RU EN
www.

Website and app data audit

Transparency starts
with network traffic analysis.

GDPR Audit examines the network requests captured in HAR files and compares them with the privacy policy.

We show the actual data transfers, the third-party services and the routes a site relies on in practice.

This site: EU hosting, no cookies, no third-party trackers

ATBEBGCYDEDKEEESFRGRIEITLTLVNLPLPTROSEUSRUCN🔍AUDIT
Node in the EU Main hubs (DE, NL) Transfer within the EU Transfer outside the EU Global servers (transit) Audit point (EE)
EU AT BE BG CY CZ DE DK EE ES FI FR GR HR HU IE IT LT LU LV MT NL PL PT RO SE SI SK
NON-EU AD AL AM BA BY CH GB GE IS LI MD ME MK NO RS TR UA XK
Beyond Europe US CN RU AU AF

Our analyses

What we have checked so far

Every number comes from real recordings: HAR files of websites and APK files of apps. The method is open, so you can check it yourself.

567
website analyses
What websites actually send, not what their policies promise
↑ +14 in October
1026
findings
Where requests diverge from the policy or need consent
22
countries covered
Where we have analyses
EEITNLDEAT+17
2512
trackers found
Requests to third-party services during a visit

App analyses

what apps carry insidecatalogue →
2539
apps
Android, analysed from the APK
↑ +976 this week
47
companies outside the EEA
Owners of embedded SDKs
9
owner countries
Where the owners are registered
15350
SDKs found
Distinct, per our SDK library: 75
Whose SDKs appear most often — in how many appsGoogle LLC 2370Meta Platforms 750Huawei 589AppsFlyer Ltd 419Functional Software Inc. 405Adjust GmbH 263

Pick a check

HAR · websiteSDK · appExtension

Who does a website pass your visit on to?

Record a visit as a HAR file and we'll show every third-party request and where it goes. Your file never leaves your browser.

Check a website →
Where the numbers come fromWebsite HAR recordingsApp APK filesOpen methodologyUpdated with every analysis

Privacy policy change calendar

Privacy policy change calendar
Each day shows what happened to the policies. Hover a cell, click for details.
MonWedFriSun
Select a date
Click a calendar cell
Site history
Click a site on the left
What the statuses mean
Details of the latest check →

From the map to actual checks

The map shows the direction of data flows and the infrastructure the project works with. Below are the individual HAR audits of real sites: government portals, healthcare services, financial resources and other publicly accessible systems.

Every audit is based on network traffic analysis and open technical data. The goal is to document the observable mechanisms by which the audited systems process and transfer data.

HAR capturesNetwork trafficOpen dataDocumented facts

How to use this

  • The Countries section groups audits by country. Each country has its own GDPR regulator and its own list of audited sites.
  • The Categories section groups sites by functional type (defence, healthcare, regulators and so on). Useful for comparing sites of the same type across countries.
  • The Audits section contains the full corpus in a single filterable list.
  • The Methodology section describes how each audit is conducted.

About the project and why it exists →

Latest audits

View all →