# Rocket.Chat privacy rating

Self-hostable team chat platform with web, desktop and mobile apps, federation and many integrations. End-to-end encryption is available but off by default, so workspace admins can otherwise read messages.

## Summary

Rocket.Chat scores 50 out of 100 (grade D) on the team chat criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.rocket.chat
- Source code: https://github.com/RocketChat/Rocket.Chat
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Fonts (not scored), Google Tag Manager, HubSpot, Microsoft Clarity, Reddit Pixel
- Category: [Team chat](https://privacyratings.com/team-chat/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All code is public. Most is MIT, and enterprise features in the ee directories use the source-available Rocket.Chat Enterprise license. | https://github.com/RocketChat/Rocket.Chat/blob/develop/LICENSE |
| No trackers or telemetry | No | The home page loads Google Tag Manager, HubSpot, Microsoft Clarity and Reddit Pixel (automated test). |  |
| No ads or data sales | Yes | Funded by paid plans and enterprise licenses; the privacy policy states personal information is not sold. | https://docs.rocket.chat/docs/privacy-policy |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/team-chat/rocket-chat/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/team-chat/rocket-chat.md