# Pico privacy rating

Hosted services managed over SSH, including a blogging platform (Prose), static site hosting (Pages), pipes and tunnels. Accounts use SSH public keys instead of passwords or email.

## Summary

Pico scores 63 out of 100 (grade C) on the blogging criteria. It meets 4 of 8 criteria: open source, no trackers or telemetry, no ads or data sales and TLS configuration. It does not meet independent audit, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D.

- Website: https://pico.sh
- Source code: https://github.com/picosh/pico
- License: MIT
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [Blogging](https://privacyratings.com/blogging/)
- Grade: C (63/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT. | https://github.com/picosh/pico/blob/main/LICENSE |
| No trackers or telemetry | Yes | No browser-based tracking or cookies. Usage statistics are collected by first-party software and anonymized. | https://pico.sh/privacy |
| No ads or data sales | Yes | Funded by paid pico+ memberships. The privacy policy states user data is never shared with third parties. | https://pico.sh/plus |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=pico.sh&hideResults=on |
| Security headers | No | Grade D (30/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=pico.sh |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/blogging/pico/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/blogging/pico.md