Privacy Ratings

Ruby web framework privacy ratings

Web and API frameworks for Ruby.

7 Ruby web frameworks are rated against 4 public criteria, and 7 have enough evidence for a letter grade. Of the 1 with a known jurisdiction, 1 is based in a Five Eyes country, and 1 in the wider Fourteen Eyes.

Open-source Ruby web frameworks only · Criteria for this category · Suggest an addition · Markdown

7 shown
Ruby web frameworks privacy ratings, sorted by pick and then by grade
Name Grade Score Data Jurisdiction Open sourceNo trackers or telemetryNo ads or data salesIndependent audit
Full-stack Ruby web framework following the model-view-controller pattern, with the Active Record ORM, conventions over configuration and built-in support for mail, background jobs and WebSockets.
Grade A 100 100% – YesYesYesYes
Ruby framework for building REST-like APIs, with a DSL for versioning, parameter validation and response formatting, running on Rack or alongside Rails.
Grade B 80 100% – YesYesYesNo
Ruby web framework for structured, modular applications, with slices, actions, views and a repository-based database layer.
Grade B 80 100% – YesYesYesNo
Approach from 37signals for building web applications by sending HTML instead of JSON over the wire, made up of the Turbo, Stimulus and Hotwire Native libraries.
Grade B 80 100% United States Five Eyes YesYesYesNo
Ruby web framework built on Sinatra that adds generators, helpers, mailers, an admin interface and support for mounting several apps.
Grade B 80 100% – YesYesYesNo
Ruby web toolkit built around a routing tree, with a small core and features added through plugins.
Grade B 80 100% – YesYesYesNo
Minimal Ruby library for building web applications and APIs with a DSL that maps HTTP routes to blocks of code.
Grade B 80 100% – YesYesYesNo

Questions

What is the most private option among Ruby web frameworks?

No pick has been made yet. The table above is sorted by score, based on public evidence.

How are Ruby web frameworks rated?

Each entry answers 4 questions: open source, no trackers or telemetry, no ads or data sales and independent audit. Answers need links to evidence. See the full criteria.

Does jurisdiction matter?

Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.