Privacy Ratings

Newsletter platforms

Kit (Newsletter platforms) privacy rating

Email marketing platform for creators, formerly ConvertKit, with sign-up forms, landing pages, automated email sequences, paid newsletters and digital product sales.

United States Five EyesPlatforms: Android · iOS · Web

Summary

Kit scores 21 out of 100 (grade F) on the newsletter platforms criteria. It meets 1 of 9 criteria: TLS configuration. It partly meets no ads or data sales and modern web standards. It does not meet open source, no trackers or telemetry, independent audit, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A, Mozilla HTTP Observatory grade D and Internet.nl website score 71%.

Score 21 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    Emails track opens with images and clicks by default, and a tracking pixel is offered for creators' websites.

    help.kit.com

  • Partial

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Funded by subscriptions, but creators can add Kit Ads that show personalized ads to subscribers unless they opt out.

    help.kit.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

  • No

    Transparency report Weight 2 of 3

    Does the provider regularly publish how many government and legal requests it receives and how it responds?

    No transparency report or government request policy is published.

  • No

    Tells users about requests Weight 1 of 3

    Does the provider promise to tell users about requests for their data, unless a court forbids it?

    No published policy on notifying users about data requests.

Automated tests

Other newsletter platforms

All 13 newsletter platforms