# Framaforms privacy rating

Free online form and survey service run by the French nonprofit Framasoft on the open-source Yakforms software. Forms expire after six months by default.

## Summary

Framaforms scores 53 out of 100 (grade D) on the forms and surveys criteria. It meets 3 of 8 criteria: open source, no ads or data sales and TLS configuration. It partly meets no trackers or telemetry. It does not meet independent audit, transparency report, tells users about requests and security headers. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C.

- Website: https://framaforms.org
- Source code: https://framagit.org/yakforms/yakforms
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Platforms: Web
- Home page trackers: none found
- Category: [Forms and surveys](https://privacyratings.com/forms/)
- Grade: D (53/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Runs Yakforms, which is licensed under GPL-2.0. | https://framagit.org/yakforms/yakforms/-/raw/master/LICENSE.txt |
| No trackers or telemetry | Partial | Framasoft measures traffic with its own Matomo instance, which sets a cookie. Data is not shared with third parties. | https://framasoft.org/en/legals/ |
| No ads or data sales | Yes | Free service funded by donations to Framasoft. The terms state personal data is not sold or passed on. | https://framasoft.org/fr/cgu/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=framaforms.org&hideResults=on |
| Security headers | No | Grade C (50/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=framaforms.org |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/forms/framaforms/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/forms/framaforms.md