# Movim privacy rating

Self-hostable web client for XMPP that combines chat, group chat, video calls, personal blogs and communities, with public instances available.

## Summary

Movim scores 63 out of 100 (grade C) on the blogging criteria. It meets 4 of 8 criteria: open source, no trackers or telemetry, no ads or data sales and TLS configuration. It does not meet independent audit, transparency report, tells users about requests and security headers. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D.

- Website: https://movim.eu
- Source code: https://github.com/movim/movim
- License: AGPL-3.0
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Home page trackers: Google Fonts (not scored)
- Category: [Blogging](https://privacyratings.com/blogging/)
- Grade: C (63/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | AGPL-3.0. | https://github.com/movim/movim/blob/master/COPYING.txt |
| No trackers or telemetry | Yes | No telemetry or analytics in the source code, and the project website loads no third-party trackers. | https://github.com/movim/movim |
| No ads or data sales | Yes | Funded by donations, sponsors and grants, with no ads. | https://movim.eu |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=movim.eu&hideResults=on |
| Security headers | No | Grade D (30/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=movim.eu |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/blogging/movim/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/blogging/movim.md