# IceCat privacy rating

GNU's build of Firefox ESR containing only free software. Removes non-free components such as DRM and bundles LibreJS and JShelter to restrict JavaScript and fingerprinting.

## Summary

IceCat scores 83 out of 100 (grade B) on the browsers criteria. It meets 6 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, blocks trackers by default, fingerprinting protection and no calls to big-tech services. It partly meets timely security updates. It does not meet independent audit.

- Website: https://www.gnu.org/software/gnuzilla/
- Source code: https://cgit.git.savannah.gnu.org/cgit/gnuzilla.git
- Home page trackers: none found
- Category: [Browsers](https://privacyratings.com/browsers/)
- Also rated: [shred](https://privacyratings.com/data-erasers/shred/) (Data erasers), [GNU Emacs](https://privacyratings.com/code-editors/gnu-emacs/) (Code editors)
- Grade: B (83/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Build scripts under GPL-3.0; the browser code is MPL-2.0 from Firefox. | https://cgit.git.savannah.gnu.org/cgit/gnuzilla.git/tree/COPYING |
| No trackers or telemetry | Yes | Telemetry and health reports are disabled in the default settings. | https://cgit.git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/settings.js |
| No ads or data sales | Yes | GNU volunteer project with no ads or data sales. | https://www.gnu.org/software/gnuzilla/ |
| Independent audit | No | No independent audit is published. |  |
| Blocks trackers by default | Yes | Tracking protection is enabled for all windows by default. | https://cgit.git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/settings.js |
| Fingerprinting protection | Yes | Resist Fingerprinting is enabled by default, and JShelter is bundled. | https://cgit.git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/settings.js |
| No calls to big-tech services | Yes | Google Safe Browsing and its update URLs are disabled. | https://cgit.git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/settings.js |
| Timely security updates | Partial | Source updates follow Firefox ESR releases within days, but no official binaries are published, so updates come through GNU Guix or distribution packages. | https://www.gnu.org/software/gnuzilla/ |

Source: https://privacyratings.com/browsers/icecat/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/browsers/icecat.md