# Turtl privacy rating

End-to-end encrypted, collaborative notebook for notes, bookmarks, passwords and files, with desktop and mobile apps. Can be self-hosted or used with the hosted service.

## Summary

Turtl scores 65 out of 100 (grade C) on the notes criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It partly meets no trackers or telemetry. It does not meet independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://turtlapp.com
- Source code: https://github.com/turtl/desktop
- License: GPL-3.0
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Fonts (not scored)
- Category: [Notes](https://privacyratings.com/notes/)
- Grade: C (65/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-3.0. | https://github.com/turtl/desktop/blob/master/LICENSE |
| No trackers or telemetry | Partial | Exodus finds no trackers in the Android app, but the website uses self-hosted Matomo analytics that is not stated to be cookieless. | https://reports.exodus-privacy.eu.org/en/reports/com.lyonbros.turtl/latest/ |
| No ads or data sales | Yes | Funded by paid plans. The privacy policy rules out third-party advertising and sharing data with third parties. | https://turtlapp.com/privacy/ |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/notes/turtl/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/notes/turtl.md