# Penpot privacy rating

An open source design and prototyping platform for teams, based on open web standards such as SVG, CSS and HTML, available as a hosted service or self-hosted.

## Summary

Penpot scores 50 out of 100 (grade D) on the creative tools criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in Spain: Fourteen Eyes member; EU member (GDPR).

- Website: https://penpot.app
- Source code: https://github.com/penpot/penpot
- License: MPL-2.0
- Jurisdiction: Spain. Fourteen Eyes member. EU member (GDPR).
- Platforms: Web
- Home page trackers: none found
- Category: [Creative tools](https://privacyratings.com/creative-tools/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MPL-2.0. | https://github.com/penpot/penpot/blob/develop/LICENSE |
| No trackers or telemetry | No | The website and hosted app use Google Analytics and PostHog analytics cookies. | https://penpot.app/cookie |
| No ads or data sales | Yes | Funded by paid plans and self-hosting support, with no ads. | https://penpot.app/pricing |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/creative-tools/penpot/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/creative-tools/penpot.md