Web framework privacy ratings

JavaScript front-end, single-page and full-stack frameworks. Some collect telemetry from developers by default.

34 front-end and full-stack frameworks are rated against 4 public criteria, and 34 have enough evidence for a letter grade. Our pick is Svelte. Of the 11 with a known jurisdiction, 11 are based in a Five Eyes country, and 11 in the wider Fourteen Eyes.

Open-source front-end and full-stack frameworks only · Criteria for this category · Suggest an addition · Markdown

Front-end and full-stack frameworks privacy ratings, sorted by pick and then by grade
Name	Grade	Score	Data	Jurisdiction	Open source	No trackers or telemetry	No ads or data sales	Independent audit
Svelte Our pick Component framework for JavaScript and TypeScript that compiles components into JavaScript at build time instead of using a virtual DOM.	Grade B	80	100%	–	Yes	Yes	Yes	No
Alpine.js Lightweight JavaScript framework that adds reactive behavior to HTML through attributes written directly in the markup.	Grade B	80	100%	–	Yes	Yes	Yes	No
Backbone.js Lightweight JavaScript library that gives web applications structure with models, collections, views and a router.	Grade B	80	100%	–	Yes	Yes	Yes	No
Blitz.js Full-stack toolkit for Next.js that adds authentication, a zero-API data layer and code generation.	Grade B	80	100%	–	Yes	Yes	Yes	No
htmx JavaScript library that lets HTML elements issue HTTP requests and swap in server-rendered HTML through attributes, without writing JavaScript.	Grade B	80	100%	–	Yes	Yes	Yes	No
Inferno JavaScript library for building user interfaces with a virtual DOM and a React-style component API.	Grade B	80	100%	–	Yes	Yes	Yes	No
jQuery JavaScript library for DOM manipulation, event handling and Ajax, maintained under the OpenJS Foundation.	Grade B	80	100%	United States Five Eyes	Yes	Yes	Yes	No
Marko HTML-based UI language and framework for JavaScript, originally from eBay, that compiles components for streaming server rendering and partial hydration in the browser.	Grade B	80	100%	–	Yes	Yes	Yes	No
Mithril.js Small client-side JavaScript framework for building single-page applications, with a virtual DOM and built-in routing and HTTP utilities.	Grade B	80	100%	–	Yes	Yes	Yes	No
Nuxt Vue-based framework for building web applications with server-side rendering, static generation and file-based routing.	Grade B	80	100%	–	Yes	Yes	Yes	No
React Router Routing library and full-stack framework for React, whose framework mode continues the Remix framework.	Grade B	80	100%	–	Yes	Yes	Yes	No
RedwoodSDK Full-stack React framework from the RedwoodJS team that runs on Cloudflare Workers, built as a Vite plugin with server components, server-side rendering and realtime features.	Grade B	80	100%	–	Yes	Yes	Yes	No
Remix Full-stack web framework for JavaScript and TypeScript from Shopify, built on web standards such as the Fetch API and HTML forms. Its earlier React-based version continues as the framework mode of React Router.	Grade B	80	100%	Canada Five Eyes	Yes	Yes	Yes	No
SolidJS JavaScript library for building user interfaces with JSX and fine-grained reactivity, updating the DOM directly without a virtual DOM.	Grade B	80	100%	–	Yes	Yes	Yes	No
SolidStart Full-stack framework for SolidJS, a reactive UI library, with routing, server functions and server-side rendering.	Grade B	80	100%	–	Yes	Yes	Yes	No
SvelteKit Framework for building web applications with Svelte, a compiler-based UI framework, with routing, server-side rendering and static site generation.	Grade B	80	100%	–	Yes	Yes	Yes	No
Astro Web framework for content-driven websites that renders pages to HTML and loads JavaScript only for interactive components.	Grade C	65	100%	United States Five Eyes	Yes	Partial	Yes	No
Analog Full-stack meta-framework for Angular built on Vite, with file-based routing, server-side rendering, static generation and API routes.	Grade D	50	100%	–	Yes	No	Yes	No
Angular TypeScript-based web application framework from Google, with components, dependency injection, routing and a CLI.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
Aurelia JavaScript and TypeScript front-end framework for building web applications with standards-based components, data binding and dependency injection.	Grade D	50	100%	–	Yes	No	Yes	No
Ember.js JavaScript framework for building web applications, with conventions, a CLI, routing and a data layer.	Grade D	50	100%	–	Yes	No	Yes	No
Fresh Web framework for Deno from Deno Land that renders pages on the server with Preact and ships JavaScript only for interactive islands.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
Gatsby React-based framework for building static websites and apps, with a GraphQL data layer and plugins for content sources.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
Lit Library for building Web Components with reactive properties and declarative templates.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
Next.js React framework from Vercel for building web applications with server-side rendering, static generation and API routes.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
Preact Small JavaScript library with a React-compatible component API for building user interfaces.	Grade D	50	100%	–	Yes	No	Yes	No
Qwik Web framework that serializes application state into HTML so pages resume in the browser without hydration.	Grade D	50	100%	–	Yes	No	Yes	No
React JavaScript library for building user interfaces from components, used for web and native applications.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
Stencil Compiler from Ionic for building reusable web components with TypeScript and JSX that work with any front-end framework or none.	Grade D	50	100%	United States Five Eyes	Yes	No	Yes	No
TanStack Start Full-stack React and Solid framework built on TanStack Router and Vite, with type-safe routing, server functions and server-side rendering.	Grade D	50	100%	–	Yes	No	Yes	No
Vike Vite-based framework for building web applications with server-side rendering, static generation and routing, used with UI libraries such as React, Vue or Solid.	Grade D	50	100%	–	Yes	No	Yes	No
Waku Minimal React framework for building web applications with React Server Components, server-side rendering and static generation.	Grade D	50	100%	–	Yes	No	Yes	No
Vue Progressive JavaScript framework for building user interfaces with reactive, component-based templates.	Grade D	40	100%	–	Yes	No	Partial	No
Hydrogen React framework from Shopify for building custom storefronts on the Shopify commerce platform, based on React Router.	Grade F	35	100%	Canada Five Eyes	Partial	No	Yes	No

Questions

What is the most private option among front-end and full-stack frameworks?

Our pick is Svelte. Compiles components to small, fast JavaScript with no virtual DOM and no telemetry, and works well with TypeScript. The Forward Email webmail and apps use Svelte and TypeScript on Tauri (github.com/forwardemail/mail.forwardemail.net).

How are front-end and full-stack frameworks rated?

Each entry answers 4 questions: open source, no trackers or telemetry, no ads or data sales and independent audit. Answers need links to evidence. See the full criteria.

Does jurisdiction matter?

Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.