# Micro.blog privacy rating

Paid blog hosting service and social network for short and long posts, with custom domains and cross-posting to Mastodon, Bluesky and other networks over ActivityPub.

## Summary

Micro.blog scores 34 out of 100 (grade F) on the blogging criteria. It meets 2 of 8 criteria: no ads or data sales and TLS configuration. It partly meets open source. It does not meet no trackers or telemetry, independent audit, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D.

- Website: https://micro.blog
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, macOS, iOS, Android
- Home page trackers: none found
- Category: [Blogging](https://privacyratings.com/blogging/)
- Grade: F (34/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | The macOS and iOS apps are MIT-licensed, but the Micro.blog service is closed source. | https://github.com/microdotblog/microblog-mac/blob/master/LICENSE |
| No trackers or telemetry | No | The Android app contains Google Firebase Analytics. The website loads no third-party trackers. | https://reports.exodus-privacy.eu.org/en/reports/blog.micro.android/latest/ |
| No ads or data sales | Yes | Funded by subscriptions with no ads, and the privacy policy states data is never sold. | https://help.micro.blog/t/privacy-policy/114 |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=micro.blog&hideResults=on |
| Security headers | No | Grade D (30/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=micro.blog |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/blogging/micro-blog/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/blogging/micro-blog.md