# Codeberg privacy rating

Non-profit Git hosting run by Codeberg e.V. in Berlin on the open source Forgejo software, with issues, pull requests, CI and static page hosting.

## Summary

Codeberg scores 66 out of 100 (grade C) on the code hosting criteria. It meets 4 of 8 criteria: open source, no trackers or telemetry, no ads or data sales and TLS configuration. It partly meets security headers. It does not meet independent audit, transparency report and tells users about requests. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://codeberg.org
- Source code: https://codeberg.org/forgejo/forgejo
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Category: [Code hosting](https://privacyratings.com/code-hosting/)
- Grade: C (66/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-3.0. | https://codeberg.org/forgejo/forgejo/src/branch/forgejo/LICENSE |
| No trackers or telemetry | Yes | The privacy policy states Codeberg does not use cookies or other techniques for user-targeted analytics or advertising. | https://codeberg.org/codeberg/org/src/branch/main/PrivacyPolicy.md |
| No ads or data sales | Yes | Run by a non-profit association funded by donations and membership fees, with no ads. | https://docs.codeberg.org/improving-codeberg/donate/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=codeberg.org&hideResults=on |
| Security headers | Partial | Grade B (70/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=codeberg.org |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/code-hosting/codeberg/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/code-hosting/codeberg.md