Compliance and privacy

What we look at

• What is written into the browser before any interaction: we load the page without clicking anything, and record what is already there.
• The consent mechanism as it works, not as it announces itself: refusing must be as simple as accepting.
• Every third-party recipient of the visit, named and classified: audience measurement, tag manager, advertising, social networks, fonts, bot protection, maps, video.
• The information French law requires you to display about the publisher, the host and the publication director.
• The privacy policy: whether it exists, and which processing, purposes and rights it sets out.
• Heightened surveillance devices: session recording, which replays a visitor’s navigation, and browser fingerprinting, which needs no cookie.

What it changes for you

The most common fault is also the simplest to establish from outside: trackers set before the visitor has answered anything at all. A consent banner can be perfectly worded and perfectly ineffective.

These failures are visible from any browser, to anyone: a competitor, an unhappy customer, an association. That is what sets them apart from a theoretical risk.

The weight of this pillar

An overall score has to weigh what matters for your business: the 9 pillars do not carry the same weight depending on what your site is for. Here is what “compliance and privacy” represents in the overall score, under each weighting. The report always states which one produced your score.