Internet, AI & productivity

Privacy Policy Decoder

What a privacy policy says it collects, shares, sells and keeps — with quoted evidence.

Paste the text here, or use one of the other options below (exactly one).

TXT, PDF, DOCX, HTML or a photo/scan (PNG/JPG, read with OCR). Max 5 MiB.

A public http(s) address. The page text is fetched once and analysed.

Try an example: App privacy policy (English) · Datenschutzerklärung (Deutsch)

How it works

Give the URL of a privacy policy or paste/upload its text (English or German). The decoder lists which data categories, purposes, sharing and sale practices, retention periods, user rights, laws (GDPR, CCPA/CPRA …), international transfer mechanisms and contacts the policy mentions, quotes the sentences, and points out topics it does not mention.

  • The policy is split into sentences; every sentence is tested against fixed English and German keyword patterns for 7 sections: data collected, purposes, sharing & selling, rights, laws, international transfers and contact.
  • An item is "mentioned" when at least one sentence matches; up to 3 matching sentences are quoted. If every matching sentence contains a negation ("we do not", "nicht", "keine"), the item is marked as negated.
  • Sale of data is classified from sentences with sell/sale/verkaufen: negated sentences count as "does not sell", others as "sells or may sell"; both present = "mixed statements".
  • Retention periods are durations (e.g. "7 years", "nach 7 Tagen") found in sentences about retaining, storing or deleting data; open-ended phrases like "as long as necessary" are flagged as vague.
  • Children's age thresholds are numbers in phrases like "under the age of 13" / "unter 16 Jahren". "Not mentioned" means no pattern matched — not that the practice does not happen.

Rule-based keyword analysis of the policy text, not legal advice and not a compliance audit. A policy can describe practices in wording these patterns miss, and what a company does may differ from what its policy says.

Sources

For scripts and AI agents

  • JSON API: POST https://privacypolicydecoder.usefulweb.site/api/v1/calculate (same calculation as this page)
  • Interface description: OpenAPI 3.1 · AI guide: llms.txt
  • MCP server (Streamable HTTP): https://privacypolicydecoder.usefulweb.site/mcp · tool name privacy_policy_decoder
Example request
curl -s -X POST https://privacypolicydecoder.usefulweb.site/api/v1/calculate \
  -H 'content-type: application/json' \
  -d '{…see OpenAPI examples…}'

Related tools

  • Before You Sign – Spot risky contract clauses (renewal, notice, liability, non-compete…) before you sign.
  • Scam Signal Checker – Check a message or link for common scam and phishing warning signs — without clicking.
Feedback