# Kutt privacy rating

Open source URL shortener with custom domains, password-protected and expiring links, and link statistics. Can be self-hosted, and the developers run a hosted instance at kutt.to.

## Summary

Kutt scores 56 out of 100 (grade D) on the URL shorteners criteria. It meets 3 of 8 criteria: open source, no trackers or telemetry and no ads or data sales. It partly meets TLS configuration. It does not meet independent audit, transparency report, tells users about requests and security headers. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade D-.

- Website: https://kutt.to
- Source code: https://github.com/thedevs-network/kutt
- License: MIT
- Platforms: Web
- Home page trackers: Cloudflare Web Analytics (cookieless analytics)
- Category: [URL shorteners](https://privacyratings.com/url-shorteners/)
- Grade: D (56/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT. | https://github.com/thedevs-network/kutt/blob/main/LICENSE |
| No trackers or telemetry | Yes | No telemetry or analytics in the source code, and kutt.to loads no third-party scripts. | https://github.com/thedevs-network/kutt |
| No ads or data sales | Yes | Funded by premium plans and donations, with no ads. | https://kutt.to/premium |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=kutt.to&hideResults=on |
| Security headers | No | Grade D- (25/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=kutt.to |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/url-shorteners/kutt/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/url-shorteners/kutt.md