Skip to content
Get started

Privacy policy check

Do4U compares your privacy policy with your website. You enter the start page, a few more pages if you like, and the address or text of your privacy policy. Do4U reads the pages and finds the third-party services they load: fonts, analytics, tag managers, advertising, videos, maps, chats, consent tools, CDNs and more. The Do4U AI reads the privacy policy and lists every service and recipient it names, each with a quote. The code checks that every quote is in the policy word for word and does the comparison itself. You get three lists: embedded but not named, named but not found, and found and named. The check is static: it does not run JavaScript.

Try it now Pricing

Who it is for

For website owners, agencies and data protection officers who want to see quickly whether the privacy policy still matches the website, for example after a relaunch, a new plugin or a new consent tool.

Typical uses

  • Find services the website loads but the privacy policy does not name
  • Find old entries in the privacy policy for services you no longer use
  • Check the privacy policy after a relaunch or a new plugin
  • Prepare a review of the privacy policy with the quotes and places found

Example

Input

Website: https://www.example-shop.com/ HTML (excerpt): <script src="https://www.googletagmanager.com/gtag/js?id=G-XXXX"></script> <link rel="stylesheet" href="https://use.typekit.net/abc.css"> <script src="https://static.hotjar.com/c/hotjar-1.js"></script> <iframe src="https://www.youtube-nocookie.com/embed/abc"></iframe> Privacy policy (excerpt): We use Google Analytics and Google Tag Manager by Google Ireland Limited. We embed videos from YouTube. For our newsletter we use Mailchimp.

Result

Embedded, but not named in the privacy policy: Hotjar (Hotjar), Adobe Fonts (Adobe) Named in the privacy policy, but not found on the pages: Google Analytics, Mailchimp Found and named: Google Tag Manager / Google tag (Google), YouTube (Google) Each entry comes with the quote from the policy and the place on the page. Google Analytics can be loaded later through the tag manager: please check. Not legal advice.

A fixed example, shortened. Real results are AI-generated: please check them.

Price and limits

Price
usually 1–3 credits
Available with
Free, With package
Input limit
One page with up to 300,000 characters of HTML

Privacy

Processed on our own servers in the EU (Poland). Inputs and results are deleted after 7 days (Free) or 30 days (packages), or right after you see the result if you choose not to store them. Images are deleted right after processing.

In the API

Tool name: privacy_policy_match. Create a job with POST /api/v1/jobs and fetch the result with GET /api/v1/jobs/{id}. You find your API key in your account.

curl -X POST https://do4u.eu/api/v1/jobs \
  -H "Authorization: Bearer d4u_…" -H "Content-Type: application/json" \
  -d '{"tool": "privacy_policy_match", "website_url": "https://example.com/", "policy_url": "https://example.com/privacy"}'

Full API documentation →

Questions and answers

Does the check tell me whether my privacy policy is compliant?

No, this is not legal advice. Do4U compares names: which services the pages load and which ones the policy names. Art. 13(1)(e) GDPR asks for the recipients or categories of recipients, so a category can cover a service without its name. Whether your policy is complete and correct, you check yourself or with someone who gives legal advice.

Why is a service named, but not found on the pages?

The check reads the HTML the server delivers and does not run JavaScript. A service can load later, for example after consent or through a tag manager, on pages you did not enter, or be used outside the website, like a newsletter tool. The list says so neutrally: check whether you still use it.

Does the AI decide which services match?

No. The Do4U AI only lists the names in your privacy policy, each with a quote. The code checks that every quote is in the policy word for word and contains the name, and it does the comparison itself: by name, by known spellings or by the address of a server. If only the company is named, the entry is marked so that you can check it.

Is my text stored?

Only as long as needed: 7 days on Free, 30 days with a package – or not at all if you choose not to store it. Processing happens on our own servers in the EU (Poland).

Can I use the result right away?

Results are AI-generated. Please read them before you publish or send them.

Related tools

  • Third-party check

    See which third-party services a page loads and which cookies the server sets before any consent. Free, without AI.

All tools →