# Bear Blog privacy rating

Minimal hosted blogging platform with small, fast pages, no third-party trackers and built-in first-party analytics.

## Summary

Bear Blog scores 59 out of 100 (grade D) on the blogging criteria. It meets 3 of 8 criteria: open source, no trackers or telemetry and no ads or data sales. It partly meets TLS configuration and security headers. It does not meet independent audit, transparency report and tells users about requests. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade B+.

- Website: https://bearblog.dev
- Source code: https://github.com/HermanMartinus/bearblog
- Home page trackers: none found
- Category: [Blogging](https://privacyratings.com/blogging/)
- Grade: D (59/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All code is public, including the code that runs bearblog.dev, under a custom source-available license that forbids running a competing hosted service and is not OSI-approved. | https://github.com/HermanMartinus/bearblog/blob/master/LICENSE.md |
| No trackers or telemetry | Yes | Built-in analytics are first-party with no third-party trackers, and Google Analytics is not supported. | https://docs.bearblog.dev/analytics/ |
| No ads or data sales | Yes | No ads, and the privacy policy states collected information is never shared with or sold to other organizations for commercial purposes. | https://docs.bearblog.dev/privacy-policy/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=bearblog.dev&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=bearblog.dev |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/blogging/bear-blog/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/blogging/bear-blog.md