ComplianceScope - Privacy Policy

The short version

ComplianceScope audits websites for regulatory compliance gaps (GDPR, CCPA, cookie consent). The free tier runs locally. The paid tier connects to a reporting dashboard. Anonymized crowdsourced data helps improve compliance detection for everyone.

What ComplianceScope does

ComplianceScope scans web pages for compliance issues: missing or invalid cookie consent banners, non-compliant privacy policies, pre-consent tracking, data collection without disclosure, and violations of GDPR, CCPA, and other privacy regulations. It gives you a compliance score and actionable findings.

Data collection

ComplianceScope does not collect your name, email, browsing history, or any personally identifiable information.

Free tier: all analysis runs locally. No data is transmitted beyond what is described in network activity.

Paid tier: requires an account. Compliance audit results and monitored domain configurations are synced to the Excalion dashboard. Only domain-level compliance data is stored. No personal data from the audited sites is collected.

When you opt in to crowdsourced protection, ComplianceScope contributes anonymized compliance indicators to a shared database. This includes types of violations detected and the domains where they were found. It never includes page content or anything tied to you personally.

Network activity

ComplianceScope makes network requests for:

• Regulation database updates: fetches updated compliance rules and regulation definitions
• Crowdsourced contributions (opt-in): sends anonymized compliance findings to the Excalion API
• Dashboard sync (paid tier only): syncs audit results and configurations to your Excalion dashboard

Permissions

• activeTab: to scan the current page for compliance issues
• storage: to save your preferences, audit history, and compliance rules locally
• scripting: to analyze cookie consent implementations and tracking behavior on the page

Where your data lives

Free tier: all data stays in chrome.storage.local on your device.

Paid tier: audit results and monitored domain configurations are stored on the Excalion platform, associated with your account. Local preferences remain in chrome.storage.local.

If you uninstall the extension, local data is deleted automatically by Chrome. Dashboard data can be deleted from your account settings.

Third-party services

The paid tier syncs data to the Excalion platform under your account. No data is shared with any other third party.

Cookies and tracking

ComplianceScope does not use cookies and does not track you in any way.

Supported browsers

ComplianceScope works on Chrome, Edge, and Brave. This privacy policy applies equally to all supported browsers.

Changes to this policy

Any changes will be reflected in extension updates. The date at the top of this page will be updated accordingly.

Contact

For questions about this privacy policy: hello@excalion.io