Free privacy policy checker
Does your privacy policy match what your website actually does?
Most privacy policy checkers only read the text. Halvus opens your site in a real browser, records every third party that loads, then reads your policy to see whether each one is named, how long data is kept and how people can use their rights.
What we test
Every third party on your site is named
We record the analytics, advertising and other services your pages load, then check your policy names each of them.
UK/EU GDPR Art. 13(1)(e)
Retention periods are stated
We read your policy for how long each kind of personal data is kept, or how that period is decided.
UK/EU GDPR Art. 13(2)(a)
People's rights are explained
We check your policy explains access, correction, deletion and objection, and the right to complain to a regulator such as the ICO.
UK/EU GDPR Art. 13(2)(b)-(d)
'Do Not Sell or Share' link for US visitors
For businesses selling to California, we look for a clearly labelled opt-out link.
CCPA / CPRA §1798.135(a)
What your free report shows
Free
- Your Risk Score and risk band
- Pass or fail on each privacy policy test
- The law each test relates to
- Full detail and fix for 1 lower-risk issue
Paid plans
- Which third parties are missing from your policy
- The exact wording we read, and where
- Suggested wording for retention and rights
- Screenshot evidence and PDF export
How this differs from a text-only checker
| Halvus | Typical free checker | |
|---|---|---|
| Reads your privacy policy | Yes | Yes |
| Records the third parties your site really loads | Yes, in a real browser | No |
| Flags services missing from the policy | Yes | No |
| Shows the law behind each result | UK, EU, US, Canada, Australia | Rarely |
Questions
Is the privacy policy checker free?
Yes. You can scan any website once a day for free with no sign-up. Paid plans unlock full evidence, fixes and regular monitoring.
What must a privacy policy include under GDPR?
Article 13 of the UK and EU GDPR requires a privacy notice to say who you are, why and on what basis you use personal data, who receives it, how long it is kept, and what rights people have, including the right to complain to a regulator.
Do I have to name every third-party service in my privacy policy?
GDPR Article 13(1)(e) requires you to tell people the recipients or categories of recipients of their data. Halvus checks the services it sees loading on your site against your policy, so you can spot analytics or advertising tools you forgot to mention.
How is this different from a privacy policy generator?
A generator writes a template. Halvus tests the policy you already have against what your live website does, which is where most gaps appear: new tags get added and the policy is never updated.
Does it check the cookie banner too?
Yes. The same scan tests whether trackers load before consent and whether 'Reject' really stops them. See the free cookie scanner for details.
Will it tell me my privacy policy is compliant?
No. Halvus reports the risks it finds with evidence. It is not legal advice and never certifies a website or policy as compliant.
Halvus reports risks found, not legal advice.