Free lightweight tool, no login required

Free CCPA / CPRA Compliance Checker

Run a first-pass California privacy review. We look for a privacy policy, visible opt-out routes, advertising-style tracking signals, and baseline CCPA / CPRA disclosure language.

What this checks: This is a California-focused disclosure and opt-out scanner. It looks for privacy-policy presence, sale/share opt-out signals, advertising-style tracking, and whether the page exposes baseline CCPA / CPRA cues like privacy choices or GPC-related language.

How to Read These Results

This checker focuses on California privacy cues that users, regulators, and enterprise buyers often look for first: can they find the policy, can they find an opt-out route, and does the page's visible tracking behavior make those disclosures feel credible?

A warning here does not automatically mean the site is in violation. It means the static scan found disclosure, opt-out, or tracking signals that deserve closer review in business context. For the broader context, read our CCPA website compliance checklist, our CPRA requirements guide, and our Global Privacy Control guide.

What This Tool Checks

  • Whether the scanned page exposes a clear privacy-policy link
  • Whether there is an obvious California opt-out or privacy-choices path
  • Whether advertising-style tracking signals are visible on the page
  • Whether the page or linked policy exposes baseline CCPA / CPRA and GPC language

If you need deeper runtime verification, real GPC testing, or cross-page review, follow this with the full privacy audit.

Related Tools and Guides

Need a deeper California privacy review?

California privacy reviews are stronger when policy, opt-out language, consent behavior, cookies, and vendor signals are evaluated together in one browser-level report.

For deeper runtime checks, run the full privacy audit →

Frequently Asked Questions

Does this tool prove CCPA or CPRA compliance?+
No. It is a baseline signal review. It helps you see whether the visible page-level disclosures and opt-out cues are in the right direction, but it does not replace legal or operational review.
What does California care about that GDPR does not emphasize the same way?+
California puts a strong practical emphasis on consumer rights, sale/share opt-out paths, and signals like Global Privacy Control. That makes opt-out discoverability a central part of the review.
Why does advertising tracking matter in this check?+
Because visible cross-context advertising or retargeting behavior raises the expectation that users can find a clear privacy choices or Do Not Sell or Share path.
Can this tool test real GPC handling?+
Not fully. This checker looks for GPC-related language and opt-out signals. Real browser-level GPC handling is better verified in the extension and deeper audit path.
What should I do if this tool flags missing opt-out signals?+
Make the privacy policy and privacy choices path easier to find, tighten California-specific language, and review whether your tracking behavior is stronger than the disclosure and opt-out story around it.