{
  "slug": "bitly",
  "category": "url-shorteners",
  "name": "Bitly",
  "description": "Link management platform for creating short links, QR codes and landing pages, with click analytics and branded domains.",
  "website": "https://bitly.com",
  "license": null,
  "platforms": [
    "web",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 31,
  "coverage": 100,
  "summary": "Bitly scores 31 out of 100 (grade F) on the URL shorteners criteria. It meets 2 of 8 criteria: transparency report and TLS configuration. It partly meets independent audit. It does not meet open source, no trackers or telemetry, no ads or data sales, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade F.",
  "url": "https://privacyratings.com/url-shorteners/bitly/",
  "markdown": "https://privacyratings.com/url-shorteners/bitly/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://bitly.com/pages/privacy",
      "note": "The website loads Google Tag Manager and Optimizely, and the privacy policy describes tracking pixels and third-party analytics providers."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://bitly.com/pages/privacy",
      "note": "Link destination previews may include third-party advertising, and mobile advertising identifiers are collected."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://bitly.com/pages/trust",
      "note": "Bitly states it is SOC 2 Type 2 compliant, but the report is not public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://bitly.com/pages/transparency-report",
      "note": "Publishes a yearly report with counts of court orders, subpoenas and foreign government requests and how many were answered."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=bitly.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "no",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=bitly.com",
      "note": "Grade F (20/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "F",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "HubSpot",
        "host": "js-eu1.hs-scripts.com",
        "effect": "no"
      },
      {
        "name": "OneTrust",
        "host": "cdn.cookielaw.org",
        "effect": "none"
      },
      {
        "name": "Optimizely",
        "host": "cdn.optimizely.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T06:59:46.234Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}