# Vaadin privacy rating

Java framework for building web application user interfaces, with server-side Java UI components (Flow) and React-based views (Hilla). Some components and tools are commercial.

## Summary

Vaadin scores 35 out of 100 (grade F) on the Java and Kotlin frameworks criteria. It meets 1 of 4 criteria: no ads or data sales. It partly meets open source. It does not meet no trackers or telemetry and independent audit. It is based in Finland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR).

- Website: https://vaadin.com
- Source code: https://github.com/vaadin/flow
- License: Apache-2.0
- Jurisdiction: Finland. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Platforms: Linux, macOS, Windows
- Home page trackers: none found
- Category: [Java and Kotlin frameworks](https://privacyratings.com/jvm-frameworks/)
- Grade: F (35/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | The core framework is Apache 2.0-licensed, but some components and tools are under the proprietary Vaadin Commercial License. | https://vaadin.com/licensing-faq-and-troubleshooting |
| No trackers or telemetry | No | Development mode collects usage statistics by default until disabled, and vaadin.com loads HubSpot analytics. | https://vaadin.com/docs/latest/flow/configuration/properties |
| No ads or data sales | Yes | Funded by commercial subscriptions and support, with no ads in the framework. | https://vaadin.com/pricing |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/jvm-frameworks/vaadin/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/jvm-frameworks/vaadin.md