# VirtualBox privacy rating

Type 2 hypervisor from Oracle for x86-64 and ARM hosts, running on Windows, macOS, Linux and Solaris. It runs guest operating systems in virtual machines on a desktop or server.

## Summary

VirtualBox scores 65 out of 100 (grade C) on the virtual machines criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It partly meets no trackers or telemetry. It does not meet independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.virtualbox.org
- Source code: https://github.com/VirtualBox/virtualbox
- License: GPL-3.0
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [Virtual machines](https://privacyratings.com/virtual-machines/)
- Grade: C (65/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | The base package is GPL-3.0 and runs on its own. The optional Extension Pack is proprietary under the PUEL. | https://www.virtualbox.org/wiki/Licensing_FAQ |
| No trackers or telemetry | Partial | No third-party trackers were found, but an automatic update check that contacts Oracle is on by default and can be turned off. | https://www.virtualbox.org/manual/ch08.html#vboxmanage-updatecheck |
| No ads or data sales | Yes | Free base package, funded by Oracle through paid Extension Pack enterprise licenses, with no ads. | https://www.virtualbox.org/wiki/Licensing_FAQ |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/virtual-machines/virtualbox/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/virtual-machines/virtualbox.md