# Vanadium privacy rating

Hardened Chromium-based browser and system WebView from GrapheneOS, with JIT disabled by default, built-in content filtering and remote services removed. Only available on GrapheneOS.

## Summary

Vanadium scores 90 out of 100 (grade A) on the browsers criteria. It meets 7 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, blocks trackers by default, fingerprinting protection, no calls to big-tech services and timely security updates. It does not meet independent audit. It is based in Canada: Five Eyes member.

- Website: https://grapheneos.org/features#vanadium
- Source code: https://github.com/GrapheneOS/Vanadium
- Jurisdiction: Canada. Five Eyes member.
- Platforms: Android
- Home page trackers: none found
- Category: [Browsers](https://privacyratings.com/browsers/)
- Also rated: [GrapheneOS](https://privacyratings.com/mobile-operating-systems/grapheneos/) (Mobile operating systems)
- Grade: A (90/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Patches are GPL-2.0, on top of the BSD-licensed Chromium code. | https://github.com/GrapheneOS/Vanadium/blob/main/LICENSE |
| No trackers or telemetry | Yes | Nearly all remote services are disabled or removed, and the browser only connects to GrapheneOS servers by default. | https://grapheneos.org/features#vanadium |
| No ads or data sales | Yes | Funded by donations to the non-profit GrapheneOS Foundation. No ads. | https://grapheneos.org/donate |
| Independent audit | No | No independent audit is published. |  |
| Blocks trackers by default | Yes | Content filtering with EasyList and EasyPrivacy is on by default, and third-party cookies are blocked. | https://grapheneos.org/features#vanadium |
| Fingerprinting protection | Yes | Standardizes the user agent, client hints and battery status by default, and aims for identical configuration across users. | https://grapheneos.org/features#vanadium |
| No calls to big-tech services | Yes | Only connects to GrapheneOS servers by default, for component updates and optional DNS-over-HTTPS checks. | https://grapheneos.org/features#vanadium |
| Timely security updates | Yes | New Chromium releases are usually tagged the same day or within a few days, and the GrapheneOS app repository installs updates automatically. | https://github.com/GrapheneOS/Vanadium/tags |

Source: https://privacyratings.com/browsers/vanadium/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/browsers/vanadium.md