# Rallly privacy rating

Open source, self-hostable scheduling poll tool. Create a poll with date and time options, share the link and let participants vote on when they are available.

## Summary

Rallly scores 44 out of 100 (grade D) on the scheduling criteria. It meets 3 of 8 criteria: open source, no ads or data sales and TLS configuration. It does not meet no trackers or telemetry, independent audit, transparency report, tells users about requests and security headers. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C-.

- Website: https://rallly.co
- Source code: https://github.com/lukevella/rallly
- License: AGPL-3.0
- Jurisdiction: United Kingdom. Five Eyes member. GDPR-style data protection law. CLOUD Act data access agreement with the US.
- Home page trackers: none found
- Category: [Scheduling](https://privacyratings.com/scheduling/)
- Grade: D (44/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | AGPL-3.0. | https://github.com/lukevella/rallly/blob/main/LICENSE |
| No trackers or telemetry | No | The hosted service sends product analytics to PostHog, tied to account name and email, and error reports to Sentry. | https://rallly.co/privacy-policy |
| No ads or data sales | Yes | Funded by paid plans. The privacy policy states personal data is not shared for marketing or commercial purposes. | https://rallly.co/pricing |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=rallly.co&hideResults=on |
| Security headers | No | Grade C- (45/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=rallly.co |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/scheduling/rallly/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/scheduling/rallly.md