Tools and templates
Website privacy hygiene scanner
Check any website's privacy hygiene — HTTPS, security headers, tracker references, consent indicators and policy links — from your own browser, with practical fixes for each finding.
This tool runs entirely in your browser. Your answers are not sent to us, stored, or associated with you in any way.
Local scan — recommended
The local scan runs entirely in your own browser, on the page you are looking at. It is more private than any server-side scanner: we never fetch the site, never see its address, and nothing about the page is sent to us or to anyone else. The result reaches this page in a URL fragment, which browsers do not transmit to a server.
- Drag this link to your bookmarks bar (or copy it and paste it into the address field of a new bookmark): Scan this page locally
- Open the website you want to check in your browser.
- Click the bookmark. The check runs in that page and opens your result here in a new tab.
The bookmarklet is static, self-contained JavaScript with no dependencies, no remote script loading and no evaluation of page data. It reads only link, script and form attributes plus page metadata — never what you type, cookies, browser storage or anything behind a login.
Or paste response headers (local only)
Some sites block bookmarklets. Copy the response headers from your browser's network tab and paste them here. Only five header names are read (Content-Security-Policy, Strict-Transport-Security, Referrer-Policy, Permissions-Policy, X-Content-Type-Options); every other line is discarded without being stored, displayed or transmitted.
Privacy Practice Lab publishes educational and technical guidance. Nothing on this site constitutes legal advice, and it should not be relied on as a legal determination for your organisation.