platforms": [
    "android",
    "ios",
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 10,
  "coverage": 100,
  "summary": "Kraken scores 10 out of 100 (grade F) on the crypto exchanges criteria. It partly meets no ads or data sales. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/crypto-exchanges/kraken/",
  "markdown": "https://privacyratings.com/crypto-exchanges/kraken/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/com.kraken.invest.app/latest/",
      "note": "The Exodus report finds AppsFlyer, FullStory, Google Firebase Analytics and Sentry in the Android app."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.kraken.com/legal/privacy",
      "note": "Funded by trading fees. The privacy policy says data is not sold for money, but identifiers are shared with advertising partners and ad networks."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "OneTrust",
        "host": "cdn.cookielaw.org",
        "effect": "none"
      }
    ],
    "tested_at": "2026-10-01T06:59:53.285Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}