# Code hosting privacy ratings

Places to host Git repositories.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Forgejo](https://privacyratings.com/code-hosting/forgejo/) | B (80/100) | Unknown | Self-hosted Git forge with issues, pull requests, package registries and CI through Forgejo Actions. A community fork of Gitea, with its domains held by the non-profit Codeberg e.V. |
| [Gogs](https://privacyratings.com/code-hosting/gogs/) | B (80/100) | Unknown | Lightweight self-hosted Git service written in Go, with a web interface for repositories, issues, pull requests and wikis. |
| [Radicle](https://privacyratings.com/code-hosting/radicle/) | B (80/100) | Unknown | Open source peer-to-peer code collaboration stack built on Git, where repositories, issues and patches are replicated between nodes and signed with cryptographic identities, with no central server. |
| [SourceHut](https://privacyratings.com/code-hosting/sourcehut/) | B (75/100) | Netherlands (Nine Eyes) | Git and Mercurial hosting with ticket tracking, mailing lists, wikis and a CI build service. Can be self-hosted, or used through the hosted instance at sr.ht. |
| [Codeberg](https://privacyratings.com/code-hosting/codeberg/) | C (66/100) | Germany (Fourteen Eyes) | Non-profit Git hosting run by Codeberg e.V. in Berlin on the open source Forgejo software, with issues, pull requests, CI and static page hosting. |
| [GitLab](https://privacyratings.com/code-hosting/gitlab/) | C (63/100) | United States (Five Eyes) | Git hosting with CI/CD, issue tracking and project management, offered as the hosted GitLab.com service or as software to self-host. |
| [GitHub](https://privacyratings.com/code-hosting/github/) | D (50/100) | United States (Five Eyes) | Git hosting service owned by Microsoft, with pull requests, issues, Actions CI/CD, package hosting, Pages static sites and Copilot AI features. |
| [Bitbucket](https://privacyratings.com/code-hosting/bitbucket/) | D (47/100) | Australia (Five Eyes) | Git hosting service from Atlassian with pull requests, Bitbucket Pipelines CI/CD and integration with Jira and other Atlassian products. |
| [Gitea](https://privacyratings.com/code-hosting/gitea/) | F (30/100) | United States (Five Eyes) | Lightweight self-hosted Git service written in Go, with issues, pull requests, packages and CI through Gitea Actions. Maintained with commercial backing from CommitGo. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?

Source: https://privacyratings.com/code-hosting/