Skip to main content
All rules

PRV-017

Privacy policy does not mention the trackers on the site

MediumDefault severity · Privacy / Legal · Legal, privacy and consent

Last reviewed

What it checks

Trackers detected on the page against the privacy policy text (by vendor name, or at least the words analytics / advertising).

Why it matters

People must be told who receives their data (GDPR Art. 13(1)(e)); undisclosed advertising pixels are a frequent complaint to regulators.

Recommended fix

List each analytics and advertising service in the privacy policy, with what it collects.

How to verify

Read the privacy policy and confirm every tracking service is named.

Example fix prompt

Generic prompt (your report adds the evidence)
Please fix this production issue in my app.

Issue PRV-017: Privacy policy does not mention the trackers on the site
Site: https://your-app.example

First confirm the issue in the code or live config. If it is not present, say so and change nothing.
Task: Update the privacy policy to name each tracking service in the evidence, what it collects and why, and link to each provider’s privacy policy.

Constraints: make the smallest change that fixes this, keep the current design and behaviour, never paste secret values into code or chat, and tell me which files you changed.
Done when: Read the privacy policy and confirm every tracking service is named.

References

Potential compliance risk only. This is not legal advice.