# Excalidraw privacy rating

An open-source virtual whiteboard for sketching hand-drawn style diagrams in the browser. Drawings are stored locally, and shared links and live collaboration are end-to-end encrypted. A paid hosted workspace, Excalidraw+, is also offered.

## Summary

Excalidraw scores 65 out of 100 (grade C) on the diagrams and whiteboards criteria. It meets 1 of 4 criteria: open source. It partly meets no trackers or telemetry, no ads or data sales and independent audit. It is based in Czechia: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR).

- Website: https://excalidraw.com
- Source code: https://github.com/excalidraw/excalidraw
- License: MIT
- Jurisdiction: Czechia. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Platforms: Web
- Home page trackers: Google Fonts (not scored)
- Category: [Diagrams and whiteboards](https://privacyratings.com/diagrams/)
- Grade: C (65/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT. The paid Excalidraw+ service is closed source. | https://github.com/excalidraw/excalidraw/blob/master/LICENSE |
| No trackers or telemetry | Partial | No third-party ad trackers, but excalidraw.com loads Simple Analytics and sends error reports to Sentry by default. | https://github.com/excalidraw/excalidraw/blob/master/excalidraw-app/index.html |
| No ads or data sales | Partial | Funded by Excalidraw+ subscriptions with no ads in the app, but the privacy notice says marketing cookies and third parties may be used for targeted advertising. | https://plus.excalidraw.com/privacy-policy |
| Independent audit | Partial | Excalidraw+ has SOC 2 Type 1 and Type 2 reports and yearly penetration tests, with reports provided through its trust center rather than published. | https://plus.excalidraw.com/security-and-compliance |

Source: https://privacyratings.com/diagrams/excalidraw/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/diagrams/excalidraw.md