# Turbopack privacy rating

Incremental bundler written in Rust and built into Next.js, used by the Next.js development server and production builds.

## Summary

Turbopack scores 40 out of 100 (grade D) on the bundlers and build tools criteria. It meets 1 of 4 criteria: open source. It partly meets no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://nextjs.org/docs/app/api-reference/turbopack
- Source code: https://github.com/vercel/next.js
- License: MIT
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux
- Home page trackers: none found
- Category: [Bundlers and build tools](https://privacyratings.com/build-tools/)
- Also rated: [Next.js](https://privacyratings.com/web-frameworks/next-js/) (Front-end and full-stack frameworks)
- Grade: D (40/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT, developed in the Next.js repository. | https://github.com/vercel/next.js/blob/canary/license.md |
| No trackers or telemetry | No | Next.js sends anonymous usage telemetry by default with an opt-out, and the Vercel privacy notice says its sites use cookies for analytics and targeted advertising. | https://vercel.com/legal/privacy-notice |
| No ads or data sales | Partial | Free software with no ads, but Vercel shares site data with advertising networks to promote its own services. | https://vercel.com/legal/privacy-notice |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/build-tools/turbopack/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/build-tools/turbopack.md