DPDP Scanner

Surface-level DPDP red-flag check. Every verdict traces to a section of the DPDP Act 2023 / Rules 2025. Never certifies compliance.

DPDP Scanner is a grounded, surface-level red-flag check for India's Digital Personal Data Protection Act 2023 and the DPDP Rules 2025. Open any website, reload once, and click the icon. In a few seconds you get a plain-English report of the data-protection red flags a visitor's browser can actually observe — and every single verdict is tied back to a real section of the Act or Rules. WHAT IT CHECKS (free, runs entirely in your browser) - Trackers firing before you have consented - Whether a consent/cookie banner is present, and whether rejecting is as easy as accepting - Pre-ticked consent boxes - Forms collecting personal data, and Aadhaar / PAN collection - Personal data sent over a non-secure (non-HTTPS) connection - Whether a privacy policy is actually published and reachable - Whether a grievance / DPO contact is given - Whether a language option for the notice is offered HONEST BY DESIGN - It never says "compliant." Verdicts are limited to: red flag / found / not found / couldn't check / not applicable / paid plan. - If a page or policy can't be read, it says so — it never shows a false green. - Every verdict traces to a section via an openly reviewable rubric (our own reading of the law). This is not legal advice and not a certification. OPTIONAL DEEP POLICY READ (off by default) A paid, opt-in tier reads the prose of the privacy policy (purpose, retention, consent withdrawal, data-principal rights, children, cross-border transfers, breach) using a grounded model that may answer ONLY by quoting the policy text, so it cannot invent a finding. This runs on a backend you configure yourself and stays off until you turn it on. WHO IT'S FOR Founders, product and privacy teams, and agencies who want a fast first read on where a site stands against DPDP — and a starting point for a deeper audit. PRIVACY The free checks run locally in your browser. The extension does not collect, sell, or transmit your browsing data or any personal information. The optional deep-read sends only the privacy-policy text to an endpoint you configure. Full policy: https://dpdp-scanner.netlify.app/ DISCLAIMER DPDP Scanner reports observable red flags and maps them to legal provisions for information only. It is our own interpretation of the Act and Rules, not legal advice, and it does not certify compliance.