# Security & Privacy Scorecard

## Jetpack - Website Builder

## What This Means for You

Account activity and app behavior is monitored by Sentry for crash reporting, and Firebase handles push notifications. Google Sign-In links a user's Google identity to their account. Support interactions are processed through Zendesk, a third-party service.

## Recommendation: Use With Caution

**Best For:** WordPress site owners comfortable with standard analytics

## Key Findings

**Data Security** - 6 findings (2 critical, 2 high, 2 medium)

**Network Security** - 2 findings (1 critical, 1 medium)

**Code Safety** - 0 findings

**Privacy** - 0 findings

## Privacy Concerns

### What Data is Collected

The app collects data linked to user accounts and usage patterns. Sentry captures crash reports that include device state and app context at the time of a crash. Firebase Cloud Messaging ties the user's device to their account to deliver push notifications. Google Sign-In associates the user's Google identity with their Jetpack account.

### Third-Party Data Sharing

User data is shared with Google through Firebase Cloud Messaging and Google Sign-In, with Sentry for crash diagnostics, with Zendesk to handle support requests, and with Tenor for GIF content delivery. Each of these services processes user data under its own privacy policy.

## Understanding the Scores

- **Security:** 48/100
- **Privacy:** 58/100
- **Data Security:** 42/100
- **Network Security:** 60/100
- **Code Safety:** 68/100
- **Data Collection:** 75/100
- **Data Sharing:** 70/100
- **User Control:** 62/100

## Positive Security Features

- No notable positive security practices were identified for this version of the app.

## Areas for Improvement

- Some data handled by the app is not sufficiently protected, which could expose user information to unauthorized access on the same device or over a shared connection.
- Network communications lack consistent safeguards, meaning data may be sent without full protection on public Wi-Fi.
- The controls available within the app for managing what data is collected and shared are limited.

---

## About This Analysis

### App Details

- **App:** Jetpack - Website Builder
- **Package:** com.jetpack.android
- **Version:** 26.3.1 (Build 1478)
- **Scan Date:** 2025-12-19