# Developer tools privacy ratings

Tools for developers that keep data local.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [gitGost](https://privacyratings.com/developer-tools/gitgost/) | B (80/100) | Unknown | Relay for contributing to Git repositories anonymously: add it as a Git remote and it opens a pull request from a shared bot account with author name, email and commit metadata removed. |
| [Yaak](https://privacyratings.com/developer-tools/yaak/) | C (65/100) | Unknown | Offline-first desktop API client for REST, GraphQL, gRPC, WebSocket and server-sent events, storing data locally with optional Git sync. Free for personal use, with a license required for commercial use. |
| [DevToys](https://privacyratings.com/developer-tools/devtoys/) | D (50/100) | Unknown | Offline desktop toolbox for developers with utilities for JSON, YAML, hashes, JWTs, Base64, text comparison and more, so data does not need to be pasted into online tools. |
| [Insomnia](https://privacyratings.com/developer-tools/insomnia/) | D (45/100) | United States (Five Eyes) | API client from Kong for REST, GraphQL, gRPC and WebSocket requests, with API design and testing tools. Data can be stored locally, in Git, or synced to Kong's cloud. |
| [Hoppscotch](https://privacyratings.com/developer-tools/hoppscotch/) | D (40/100) | Unknown | API development tool for REST, GraphQL, WebSocket and other requests, available as a web app, desktop app and self-hostable server. |
| [Postman](https://privacyratings.com/developer-tools/postman/) | F (30/100) | United States (Five Eyes) | API platform for designing, testing and documenting APIs, with collections, environments, mock servers and team workspaces synced to Postman's cloud. |
| [Bruno](https://privacyratings.com/developer-tools/bruno/) | F (25/100) | Unknown | Local-first API client that stores collections as plain text files in the filesystem, so they can be versioned with Git. Supports REST, GraphQL, gRPC and WebSocket requests. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/developer-tools/