# Next.js privacy rating

React framework from Vercel for building web applications with server-side rendering, static generation and API routes.

## Summary

Next.js scores 50 out of 100 (grade D) on the front-end and full-stack frameworks criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://nextjs.org
- Source code: https://github.com/vercel/next.js
- License: MIT
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Linux, macOS, Windows, Web
- Home page trackers: none found
- Category: [Front-end and full-stack frameworks](https://privacyratings.com/web-frameworks/)
- Also rated: [Turbopack](https://privacyratings.com/build-tools/turbopack/) (Bundlers and build tools)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT-licensed. | https://github.com/vercel/next.js/blob/canary/license.md |
| No trackers or telemetry | No | The CLI sends anonymous telemetry by default until disabled, and nextjs.org loads Google Tag Manager. | https://nextjs.org/telemetry |
| No ads or data sales | Yes | Developed by Vercel and funded by its paid hosting platform, with no ads in the framework. | https://vercel.com/pricing |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/web-frameworks/next-js/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/web-frameworks/next-js.md