# Apache Struts privacy rating

Apache MVC framework for building Java web applications, based on actions, interceptors and result views.

## Summary

Apache Struts scores 50 out of 100 (grade D) on the Java and Kotlin frameworks criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://struts.apache.org
- Source code: https://github.com/apache/struts
- License: Apache-2.0
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Linux, macOS, Windows
- Home page trackers: none found
- Category: [Java and Kotlin frameworks](https://privacyratings.com/jvm-frameworks/)
- Also rated: [Apache SpamAssassin](https://privacyratings.com/spam-filters/spamassassin/) (Spam and virus filtering), [Apache Guacamole](https://privacyratings.com/remote-desktop/apache-guacamole/) (Remote desktop), [Apache Cordova](https://privacyratings.com/app-frameworks/apache-cordova/) (Cross-platform app frameworks), [Grails](https://privacyratings.com/jvm-frameworks/grails/) (Java and Kotlin frameworks)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Apache 2.0-licensed. | https://github.com/apache/struts/blob/main/LICENSE |
| No trackers or telemetry | No | The struts.apache.org website loads the Facebook SDK for a Like button, alongside the Apache self-hosted Matomo. | https://struts.apache.org/ |
| No ads or data sales | Yes | Hosted by the Apache Software Foundation, which is funded by sponsors and donations, with no ads. | https://www.apache.org/foundation/sponsorship.html |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/jvm-frameworks/apache-struts/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/jvm-frameworks/apache-struts.md