Privacy policy crawler
Check privacy policy for GDPR required sections.
How this tool works
The privacy policy crawler checks a privacy policy against the information required by Art. 13 GDPR. Six items are owed by every controller: controller, legal basis, purpose, retention period, data subject rights and the right to lodge a complaint with a supervisory authority. Recipients, DPO and third country transfer are required only where applicable, and cookies, web analytics and contact forms only if they exist — those six are reported but do not count towards the score. The check is heuristic — it searches for keywords in the page.
Typical use cases
- Check own privacy policy for completeness
- Audit client websites as part of GDPR review
- After updating the policy, validate all sections are present
- Quick check when taking over a website
Frequently asked questions
Does this check replace a privacy audit?
No. It only checks if keywords of mandatory sections are present. Content accuracy, timeliness or legal compliance is not evaluated.
Which GDPR articles are checked?
Mainly Art. 13 (information obligations for direct collection): controller, purposes, legal basis, recipients, third country, retention, data subject rights, DPO, right to complain.
Is the page sent to a server?
Yes — the server loads the page, extracts text and checks keywords. Content is not stored.
Why is a section not detected?
Detection is based on German and English keywords. Unusual phrasings or other languages may cause sections not to be detected.
Does it work with PDFs?
No — only HTML pages are supported. If your privacy policy is linked as PDF, do not enter the direct PDF URL.
Are imprint obligations also checked?
No — use the separate Impressum checker for that. This crawler focuses on data protection/GDPR.
Related tools
Continuous monitoring vs. one-shot?
XICTRAQ monitors uptime, SSL, security headers, GDPR and performance 24/7. Free plan, no credit card.