PGP tools
FlowCrypt privacy rating
Browser extension for OpenPGP email encryption in Gmail on Chrome, Firefox and other browsers, with companion apps for Android and iOS.
Summary
FlowCrypt scores 45 out of 100 (grade D) on the PGP tools criteria. It meets 1 of 4 criteria: no ads or data sales. It partly meets open source and independent audit. It does not meet no trackers or telemetry. It is based in Czechia: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR).
Score 45 out of 100. How scoring works
Criteria
-
Partial
Open source Weight 3 of 3
Is all the source code needed to run the product public?
Source available under a custom license. Not an OSI license.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The website loads Mouseflow session recording, and Exodus finds ACRA and OpenTelemetry in the Android app.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by enterprise licenses. The privacy policy states personal information is not sold.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Cure53 published full reports on the extension and apps, but they are older than three years.