JamesNK / Newtonsoft.Json

Json.NET is a popular high-performance JSON framework for .NET
https://www.newtonsoft.com/json
MIT License
10.64k stars 3.24k forks source link

Inquiry Regarding Privacy Policy in Newtonsoft.Json #2926

Open Nonaba002 opened 6 months ago

Nonaba002 commented 6 months ago

Hello, I'm currently considering the use of Newtonsoft.Json in our project. As part of our efforts to ensure data privacy and compliance, I would like to inquire about the privacy policy associated with this package. Could someone from the maintainers' team provide clarification on whether Newtonsoft.Json collects any user data or sensitive information during its usage? Understanding its data collection practices is crucial for us to ensure alignment with our project's privacy policies. Your response regarding this matter will significantly impact our decision-making process in utilizing this package. Thank you for your attention to this inquiry. Best regards, Nonaba002

sungam3r commented 6 months ago

As I know NSJ collects nothing. But the recommended practice is to use STJ for all new .NET projects.

elgonzo commented 6 months ago

As a user of the library who is not related and not associated with the project author/maintainers and to add to @sungam3r comment, note that the Newtonsoft.Json library is entirely open source. Which is to say, you can and probably should audit the source code yourself instead of blindly relying on statements made by the project author/maintainers, which are in no legally binding contract with you. No words uttered by the project author/maintainers will absolve you from having to do due diligence, audit the source code and build the library from the audited source code yourself (assuming the target use case of your intended product is really very sensitive regarding data-privacy matters as it appears to me from reading your post).