# Cwtch privacy rating

Decentralized, metadata-resistant messenger from the non-profit Open Privacy Research Society. Contacts talk peer to peer over Tor onion services, and optional group chats use untrusted servers that anyone can run.

## Summary

Cwtch scores 89 out of 100 (grade B) on the messengers criteria. It meets 7 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted by default, no phone number needed, metadata protection and decentralized. It does not meet independent audit. It is based in Canada: Five Eyes member.

- Website: https://docs.cwtch.im
- Source code: https://git.openprivacy.ca/cwtch.im/cwtch-ui
- Jurisdiction: Canada. Five Eyes member.
- Platforms: Windows, macOS, Linux, Android
- Home page trackers: none found
- Category: [Messengers](https://privacyratings.com/messengers/)
- Grade: B (89/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT. | https://git.openprivacy.ca/cwtch.im/cwtch-ui |
| No trackers or telemetry | Yes | Exodus finds no trackers in the Android app. | https://reports.exodus-privacy.eu.org/en/reports/im.cwtch.flwtch/latest/ |
| No ads or data sales | Yes | Funded by donations to the non-profit Open Privacy Research Society, with no ads. | https://openprivacy.ca/donate/ |
| Independent audit | No | No independent audit is published. |  |
| End-to-end encrypted by default | Yes | All communication, including groups, is end-to-end encrypted over Tor v3 onion services. | https://docs.cwtch.im/ |
| No phone number needed | Yes | No phone number or account registration is needed; profiles are identified by onion addresses. | https://docs.cwtch.im/ |
| Metadata protection | Yes | Contacts connect directly over Tor, and group servers are designed to learn as little as possible about contents or metadata. | https://docs.cwtch.im/docs/groups/introduction/ |
| Decentralized | Yes | Peer to peer over Tor, with no central Cwtch service; anyone can host a group server. | https://docs.cwtch.im/ |

Source: https://privacyratings.com/messengers/cwtch/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/messengers/cwtch.md