Jetpack – Website Builder Security & Privacy Scorecard
Android
Account activity and app behavior is monitored by Sentry for crash reporting, and Firebase handles push notifications. Google Sign-In links a user's Google identity to their account. Support interactions are processed through Zendesk, a third-party service.
Best for
WordPress site owners comfortable with standard analytics
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- OAuth Access Tokens Stored in Unencrypted SharedPreferences
- Cleartext Traffic Permitted Globally
- Hardcoded Google API Keys Exposed in Resources
Top privacy issues
- Sensitive Data Included in Cloud and Device Backup Schemes
- Multiple WebViews with JavaScript Enabled and Exposed Interfaces
- Push Notification Tokens Stored in Plaintext
Full analysis
Jetpack - Website Builder
What This Means for You
Account activity and app behavior is monitored by Sentry for crash reporting, and Firebase handles push notifications. Google Sign-In links a user's Google identity to their account. Support interactions are processed through Zendesk, a third-party service.
Recommendation: Use With Caution
Best For: WordPress site owners comfortable with standard analytics
Key Findings
Data Security - 6 findings (2 critical, 2 high, 2 medium)
Network Security - 2 findings (1 critical, 1 medium)
Code Safety - 0 findings
Privacy - 0 findings
Privacy Concerns
What Data is Collected
The app collects data linked to user accounts and usage patterns. Sentry captures crash reports that include device state and app context at the time of a crash. Firebase Cloud Messaging ties the user's device to their account to deliver push notifications. Google Sign-In associates the user's Google identity with their Jetpack account.
Third-Party Data Sharing
User data is shared with Google through Firebase Cloud Messaging and Google Sign-In, with Sentry for crash diagnostics, with Zendesk to handle support requests, and with Tenor for GIF content delivery. Each of these services processes user data under its own privacy policy.
Understanding the Scores
- Security: 48/100
- Privacy: 58/100
- Data Security: 42/100
- Network Security: 60/100
- Code Safety: 68/100
- Data Collection: 75/100
- Data Sharing: 70/100
- User Control: 62/100
Positive Security Features
- No notable positive security practices were identified for this version of the app.
Areas for Improvement
- Some data handled by the app is not sufficiently protected, which could expose user information to unauthorized access on the same device or over a shared connection.
- Network communications lack consistent safeguards, meaning data may be sent without full protection on public Wi-Fi.
- The controls available within the app for managing what data is collected and shared are limited.
About This Analysis
App Details
- App: Jetpack - Website Builder
- Package: com.jetpack.android
- Version: 26.3.1 (Build 1478)
- Scan Date: 2025-12-19
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 52/100 | |
| #1 | 58/100 |