# Privacy.com privacy rating

US service by Lithic that issues virtual Visa and Mastercard cards locked to single merchants or spending limits, hiding the real card number from merchants. Sign-up requires name, date of birth and a government ID number.

## Summary

Privacy.com scores 19 out of 100 (grade F) on the virtual cards criteria. It meets 1 of 8 criteria: TLS configuration. It partly meets independent audit. It does not meet open source, no trackers or telemetry, no ads or data sales, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C.

- Website: https://www.privacy.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: PostHog, Reddit Pixel, Zendesk (not scored)
- Category: [Virtual cards](https://privacyratings.com/virtual-cards/)
- Grade: F (19/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The home page loads PostHog and Reddit Pixel (automated test). |  |
| No ads or data sales | No | The privacy policy says it does not sell user information, but marketing cookies are used to show Privacy.com ads on other sites after a visit. | https://www.privacy.com/privacy-policy |
| Independent audit | Partial | States it holds SOC 1 and SOC 2 Type 2 reports and ISO 27001 compliance, but the reports are not public. | https://www.privacy.com/security |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=privacy.com&hideResults=on |
| Security headers | No | Grade C (50/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=privacy.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/virtual-cards/privacy-com/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/virtual-cards/privacy-com.md