Privacy Ratings

Forms and surveys

Google Forms privacy rating

Google's online form and survey builder, part of Google Workspace. Responses are stored in the creator's Google account and can be exported to Google Sheets.

Summary

Google Forms scores 38 out of 100 (grade F) on the forms and surveys criteria. It meets 3 of 8 criteria: transparency report, tells users about requests and security headers. It partly meets independent audit and TLS configuration. It does not meet open source, no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade A+.

Score 38 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    Google collects activity data across its services and uses it for analytics and personalized ads.

    policies.google.com

  • No

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free for personal accounts and funded by Google's advertising business, which uses activity data across services.

    policies.google.com

  • Partial

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    Google Workspace, which includes Forms, has third-party SOC 2 audits. Only the SOC 3 summary report is public.

    cloud.google.com

  • Yes

    Transparency report Weight 2 of 3

    Does the provider regularly publish how many government and legal requests it receives and how it responds?

    Publishes counts of government requests for user data and how often data is disclosed, updated twice a year.

    transparencyreport.google.com

  • Yes

    Tells users about requests Weight 1 of 3

    Does the provider promise to tell users about requests for their data, unless a court forbids it?

    Google emails the user before disclosing information unless legally prohibited or in emergencies.

    policies.google.com

Automated tests

  • Partial

    TLS configuration Weight 2 of 3

    Does the website pass the Qualys SSL Labs test with a grade of A or better?

    Grade B

    ssllabs.com

  • Yes

    Security headers Weight 1 of 3

    Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?

    Grade A+ (110/100+)

    developer.mozilla.org

  • Not tested yet

    Modern web standards Weight 1 of 3

    Does the website score 90% or higher on the Internet.nl website test?

    Not tested yet.

Other forms and surveys

All 17 forms and surveys