Evaluate the privacy risk of your website or app by answering questions about data collection and processing practices.
Privacy Risk Assessor asks you a structured set of questions about how your website or app collects and processes personal data, then evaluates the privacy risk of the practices you describe. The assessment runs entirely on your answers - it does not scan, crawl, or inspect your site. That is the surprise most people hit: they expect a technical audit, but the tool can only evaluate what you tell it, so the result is only as accurate as your answers. Bring whoever knows your actual data flows, or the output will reflect the description, not the reality.
Each question asks you to describe a data practice: what categories of personal data the site or app handles, and how that data is processed. Your answers are the only input. The tool does not verify them against the site itself, so the evaluation reflects the practices as described, not as implemented.
The tool weighs the practices you report and returns an evaluation of the resulting privacy risk. Treat the result as a structured assessment of the data practices you described, useful for comparing scenarios and prompting discussion - not as a legal opinion or a certification that the site complies with any particular privacy law.
No. The tool works from the answers you give to its questions; it does not crawl or inspect your site, its code, or its network traffic. If you want an assessment of what the site really does, someone who knows the actual data flows has to answer the questions honestly, including the parts you would rather not admit.
No. The tool evaluates the privacy risk of the practices you describe; it is not a legal review, and its result does not establish compliance with any specific law. Treat a favorable result as a signal that the practices you described look reasonable, then have the actual implementation and any contracts reviewed against the laws that apply to you, such as the GDPR, CCPA, or other regulations.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.