Skip to content
Check my policy

Is your privacy policy still true?

We compare what your site loads with what your policy says, and we show the proof. Then we monitor it: we check again every week and email you when something changes.

How do you want to start?

About a minute. Save the check to start a 14-day trial; verify your website to enable weekly checks.

I have the link to my privacy policy

Optional. If you paste the direct link, we read that page instead of looking for it, so the check is more exact.

By scanning, you confirm that you own this website or are authorized to test it, and you agree to our Terms.

  • Free
  • No account
  • We do not store your pages

Monitor the code, not only the site.

Connect a GitHub repo. We read it with read-only access and email you when a push adds a tracker, a vendor or personal data.

  • BetaGitHub check
  • BetaPull-request checks
Connect GitHubBeta
  • Read-only code access
  • Source files are not retained

AI agents ship fast. They also add trackers, vendors and personal data, and nobody tells the policy.

Each prompt can change what your app collects. Your policy still says what was true on launch day.

You asked your agent
Add analytics to the signup flow.
It added
+ "posthog-js": "^1.160.0"posthog.capture("signup_started")
Your policy still says
We do not use analytics tools.
You asked your agent
Let people log in with a text message.
It added
add_column :users, :phone_number+ "twilio": "^5.3.0"
Your policy still says
We collect your name and email address.
You asked your agent
Summarize support tickets with AI.
It added
OPENAI_API_KEY=openai.responses.create({ input: ticket.body })
Your policy still says
Nothing about AI processing.

Three steps. The first two need no account.

  1. 1

    Paste two links

    Live

    Your site and your privacy policy page. We open your public pages like a visitor does.

  2. 2

    Read the result

    Live

    Each tool shows where we saw it: the host, the cookie or the page. Found means we saw it. Likely means a strong sign. Ask means only you know.

  3. 3

    Watch this site

    Live

    Save your check with a free account. Your first website starts a 14-day monitoring trial. Verify that the site is yours to enable weekly checks. After the trial, automatic checks pause; your saved results and Free plan stay. No automatic charge.

A lawyer has not reviewed our templates. We show what we observed, and you decide what to change.

We also watch your code, not only your website.

Your site shows what loads today. Your repo shows what you are about to ship. Connect GitHub and we check every change.

  1. 1

    Connect your repo

    Install the GitHub app on the repos you pick, private too. Code is read-only.

  2. 2

    Every push is checked

    Turn on monitoring for email alerts when a push changes what your code may collect. You can also enable neutral pull-request checks.

  3. 3

    Our bot opens an issue

    Optional, per repo: one issue that is updated with new changes and what to check. Your code and policy stay unchanged.

Connect GitHubBeta

What the check looks at

The website check reads public pages only. When we cannot see something, we tell you.

We check

  • Tools and vendors that your pages load
  • Cookies and browser storage that they set
  • Forms that ask for personal data
  • Whether your policy names each tool
  • With GitHub: the dependencies, data fields and vendor signals in your code, read-only

We cannot see

  • Pages behind a login
  • Mobile apps and their SDKs
  • What your server shares with other companies

Submitting to Meta, Google or Apple?

Reviewers open your policy link. Read what each review asks for, then check your links before you submit.

Meta App Review: privacy and deletionRead the guideGoogle OAuth: homepage and privacy policyRead the guideApp Store privacy: policy and data labelsRead the guideStripe: website requirements for account activationRead the guide

See all launch guides

Questions, answered plainly.

What does the check compare?

We open your public pages and list the tools, cookies and forms we see. Then we read your policy page and look for the name of each tool. You see which ones your policy does not name, with proof.

Do you store my pages?

No. We keep short evidence: host names, cookie names and the page where we saw them. We do not keep the text of your pages or of your policy.

What does the AI do?

The check uses fixed rules. AI can mark an unknown vendor as Likely, and we show that label. AI never writes legal text for you.

Do I need an account or GitHub?

No. The check is free and needs no account. The GitHub check is optional.

Does it work for mobile apps?

Not yet. The check reads public web pages. For app store reviews, read our launch guides.

Is this a legal review?

No. tosgenerator is not a law firm, and a lawyer has not reviewed our templates. We show what we observed on your site and in your policy. You decide what to change. For sensitive data, ask a lawyer.

Find out if your policy is still true. Then keep it that way.

Check my policyConnect GitHubBeta
  • Free
  • No account
  • We do not store your pages