How does the Privacy Policy Checker work?
Give us your domain, that is all. We fetch your homepage, locate the privacy policy link, read the policy and grade it against 12 GDPR checks. For the data sharing and social media checks we also look at what your homepage embeds, so a policy that stays silent about a tool we can see gets flagged. If your site blocks automated visitors or the policy is not online yet, upload the PDF or Word file or paste the text; the report is identical.
What do we check?
Twelve checks, each with a severity. A failed high severity check makes the overall verdict fail; medium severity issues are reported as points to improve.
- check_circle Data subject rights Mentions GDPR rights such as access, rectification and erasure.
- check_circle Data controller Identifies who acts as the data controller.
- check_circle Data retention Describes how long data is retained.
- check_circle Data sharing Describes data sharing with third parties.
- check_circle Privacy contact channel Provides a dedicated privacy contact, such as a DPO email.
- check_circle Document length Checks the policy is long enough to plausibly cover GDPR.
- check_circle GDPR mentioned Mentions GDPR or relevant European data protection law.
- check_circle Legal grounds States the legal basis for processing.
- check_circle National authority Mentions the relevant national supervisory authority.
- check_circle Security measures Describes the security measures protecting personal data.
- check_circle Social media clause Addresses the social media platforms embedded on your site.
- check_circle Last updated date Includes a last-updated or effective date.
Why it matters
A privacy policy is the first thing a regulator, a customer or a complainant reads. Missing legal grounds, retention periods or the right to complain are the classic findings in an audit, and they are cheap to fix once you know they are missing. This checker finds them in a minute, before someone else does.
FAQ
Is the Privacy Policy Checker free?
Yes, completely free and without an account. The full report with all 12 checks appears on this page and you can download it as a PDF.
Do I need to find my privacy policy URL myself?
No. Enter your domain and we locate the policy page ourselves. If you prefer, paste the exact URL of your policy page instead.
What if my website blocks the check?
Some sites sit behind bot protection that refuses automated visitors. In that case upload your policy as a PDF or Word file, or paste the text. The report is exactly the same. Our fetcher identifies itself as GDPRwise Policy Bot; see gdprwise.eu/bot for what it does.
What happens to my document or text?
It is analysed in memory and not stored. We keep only the graded report. Policies are graded in English, Dutch, French and German.
What if my privacy policy fails the check?
Start a free GDPRWise discovery. It scans your website, builds your GDPR dossier and generates a privacy policy that reflects your actual tools, forms and third parties, with every gap from this report filled in.