Grade A- — Mostly protective (score 86/100)
OWASP provides clear data rights and transparency, though it reserves the right to share data in corporate transactions and for targeted advertising.
Protective policy with clear rights, though it allows for data transfers.
Individuals in the European Economic Area... have additional rights... to erase your personal information.
You have the right to request that your personal data be deleted under certain circumstances.
We may disclose or transfer information... as part of any merger, sale, and transfer of our assets, or restructuring of all or part of our business operations.
Your personal information may be transferred to another company if OWASP is sold or restructured.
We may disclose your information if we are required to do so by law (including to law enforcement in the U.S. and other jurisdictions).
OWASP will comply with legal requests from government and law enforcement agencies to disclose your data.
We may work with third party advertisers to display more relevant ads... these third parties may display ads to you based on your visit to our Sites and other third-party sites.
OWASP allows third-party advertisers to track your activity across websites to show you targeted ads.
If you have registered with us... you may do so online by visiting the OWASP Member portal... You may also contact our privacy coordinator... to access or amend your personal information.
You have a clear, accessible way to view and correct the personal information OWASP holds about you.
Last reviewed 2026-08-05 under rubric v3.5.