# Dub privacy rating

Open source link management platform for short links, QR codes, conversion tracking and affiliate programs. Available as a hosted service or for self-hosting.

## Summary

Dub scores 63 out of 100 (grade C) on the URL shorteners criteria. It meets 3 of 8 criteria: open source, no ads or data sales and TLS configuration. It partly meets no trackers or telemetry, independent audit and security headers. It does not meet transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://dub.co
- Source code: https://github.com/dubinc/dub
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web
- Home page trackers: Trustpilot (not scored)
- Category: [URL shorteners](https://privacyratings.com/url-shorteners/)
- Grade: C (63/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All code is public. Most is AGPL-3.0, and code in the ee directories uses a separate source-available commercial license. | https://github.com/dubinc/dub/blob/main/LICENSE.md |
| No trackers or telemetry | Partial | The website uses proxied Plausible analytics and Dub's own analytics, and the privacy policy states no third-party cookies are used. | https://dub.co/legal/privacy |
| No ads or data sales | Yes | Funded by subscriptions. The privacy policy states personal information is not sold or rented. | https://dub.co/legal/privacy |
| Independent audit | Partial | Dub states it is SOC 2 Type II certified, but the report is not public. | https://dub.co/security |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=dub.co&hideResults=on |
| Security headers | Partial | Grade B (70/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=dub.co |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/url-shorteners/dub/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/url-shorteners/dub.md