PolicyLens by NOCTARX

Analyze Privacy Policies, T&C, and Cookies instantly. Red flags, plain English summaries, cookie manager & breach alerts.

PolicyLens — Privacy Policy Analyzer, Cookie Manager & Data Safety Scanner by NOCTARX Stop blindly agreeing to privacy policies. PolicyLens instantly reads, scores, and explains the privacy policy, terms of service, and cookie practices of every website you visit — in plain English, in seconds, without leaving your browser. WHAT IS POLICYLENS? PolicyLens is a privacy analysis engine built into your browser. Every time you visit a website, it automatically fetches the privacy policy and terms of service, runs them through a 400+ clause analysis engine, and gives you a clear privacy score from 0 to 100 with a letter grade (A through F). You see exactly what the company does with your data — before you sign up, before you share anything. No account required. No data sent to servers. Everything runs locally in your browser. KEY FEATURES PRIVACY POLICY ANALYZER — INSTANT SCORE & GRADE PolicyLens reads privacy policies so you don't have to. Every analysis produces a 0–100 privacy score with an A–F letter grade. The score is calculated by a multi-layer engine that detects 400+ privacy clauses across red flags, warnings, and good signs — with severity weighting, negation detection, and regulatory compliance checks (GDPR, CCPA, HIPAA, COPPA). Results appear in seconds, right in the extension popup. 400+ CLAUSE PATTERN LIBRARY — DEEP ANALYSIS ENGINE The analysis engine checks for 25+ categories of privacy risk including: data selling to third parties, biometric data collection (fingerprints, face recognition, voiceprints), voice and audio recording, precise GPS location tracking, children's data collection, cross-site behavioral tracking, device fingerprinting, AI model training on your data, indefinite data retention, irrevocable content licences, sharing with advertisers and data brokers, government data disclosure, automated profiling, health and medical data, financial data, and special-category sensitive data (sexual orientation, religion, race, political views). Every finding comes with a plain-English explanation and an actionable tip. NEGATION ENGINE — NO FALSE POSITIVES Unlike basic keyword scanners, PolicyLens understands context. If a policy says "we do NOT sell your data," the negation engine detects this and correctly classifies it as a good sign, not a red flag. Opt-out clauses are automatically detected and downgraded from red flags to yellow warnings. Double-negation handling prevents false results. CLICK-TO-HIGHLIGHT — SEE THE EXACT SENTENCE Every finding in the popup includes a quoted context snippet — the exact sentence from the policy that triggered it. Click "Show on page" and PolicyLens scrolls directly to that sentence on the policy page and highlights it in yellow. Know exactly where every red flag comes from, word for word. SCORE BREAKDOWN DONUT CHART The popup shows an animated SVG donut chart that visualizes the composition of your privacy score — how many red flags, warnings, and good signs were found, and how they balance against each other. See the full picture at a glance. COOKIE BANNER MANAGER — AUTO-REJECT & CATEGORIZE PolicyLens detects cookie consent banners using 17 detection patterns with multilingual support (English, German, French, Spanish, Italian, Dutch, Swedish). It classifies every button on the banner into: Reject / Essential Only / Manage / Accept. • Auto-Reject Mode: Automatically clicks the reject or decline button before you even see the banner • Auto-Safe Mode: Automatically accepts essential-only cookies while rejecting advertising trackers • Cookie Category Toggles: See and control 6 cookie categories — Essential, Functional, Analytics, Advertising, Social Media, Third-Party Embedded — each with a risk rating and plain-English recommendation • Highlight Banner: Visually locate the cookie banner on the current page TERMS & CONDITIONS CHECKER — 9-CLAUSE ANALYSIS The T&C tab runs 9 structured checks on the terms of service covering: data collection practices, account requirements, payment and billing terms, cookie and tracking usage, third-party data sharing, your legal data rights (GDPR/CCPA), security measures, term change policies, and legal dispute/arbitration clauses. Each check shows a clear verdict with explanation. ACTIONABLE PRIVACY TIPS The Tips tab shows context-driven advice that only appears when relevant. Each tip includes specific browser settings paths, tool recommendations (such as browser extensions to install), and legal rights you can exercise. Topics include data selling opt-outs, location permission settings, biometric data rights, AI training opt-outs, arbitration clause implications, auto-renewal billing, and data deletion requests under GDPR and CCPA. INSTANT TRUST DATABASE — 356+ MAJOR SITES For 356+ major domains spanning search, social media, shopping, streaming, and productivity tools, PolicyLens shows an instant pre-analysed trust score before any live scan runs. Each trust entry includes a grade, key issues, and good points based on published policy reviews. POLICY CHANGE DETECTION — KNOW WHEN TERMS CHANGE PolicyLens stores a snapshot of every policy it reads. When you return to a site, it compares the current policy to your last-seen version and alerts you if anything has changed. Change severity is classified as Minor, Moderate, or Major based on the language that was added or removed. Never be surprised by silent policy updates again. EMAIL BREACH CHECKER — HAVEIBEENPWNED INTEGRATION Check whether your email address has appeared in any known data breaches using the HaveIBeenPwned k-anonymity API. Only the first 5 characters of a SHA-1 hash of your email are ever sent — your real email address never leaves your device. Results show breach name, date, affected record count, and data categories exposed. AI ANALYSIS TAB — DEEP POLICY INTERPRETATION The AI tab provides extended natural language interpretation of policy language, identifying nuanced clauses, deliberate vagueness, and implications that pattern matching alone cannot catch. Especially useful for policies using unusual or evasive legal language. PLAIN-ENGLISH SUMMARY The Summary tab produces a plain-English verdict answering the question "Is this privacy policy okay?" — with an overall assessment, the 3 most important concerns or positives, and immediate actions you can take. IN-POPUP REPORT FORM — POWERED BY FORMSPREE Found a wrong result? Missed policy? False flag? The Report tab lets you send structured feedback directly to NOCTARX without leaving the popup. The form auto-fills the current URL, analysis score, and extension version. Your report goes straight to the NOCTARX team for review. Every report improves the analysis engine for all users. EXPORT — PDF, COPY, SHARE • PDF Export: Generate a full print-ready privacy report with all findings, score breakdown, and NOCTARX branding — ready to save, share, or file • Copy: Copy the complete analysis to your clipboard as formatted text • Share: Use the Web Share API to share results via any app on your device FULL SETTINGS PANEL Control every aspect of PolicyLens from the popup footer: • Auto Policy Scan — toggle background scanning on/off • Auto-Reject Cookies — automatically decline cookie banners • Auto Safe Cookies — accept essential cookies only • Cookie Banner Alerts — get notified when a banner is detected • Trust Database — toggle the instant 356-domain lookup • Browser Notifications — get notified about risky policies • Policy History Log — view all sites you have analyzed with their scores • Site Comparison Chart — compare privacy scores across sites KEYBOARD SHORTCUT Press Ctrl+Shift+Y (Windows/Linux) or Cmd+Shift+Y (Mac) to open PolicyLens instantly from any page. WHAT DOES POLICYLENS COLLECT? PolicyLens is built privacy-first. Here is exactly what happens with your data: Analysis runs entirely in your browser — no policy text is sent to NOCTARX No account required — ever No browsing history collected No personal data sent to NOCTARX servers Settings and cached scores stored locally using Chrome's built-in storage API Email breach check uses k-anonymity — only 5 hash characters sent, never your real email Report form submissions are optional and only sent when you click Send External API calls made during analysis (only when needed): • tosdr.org — fetches community-reviewed grades by domain name only • privacyspy.org — fetches aggregated privacy scores by domain name only • haveibeenpwned.com — breach check using k-anonymity hash prefix only • translate.googleapis.com — translates non-English policies (ASCII ratio check first) • formspree.io — only when you explicitly submit a bug report Full privacy policy: https://noctarx-projects.github.io/Policylens-privacy-policy/ HOW IT WORKS — TECHNICAL OVERVIEW PolicyLens uses a 5-layer text extraction pipeline to retrieve policy text from any website: 1. Direct HTTPS fetch with content extraction 2. Readability-style DOM parsing 3. Live tab content injection 4. Shadow DOM piercing with priority selector fallback 5. JSON-LD structured data extraction The extracted text is run through: • 400+ regex pattern clauses with severity levels 1–4 • TF-IDF density weighting (repeated clauses score higher) • Bidirectional negation engine (lookahead + lookbehind) • GDPR/CCPA/HIPAA/COPPA compliance cross-check • ToS;DR community grade blending (25% weight) • PrivacySpy database blending • Clause correlation engine (detects dangerous co-occurrences) • Category penalty caps (prevents over-penalisation from similar clauses) • Confidence scoring based on text quality and pattern specificity PRIVACY SCORE GUIDE A (90–100) — Excellent privacy practices. Strong commitments, minimal data collection, independent audits. B (75–89) — Good. Above average with minor issues but no severe violations. C (55–74) — Fair. Mixed signals — some concerns balanced by positive practices. D (35–54) — Poor. Several significant issues. Review carefully before sharing data. F (0–34) — Dangerous. Critical violations likely: data selling, biometrics, indefinite retention. WHAT POLICYLENS DETECTS — RED FLAG CATEGORIES Critical (highest severity): • Sale of personal data to third parties or data brokers • Biometric data collection (fingerprints, face templates, voiceprints, iris scans) • Voice and audio recording, always-on microphone • Precise GPS location tracking and background location access • Children's data collection (COPPA violations) • Health and medical data collection and inference • Special-category data (sexual orientation, religion, race, political views) • Sale or transfer of your account to third parties • Sale of children's data to third parties High severity warnings: • Cross-site and cross-device behavioral tracking • Device fingerprinting (canvas, browser, audio, font) • Use of your content or data to train AI/ML models • Indefinite data retention — no fixed deletion timeline • Data retained after account deletion • Irrevocable perpetual licence on your uploaded content • Sharing personal data with advertising networks and DSPs • Government and law enforcement data disclosure • Preventing you from deleting your account or data • Detailed user profile building and psychographic inference • Location history sharing with third parties • Retargeting and remarketing tracking Good signs detected: • Explicit "never sells your data" commitment • End-to-end encryption • Zero-knowledge architecture • Independent security audits (SOC 2, ISO 27001) • Right to delete your account and data • You own your content • Named regulatory compliance (GDPR, CCPA, HIPAA) • Data Protection Officer (DPO) present • No advertising or ad targeting • Data portability and export options • Breach notification commitment • Minimal data collection principle • Do Not Track and Global Privacy Control support • Transparency reports published PERMISSIONS EXPLAINED PolicyLens requests only what it needs: • activeTab & tabs — Read the current page URL to detect the site and its policy links • scripting — Inject the toast overlay and cookie banner detector into pages • storage — Save analysis results, settings, and policy snapshots locally on your device • notifications — Show optional browser alerts for risky policies and cookie banners • clipboardWrite — Copy analysis results to your clipboard when you click Copy • windows — Open the PDF export report in a new browser window • alarms — Keep the background service worker alive for reliable auto-scanning • host_permissions (<all_urls>) — Fetch policy text from any website's privacy policy URL LINKS Privacy Policy: https://noctarx-projects.github.io/Policylens-privacy-policy/ Blog & Updates: https://noctarx.blogspot.com/ GitHub: https://github.com/NOCTARX-projects Support NOCTARX: https://www.buymeacoffee.com/noctarxcorp Report an Issue: Use the Report tab inside PolicyLens or open a GitHub issue Built by NOCTARX — a cybersecurity-focused technology lab building secure, privacy-first software. PolicyLens v2.0 | Chrome Extension | Manifest V3 | All analysis runs locally in your browser.