# Ruby on Rails privacy rating

Full-stack Ruby web framework following the model-view-controller pattern, with the Active Record ORM, conventions over configuration and built-in support for mail, background jobs and WebSockets.

## Summary

Ruby on Rails scores 100 out of 100 (grade A) on the Ruby web frameworks criteria. It meets 4 of 4 criteria: open source, no trackers or telemetry, no ads or data sales and independent audit.

- Website: https://rubyonrails.org
- Source code: https://github.com/rails/rails
- License: MIT
- Platforms: Linux, macOS, Windows
- Home page trackers: Plausible (cookieless analytics)
- Category: [Ruby web frameworks](https://privacyratings.com/ruby-frameworks/)
- Grade: A (100/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT-licensed. | https://github.com/rails/rails/blob/main/MIT-LICENSE |
| No trackers or telemetry | Yes | No third-party trackers, and the framework has no telemetry. The website's Plausible analytics are cookieless and aggregate-only. | https://rubyonrails.org/ |
| No ads or data sales | Yes | Supported by the Rails Foundation, funded by member companies, with no ads. | https://rubyonrails.org/foundation |
| Independent audit | Yes | X41 D-Sec audited Rails through OSTIF and published the full report. | https://ostif.org/wp-content/uploads/2025/06/X41-Rails-Audit-Final-Report-PUBLIC.pdf |

Source: https://privacyratings.com/ruby-frameworks/ruby-on-rails/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/ruby-frameworks/ruby-on-rails.md