Privacy Policy Decoder
What a privacy policy says it collects, shares, sells and keeps — with quoted evidence.
Try an example: App privacy policy (English) · Datenschutzerklärung (Deutsch)
How it works
Give the URL of a privacy policy or paste/upload its text (English or German). The decoder lists which data categories, purposes, sharing and sale practices, retention periods, user rights, laws (GDPR, CCPA/CPRA …), international transfer mechanisms and contacts the policy mentions, quotes the sentences, and points out topics it does not mention.
- The policy is split into sentences; every sentence is tested against fixed English and German keyword patterns for 7 sections: data collected, purposes, sharing & selling, rights, laws, international transfers and contact.
- An item is "mentioned" when at least one sentence matches; up to 3 matching sentences are quoted. If every matching sentence contains a negation ("we do not", "nicht", "keine"), the item is marked as negated.
- Sale of data is classified from sentences with sell/sale/verkaufen: negated sentences count as "does not sell", others as "sells or may sell"; both present = "mixed statements".
- Retention periods are durations (e.g. "7 years", "nach 7 Tagen") found in sentences about retaining, storing or deleting data; open-ended phrases like "as long as necessary" are flagged as vague.
- Children's age thresholds are numbers in phrases like "under the age of 13" / "unter 16 Jahren". "Not mentioned" means no pattern matched — not that the practice does not happen.
Rule-based keyword analysis of the policy text, not legal advice and not a compliance audit. A policy can describe practices in wording these patterns miss, and what a company does may differ from what its policy says.
Sources
- Regulation (EU) 2016/679 (General Data Protection Regulation) (EUR-Lex)
- California Consumer Privacy Act (CCPA) (State of California Department of Justice)
For scripts and AI agents
- JSON API:
POST https://privacypolicydecoder.usefulweb.site/api/v1/calculate(same calculation as this page) - Interface description: OpenAPI 3.1 · AI guide: llms.txt
- MCP server (Streamable HTTP):
https://privacypolicydecoder.usefulweb.site/mcp· tool nameprivacy_policy_decoder
Example request
curl -s -X POST https://privacypolicydecoder.usefulweb.site/api/v1/calculate \
-H 'content-type: application/json' \
-d '{…see OpenAPI examples…}'Related tools
- Before You Sign – Spot risky contract clauses (renewal, notice, liability, non-compete…) before you sign.
- Scam Signal Checker – Check a message or link for common scam and phishing warning signs — without clicking.