Privacy Audit

What It Does

Performs a privacy audit: inventories first-party and third-party cookies with security attributes (Secure, HttpOnly, SameSite), detects consent management platforms with sophistication analysis (IAB TCF API, granular consent categories, reject-all buttons, Google Consent Mode v2), fetches and analyzes privacy policy content for GDPR terms (data rights, legal basis, DPO contact, transfer mechanisms) and CCPA terms (California disclosures), identifies third-party trackers by category, evaluates CCPA signals (Do Not Sell link detection), detects cookie walls (GDPR/ePrivacy violation), and computes enhanced compliance indicators for GDPR and CCPA readiness based on substantive content analysis. Returns a score, grade, per-component breakdown, and actionable recommendations.

Why It's Useful

Privacy regulations (GDPR, CPRA, ePrivacy Directive) carry significant fines for non-compliance. Websites frequently add tracking scripts without proper consent mechanisms. This audit provides the visibility needed to maintain compliance.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/domain/privacy-audit" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=example.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/domain/privacy-audit?domain=example.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/domain/privacy-audit',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'example.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.