# RiseupVPN privacy rating

Free, donation-funded VPN run by the Riseup collective in the United States. It needs no account and uses the open-source LEAP VPN client with OpenVPN.

## Summary

RiseupVPN scores 70 out of 100 (grade C) on the VPN providers criteria. It meets 5 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration and open-source apps. It partly meets transparency report, security headers, audited no-logs policy and modern protocols. It does not meet independent audit and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://riseup.net/en/vpn
- Source code: https://0xacab.org/leap/bitmask-vpn
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux, Android
- Home page trackers: none found
- Category: [VPN providers](https://privacyratings.com/vpns/)
- Also rated: [Riseup](https://privacyratings.com/email-providers/riseup/) (Email providers)
- Grade: C (70/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | The LEAP VPN client and provider software are open source under GPL-3.0. | https://0xacab.org/leap/bitmask-vpn/-/raw/main/LICENSE |
| No trackers or telemetry | Yes | The privacy policy states no third-party cookies or tracking of any kind are used. The Android app has no known trackers on Exodus. | https://riseup.net/en/privacy-policy |
| No ads or data sales | Yes | Entirely funded by user donations. No ads. | https://riseup.net/en/vpn |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Partial | A signed warrant canary is updated regularly. No request counts are published. | https://riseup.net/en/canary |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=riseup.net&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=riseup.net |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Audited no-logs policy | Partial | Riseup states it does not log VPN users' IP addresses. Not audited. | https://riseup.net/en/vpn |
| Open-source apps | Yes | The desktop and Android clients are open source under GPL-3.0. | https://0xacab.org/leap/bitmask-vpn |
| Modern protocols | Partial | The client uses OpenVPN. WireGuard is not supported. | https://0xacab.org/leap/bitmask-vpn |

Source: https://privacyratings.com/vpns/riseupvpn/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/vpns/riseupvpn.md