# Java and Kotlin frameworks privacy ratings

Web and application frameworks for the JVM, written in Java, Kotlin or Scala.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Eclipse Vert.x](https://privacyratings.com/jvm-frameworks/eclipse-vert-x/) | B (80/100) | Belgium (Fourteen Eyes) | Eclipse Foundation toolkit for building reactive, event-driven applications on the JVM with non-blocking I/O, usable from Java, Kotlin and other JVM languages. |
| [Helidon](https://privacyratings.com/jvm-frameworks/helidon/) | B (80/100) | United States (Five Eyes) | Java framework from Oracle for building microservices, offered as a lightweight functional API (Helidon SE) and a MicroProfile implementation (Helidon MP). |
| [Javalin](https://privacyratings.com/jvm-frameworks/javalin/) | B (80/100) | Unknown | Lightweight web framework for Java and Kotlin built on the Jetty server, with a small handler-based API for REST APIs and WebSockets. |
| [Play Framework](https://privacyratings.com/jvm-frameworks/play-framework/) | B (80/100) | Unknown | Web framework for Java and Scala with a stateless, non-blocking architecture, hot reloading during development and type-safe templates. |
| [Dropwizard](https://privacyratings.com/jvm-frameworks/dropwizard/) | C (70/100) | Unknown | Java framework for building RESTful web services that bundles Jetty, Jersey and Jackson into one application package with built-in metrics and health checks. |
| [Quarkus](https://privacyratings.com/jvm-frameworks/quarkus/) | C (65/100) | United States (Five Eyes) | Java framework for cloud and Kubernetes applications, designed for fast startup and low memory use, with GraalVM native compilation and a live-reload dev mode. |
| [Apache Struts](https://privacyratings.com/jvm-frameworks/apache-struts/) | D (50/100) | United States (Five Eyes) | Apache MVC framework for building Java web applications, based on actions, interceptors and result views. |
| [Grails](https://privacyratings.com/jvm-frameworks/grails/) | D (50/100) | United States (Five Eyes) | Web application framework for the Groovy language built on Spring Boot, with convention over configuration, the GORM data layer and GSP templates. |
| [Ktor](https://privacyratings.com/jvm-frameworks/ktor/) | D (50/100) | Czechia | Kotlin framework from JetBrains for building asynchronous servers and HTTP clients with coroutines, extended through plugins. |
| [Micronaut](https://privacyratings.com/jvm-frameworks/micronaut/) | D (50/100) | United States (Five Eyes) | JVM framework for microservices and serverless applications in Java, Kotlin and Groovy, using compile-time dependency injection instead of reflection. |
| [Spring Boot](https://privacyratings.com/jvm-frameworks/spring-boot/) | D (50/100) | United States (Five Eyes) | Java framework from the Spring project for building standalone applications, with auto-configuration, embedded web servers and starter dependencies. |
| [Vaadin](https://privacyratings.com/jvm-frameworks/vaadin/) | F (35/100) | Finland | Java framework for building web application user interfaces, with server-side Java UI components (Flow) and React-based views (Hilla). Some components and tools are commercial. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/jvm-frameworks/