@etalon/core 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,3755 @@
1
+ {
2
+ "version": "2.0.0",
3
+ "last_updated": "2026-02-11T10:00:00Z",
4
+ "vendors": [
5
+ {
6
+ "id": "ab-tasty",
7
+ "domains": [
8
+ "abtasty.com",
9
+ "try.abtasty.com"
10
+ ],
11
+ "name": "AB Tasty",
12
+ "company": "AB Tasty",
13
+ "category": "ab_testing",
14
+ "gdpr_compliant": true,
15
+ "privacy_policy": "https://www.abtasty.com/privacy-policy/",
16
+ "purpose": "A/B testing and personalization",
17
+ "data_collected": [
18
+ "cookies",
19
+ "click data",
20
+ "page views"
21
+ ],
22
+ "risk_score": 3,
23
+ "alternatives": [
24
+ "vwo",
25
+ "optimizely"
26
+ ]
27
+ },
28
+ {
29
+ "id": "acuity",
30
+ "domains": [
31
+ "acuityscheduling.com",
32
+ "*.acuityscheduling.com"
33
+ ],
34
+ "name": "Acuity Scheduling",
35
+ "company": "Squarespace Inc.",
36
+ "category": "booking",
37
+ "gdpr_compliant": true,
38
+ "privacy_policy": "https://www.squarespace.com/privacy",
39
+ "purpose": "Online appointment scheduling",
40
+ "data_collected": [
41
+ "name",
42
+ "email",
43
+ "appointment data"
44
+ ],
45
+ "risk_score": 3,
46
+ "alternatives": [
47
+ "calendly"
48
+ ]
49
+ },
50
+ {
51
+ "id": "addtoany",
52
+ "domains": [
53
+ "addtoany.com",
54
+ "static.addtoany.com"
55
+ ],
56
+ "name": "AddToAny",
57
+ "company": "AddToAny",
58
+ "category": "social",
59
+ "gdpr_compliant": true,
60
+ "privacy_policy": "https://www.addtoany.com/privacy",
61
+ "purpose": "Social sharing buttons",
62
+ "data_collected": [
63
+ "share clicks",
64
+ "page URLs"
65
+ ],
66
+ "risk_score": 3,
67
+ "alternatives": [
68
+ "sharethis"
69
+ ]
70
+ },
71
+ {
72
+ "id": "adobe-analytics",
73
+ "domains": [
74
+ "omtrdc.net",
75
+ "demdex.net",
76
+ "2o7.net",
77
+ "sc.omtrdc.net"
78
+ ],
79
+ "name": "Adobe Analytics",
80
+ "company": "Adobe Inc.",
81
+ "category": "analytics",
82
+ "gdpr_compliant": true,
83
+ "dpa_url": "https://www.adobe.com/privacy/eu-dpa.html",
84
+ "purpose": "Enterprise web analytics",
85
+ "data_collected": [
86
+ "cookies",
87
+ "page views",
88
+ "user interactions",
89
+ "conversions"
90
+ ],
91
+ "risk_score": 4
92
+ },
93
+ {
94
+ "id": "adobe-launch",
95
+ "domains": [
96
+ "adobedtm.com",
97
+ "assets.adobedtm.com",
98
+ "launch.adobe.com"
99
+ ],
100
+ "name": "Adobe Launch",
101
+ "company": "Adobe Inc.",
102
+ "category": "tag_manager",
103
+ "gdpr_compliant": true,
104
+ "privacy_policy": "https://www.adobe.com/privacy/policy.html",
105
+ "purpose": "Tag management within Adobe Experience Platform",
106
+ "data_collected": [
107
+ "page views",
108
+ "events",
109
+ "rules"
110
+ ],
111
+ "risk_score": 4,
112
+ "alternatives": [
113
+ "google-tag-manager",
114
+ "tealium"
115
+ ]
116
+ },
117
+ {
118
+ "id": "adobe-target",
119
+ "domains": [
120
+ "tt.omtrdc.net",
121
+ "mboxedge.tt.omtrdc.net"
122
+ ],
123
+ "name": "Adobe Target",
124
+ "company": "Adobe Inc.",
125
+ "category": "ab_testing",
126
+ "gdpr_compliant": true,
127
+ "purpose": "A/B testing and personalization",
128
+ "data_collected": [
129
+ "experiment assignments",
130
+ "user interactions"
131
+ ],
132
+ "risk_score": 3
133
+ },
134
+ {
135
+ "id": "adroll",
136
+ "domains": [
137
+ "adroll.com",
138
+ "d.adroll.com",
139
+ "s.adroll.com"
140
+ ],
141
+ "name": "AdRoll",
142
+ "company": "NextRoll Inc.",
143
+ "category": "advertising",
144
+ "gdpr_compliant": true,
145
+ "purpose": "Retargeting and display advertising",
146
+ "data_collected": [
147
+ "cookies",
148
+ "browsing behavior"
149
+ ],
150
+ "risk_score": 6
151
+ },
152
+ {
153
+ "id": "airship",
154
+ "domains": [
155
+ "airship.com",
156
+ "*.urbanairship.com"
157
+ ],
158
+ "name": "Airship",
159
+ "company": "Airship Group Inc.",
160
+ "category": "push",
161
+ "gdpr_compliant": true,
162
+ "privacy_policy": "https://www.airship.com/legal/privacy-center/",
163
+ "purpose": "Customer engagement and push notifications",
164
+ "data_collected": [
165
+ "device data",
166
+ "engagement",
167
+ "user attributes"
168
+ ],
169
+ "risk_score": 4,
170
+ "alternatives": [
171
+ "onesignal"
172
+ ]
173
+ },
174
+ {
175
+ "id": "akamai",
176
+ "domains": [
177
+ "akamaized.net",
178
+ "akamai.net",
179
+ "akstat.io"
180
+ ],
181
+ "name": "Akamai",
182
+ "company": "Akamai Technologies Inc.",
183
+ "category": "cdn",
184
+ "gdpr_compliant": true,
185
+ "purpose": "CDN and web security",
186
+ "data_collected": [
187
+ "IP address",
188
+ "request headers"
189
+ ],
190
+ "risk_score": 1
191
+ },
192
+ {
193
+ "id": "amazon-ads",
194
+ "domains": [
195
+ "amazon-adsystem.com",
196
+ "aax.amazon-adsystem.com",
197
+ "z-na.amazon-adsystem.com"
198
+ ],
199
+ "name": "Amazon Advertising",
200
+ "company": "Amazon.com Inc.",
201
+ "category": "advertising",
202
+ "gdpr_compliant": true,
203
+ "purpose": "Advertising and conversion tracking",
204
+ "data_collected": [
205
+ "cookies",
206
+ "conversion data"
207
+ ],
208
+ "risk_score": 5
209
+ },
210
+ {
211
+ "id": "amplitude",
212
+ "domains": [
213
+ "api.amplitude.com",
214
+ "cdn.amplitude.com",
215
+ "amplitude.com"
216
+ ],
217
+ "name": "Amplitude",
218
+ "company": "Amplitude Inc.",
219
+ "category": "analytics",
220
+ "gdpr_compliant": true,
221
+ "dpa_url": "https://amplitude.com/dpa",
222
+ "privacy_policy": "https://amplitude.com/privacy",
223
+ "purpose": "Product analytics and behavioral tracking",
224
+ "data_collected": [
225
+ "events",
226
+ "user properties",
227
+ "device info"
228
+ ],
229
+ "risk_score": 3,
230
+ "alternatives": [
231
+ "posthog",
232
+ "mixpanel"
233
+ ]
234
+ },
235
+ {
236
+ "id": "anchor",
237
+ "domains": [
238
+ "anchor.fm",
239
+ "*.anchor.fm"
240
+ ],
241
+ "name": "Anchor/Spotify for Podcasters",
242
+ "company": "Spotify AB",
243
+ "category": "video",
244
+ "gdpr_compliant": true,
245
+ "privacy_policy": "https://www.spotify.com/legal/privacy-policy/",
246
+ "purpose": "Podcast creation and hosting",
247
+ "data_collected": [
248
+ "listening data",
249
+ "IP address"
250
+ ],
251
+ "risk_score": 4,
252
+ "alternatives": [
253
+ "libsyn"
254
+ ]
255
+ },
256
+ {
257
+ "id": "apollo",
258
+ "domains": [
259
+ "apollo.io",
260
+ "*.apollo.io",
261
+ "app.apollo.io"
262
+ ],
263
+ "name": "Apollo.io",
264
+ "company": "Apollo.io Inc.",
265
+ "category": "b2b_intelligence",
266
+ "gdpr_compliant": true,
267
+ "privacy_policy": "https://www.apollo.io/privacy-policy/",
268
+ "purpose": "B2B sales intelligence and engagement",
269
+ "data_collected": [
270
+ "contact info",
271
+ "company data",
272
+ "engagement data"
273
+ ],
274
+ "risk_score": 6,
275
+ "alternatives": [
276
+ "lusha"
277
+ ]
278
+ },
279
+ {
280
+ "id": "aws-cloudfront",
281
+ "domains": [
282
+ "cloudfront.net"
283
+ ],
284
+ "name": "AWS CloudFront",
285
+ "company": "Amazon Web Services Inc.",
286
+ "category": "cdn",
287
+ "gdpr_compliant": true,
288
+ "dpa_url": "https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf",
289
+ "purpose": "Content delivery network",
290
+ "data_collected": [
291
+ "IP address",
292
+ "request headers"
293
+ ],
294
+ "risk_score": 1
295
+ },
296
+ {
297
+ "id": "biocatch",
298
+ "domains": [
299
+ "biocatch.com",
300
+ "*.biocatch.com"
301
+ ],
302
+ "name": "BioCatch",
303
+ "company": "BioCatch Ltd.",
304
+ "category": "security",
305
+ "gdpr_compliant": true,
306
+ "privacy_policy": "https://www.biocatch.com/privacy-policy",
307
+ "purpose": "Behavioral biometric authentication and fraud detection",
308
+ "data_collected": [
309
+ "keystroke dynamics",
310
+ "mouse movements",
311
+ "device orientation",
312
+ "behavioral patterns"
313
+ ],
314
+ "risk_score": 8,
315
+ "alternatives": []
316
+ },
317
+ {
318
+ "id": "braintree",
319
+ "domains": [
320
+ "braintreegateway.com",
321
+ "braintree-api.com",
322
+ "assets.braintreegateway.com"
323
+ ],
324
+ "name": "Braintree",
325
+ "company": "PayPal Holdings Inc.",
326
+ "category": "payments",
327
+ "gdpr_compliant": true,
328
+ "purpose": "Payment processing",
329
+ "data_collected": [
330
+ "payment information"
331
+ ],
332
+ "risk_score": 2
333
+ },
334
+ {
335
+ "id": "bugsnag",
336
+ "domains": [
337
+ "bugsnag.com",
338
+ "notify.bugsnag.com",
339
+ "sessions.bugsnag.com"
340
+ ],
341
+ "name": "Bugsnag",
342
+ "company": "SmartBear Software Inc.",
343
+ "category": "error_tracking",
344
+ "gdpr_compliant": true,
345
+ "purpose": "Error monitoring and stability management",
346
+ "data_collected": [
347
+ "error data",
348
+ "device info"
349
+ ],
350
+ "risk_score": 2
351
+ },
352
+ {
353
+ "id": "bunny-fonts",
354
+ "domains": [
355
+ "fonts.bunny.net"
356
+ ],
357
+ "name": "Bunny Fonts",
358
+ "company": "BunnyWay d.o.o.",
359
+ "category": "fonts",
360
+ "gdpr_compliant": true,
361
+ "privacy_policy": "https://bunny.net/privacy",
362
+ "purpose": "Privacy-friendly Google Fonts alternative",
363
+ "data_collected": [],
364
+ "risk_score": 1
365
+ },
366
+ {
367
+ "id": "calendly",
368
+ "domains": [
369
+ "calendly.com",
370
+ "assets.calendly.com"
371
+ ],
372
+ "name": "Calendly",
373
+ "company": "Calendly LLC",
374
+ "category": "other",
375
+ "gdpr_compliant": true,
376
+ "purpose": "Scheduling and booking widget",
377
+ "data_collected": [
378
+ "name",
379
+ "email",
380
+ "scheduling data"
381
+ ],
382
+ "risk_score": 2
383
+ },
384
+ {
385
+ "id": "chili-piper",
386
+ "domains": [
387
+ "chilipiper.com",
388
+ "*.chilipiper.com"
389
+ ],
390
+ "name": "Chili Piper",
391
+ "company": "Chili Piper Inc.",
392
+ "category": "booking",
393
+ "gdpr_compliant": true,
394
+ "privacy_policy": "https://www.chilipiper.com/privacy-policy",
395
+ "purpose": "B2B meeting scheduling and routing",
396
+ "data_collected": [
397
+ "name",
398
+ "email",
399
+ "company data",
400
+ "calendar events"
401
+ ],
402
+ "risk_score": 4,
403
+ "alternatives": [
404
+ "calendly"
405
+ ]
406
+ },
407
+ {
408
+ "id": "cj-affiliate",
409
+ "domains": [
410
+ "cj.com",
411
+ "*.cj.com",
412
+ "commission-junction.com"
413
+ ],
414
+ "name": "CJ Affiliate",
415
+ "company": "Publicis Groupe",
416
+ "category": "referral",
417
+ "gdpr_compliant": true,
418
+ "privacy_policy": "https://www.cj.com/legal/privacy-policy",
419
+ "purpose": "Affiliate marketing network",
420
+ "data_collected": [
421
+ "cookies",
422
+ "clicks",
423
+ "conversions"
424
+ ],
425
+ "risk_score": 5,
426
+ "alternatives": [
427
+ "shareasale",
428
+ "impact"
429
+ ]
430
+ },
431
+ {
432
+ "id": "clearbit",
433
+ "domains": [
434
+ "clearbit.com",
435
+ "*.clearbit.com",
436
+ "x.clearbitjs.com"
437
+ ],
438
+ "name": "Clearbit",
439
+ "company": "HubSpot Inc.",
440
+ "category": "b2b_intelligence",
441
+ "gdpr_compliant": true,
442
+ "privacy_policy": "https://clearbit.com/privacy",
443
+ "purpose": "B2B data enrichment and visitor identification",
444
+ "data_collected": [
445
+ "company data",
446
+ "IP-based identification",
447
+ "firmographic data"
448
+ ],
449
+ "risk_score": 6,
450
+ "alternatives": [
451
+ "apollo"
452
+ ]
453
+ },
454
+ {
455
+ "id": "clevertap",
456
+ "domains": [
457
+ "clevertap.com",
458
+ "*.wzrkt.com"
459
+ ],
460
+ "name": "CleverTap",
461
+ "company": "CleverTap Pvt. Ltd.",
462
+ "category": "push",
463
+ "gdpr_compliant": true,
464
+ "privacy_policy": "https://clevertap.com/privacy-policy/",
465
+ "purpose": "Customer retention and engagement platform",
466
+ "data_collected": [
467
+ "user profiles",
468
+ "events",
469
+ "push tokens"
470
+ ],
471
+ "risk_score": 5,
472
+ "alternatives": [
473
+ "moengage"
474
+ ]
475
+ },
476
+ {
477
+ "id": "cloudflare",
478
+ "domains": [
479
+ "cloudflare.com",
480
+ "cdnjs.cloudflare.com",
481
+ "challenges.cloudflare.com",
482
+ "static.cloudflareinsights.com"
483
+ ],
484
+ "name": "Cloudflare",
485
+ "company": "Cloudflare Inc.",
486
+ "category": "cdn",
487
+ "gdpr_compliant": true,
488
+ "dpa_url": "https://www.cloudflare.com/cloudflare-customer-dpa/",
489
+ "privacy_policy": "https://www.cloudflare.com/privacypolicy/",
490
+ "purpose": "CDN, DDoS protection, and web analytics",
491
+ "data_collected": [
492
+ "IP address",
493
+ "request headers"
494
+ ],
495
+ "risk_score": 1
496
+ },
497
+ {
498
+ "id": "cloudflare-turnstile",
499
+ "domains": [
500
+ "challenges.cloudflare.com/turnstile"
501
+ ],
502
+ "name": "Cloudflare Turnstile",
503
+ "company": "Cloudflare Inc.",
504
+ "category": "security",
505
+ "gdpr_compliant": true,
506
+ "purpose": "CAPTCHA alternative for bot protection",
507
+ "data_collected": [
508
+ "browser signals"
509
+ ],
510
+ "risk_score": 1
511
+ },
512
+ {
513
+ "id": "cognito-forms",
514
+ "domains": [
515
+ "cognitoforms.com",
516
+ "*.cognitoforms.com"
517
+ ],
518
+ "name": "Cognito Forms",
519
+ "company": "Cognito LLC",
520
+ "category": "forms",
521
+ "gdpr_compliant": true,
522
+ "privacy_policy": "https://www.cognitoforms.com/policies/privacy",
523
+ "purpose": "Form builder with payment processing",
524
+ "data_collected": [
525
+ "form responses",
526
+ "payment data"
527
+ ],
528
+ "risk_score": 3,
529
+ "alternatives": [
530
+ "jotform"
531
+ ]
532
+ },
533
+ {
534
+ "id": "commanders-act",
535
+ "domains": [
536
+ "commandersact.com",
537
+ "cdn.tagcommander.com"
538
+ ],
539
+ "name": "Commanders Act",
540
+ "company": "Commanders Act",
541
+ "category": "tag_manager",
542
+ "gdpr_compliant": true,
543
+ "privacy_policy": "https://www.commandersact.com/en/privacy/",
544
+ "purpose": "European tag management and customer data platform",
545
+ "data_collected": [
546
+ "events",
547
+ "page views"
548
+ ],
549
+ "risk_score": 3,
550
+ "alternatives": [
551
+ "tealium"
552
+ ]
553
+ },
554
+ {
555
+ "id": "convert",
556
+ "domains": [
557
+ "convert.com",
558
+ "cdn-4.convertexperiments.com"
559
+ ],
560
+ "name": "Convert",
561
+ "company": "Convert Insights Inc.",
562
+ "category": "ab_testing",
563
+ "gdpr_compliant": true,
564
+ "privacy_policy": "https://www.convert.com/privacy-policy/",
565
+ "purpose": "Privacy-focused A/B testing",
566
+ "data_collected": [
567
+ "cookies",
568
+ "events"
569
+ ],
570
+ "risk_score": 2,
571
+ "alternatives": [
572
+ "vwo"
573
+ ]
574
+ },
575
+ {
576
+ "id": "cookiebot",
577
+ "domains": [
578
+ "cookiebot.com",
579
+ "consent.cookiebot.com",
580
+ "consentcdn.cookiebot.com"
581
+ ],
582
+ "name": "Cookiebot",
583
+ "company": "Usercentrics A/S",
584
+ "category": "consent",
585
+ "gdpr_compliant": true,
586
+ "privacy_policy": "https://www.cookiebot.com/en/privacy-policy/",
587
+ "purpose": "Cookie consent and compliance management",
588
+ "data_collected": [
589
+ "consent preferences"
590
+ ],
591
+ "risk_score": 1
592
+ },
593
+ {
594
+ "id": "cookiehub",
595
+ "domains": [
596
+ "cookiehub.eu",
597
+ "cdn.cookiehub.eu",
598
+ "cookiehub.net",
599
+ "cdn.cookiehub.net"
600
+ ],
601
+ "name": "CookieHub",
602
+ "company": "CookieHub ehf.",
603
+ "category": "consent",
604
+ "gdpr_compliant": true,
605
+ "privacy_policy": "https://www.cookiehub.com/privacy-policy",
606
+ "purpose": "Cookie consent management and compliance",
607
+ "data_collected": [
608
+ "consent preferences",
609
+ "cookie categories"
610
+ ],
611
+ "risk_score": 1
612
+ },
613
+ {
614
+ "id": "cookiepro",
615
+ "domains": [
616
+ "cookiepro.com",
617
+ "cdn.cookiepro.com"
618
+ ],
619
+ "name": "CookiePro",
620
+ "company": "OneTrust LLC",
621
+ "category": "consent",
622
+ "gdpr_compliant": true,
623
+ "purpose": "Cookie consent management",
624
+ "data_collected": [
625
+ "consent preferences"
626
+ ],
627
+ "risk_score": 1
628
+ },
629
+ {
630
+ "id": "courier",
631
+ "domains": [
632
+ "courier.com",
633
+ "api.courier.com"
634
+ ],
635
+ "name": "Courier",
636
+ "company": "Courier Inc.",
637
+ "category": "push",
638
+ "gdpr_compliant": true,
639
+ "privacy_policy": "https://www.courier.com/privacy-policy",
640
+ "purpose": "Multi-channel notification orchestration",
641
+ "data_collected": [
642
+ "notification data",
643
+ "delivery status"
644
+ ],
645
+ "risk_score": 2,
646
+ "alternatives": [
647
+ "magicbell"
648
+ ]
649
+ },
650
+ {
651
+ "id": "crazy-egg",
652
+ "domains": [
653
+ "crazyegg.com",
654
+ "script.crazyegg.com",
655
+ "dnn506yrbagrg.cloudfront.net"
656
+ ],
657
+ "name": "Crazy Egg",
658
+ "company": "Crazy Egg Inc.",
659
+ "category": "heatmaps",
660
+ "gdpr_compliant": true,
661
+ "privacy_policy": "https://www.crazyegg.com/privacy",
662
+ "purpose": "Heatmaps and scroll tracking",
663
+ "data_collected": [
664
+ "mouse movements",
665
+ "clicks",
666
+ "scrolls"
667
+ ],
668
+ "risk_score": 4
669
+ },
670
+ {
671
+ "id": "crisp",
672
+ "domains": [
673
+ "crisp.chat",
674
+ "client.crisp.chat"
675
+ ],
676
+ "name": "Crisp",
677
+ "company": "Crisp IM SAS",
678
+ "category": "chat",
679
+ "gdpr_compliant": true,
680
+ "dpa_url": "https://crisp.chat/en/privacy/",
681
+ "purpose": "Live chat and customer support",
682
+ "data_collected": [
683
+ "conversation data",
684
+ "user agent"
685
+ ],
686
+ "risk_score": 3
687
+ },
688
+ {
689
+ "id": "criteo",
690
+ "domains": [
691
+ "static.criteo.net",
692
+ "dis.criteo.com",
693
+ "sslwidget.criteo.com"
694
+ ],
695
+ "name": "Criteo",
696
+ "company": "Criteo SA",
697
+ "category": "advertising",
698
+ "gdpr_compliant": true,
699
+ "dpa_url": "https://www.criteo.com/privacy/",
700
+ "purpose": "Retargeting and display advertising",
701
+ "data_collected": [
702
+ "cookies",
703
+ "browsing behavior",
704
+ "purchase data"
705
+ ],
706
+ "risk_score": 7
707
+ },
708
+ {
709
+ "id": "datadog-rum",
710
+ "domains": [
711
+ "browser-intake-datadoghq.com",
712
+ "rum.browser-intake-datadoghq.com",
713
+ "datadog-api.com"
714
+ ],
715
+ "name": "Datadog RUM",
716
+ "company": "Datadog Inc.",
717
+ "category": "error_tracking",
718
+ "gdpr_compliant": true,
719
+ "dpa_url": "https://www.datadoghq.com/legal/data-processing-addendum/",
720
+ "purpose": "Real user monitoring and performance",
721
+ "data_collected": [
722
+ "performance metrics",
723
+ "user sessions",
724
+ "errors"
725
+ ],
726
+ "risk_score": 2
727
+ },
728
+ {
729
+ "id": "demandbase",
730
+ "domains": [
731
+ "demandbase.com",
732
+ "*.demandbase.com",
733
+ "tag.demandbase.com"
734
+ ],
735
+ "name": "Demandbase",
736
+ "company": "Demandbase Inc.",
737
+ "category": "b2b_intelligence",
738
+ "gdpr_compliant": true,
739
+ "privacy_policy": "https://www.demandbase.com/privacy-policy/",
740
+ "purpose": "B2B account identification and targeting",
741
+ "data_collected": [
742
+ "company data",
743
+ "IP address",
744
+ "firmographic data",
745
+ "browsing behavior"
746
+ ],
747
+ "risk_score": 7,
748
+ "alternatives": [
749
+ "sixsense"
750
+ ]
751
+ },
752
+ {
753
+ "id": "discord-widget",
754
+ "domains": [
755
+ "discord.com",
756
+ "cdn.discordapp.com",
757
+ "widget.discord.io"
758
+ ],
759
+ "name": "Discord Widget",
760
+ "company": "Discord Inc.",
761
+ "category": "social",
762
+ "gdpr_compliant": true,
763
+ "privacy_policy": "https://discord.com/privacy",
764
+ "purpose": "Discord server widget and embeds",
765
+ "data_collected": [
766
+ "server data",
767
+ "member counts"
768
+ ],
769
+ "risk_score": 3,
770
+ "alternatives": []
771
+ },
772
+ {
773
+ "id": "disqus",
774
+ "domains": [
775
+ "disqus.com",
776
+ "disquscdn.com",
777
+ "c.disquscdn.com"
778
+ ],
779
+ "name": "Disqus",
780
+ "company": "Disqus Inc.",
781
+ "category": "social",
782
+ "gdpr_compliant": true,
783
+ "purpose": "Comments and community engagement",
784
+ "data_collected": [
785
+ "user identity",
786
+ "comments",
787
+ "browsing behavior"
788
+ ],
789
+ "risk_score": 5
790
+ },
791
+ {
792
+ "id": "doodle",
793
+ "domains": [
794
+ "doodle.com",
795
+ "*.doodle.com"
796
+ ],
797
+ "name": "Doodle",
798
+ "company": "Doodle AG",
799
+ "category": "booking",
800
+ "gdpr_compliant": true,
801
+ "privacy_policy": "https://doodle.com/en/privacy-policy/",
802
+ "purpose": "Group scheduling and polling",
803
+ "data_collected": [
804
+ "name",
805
+ "email",
806
+ "availability data"
807
+ ],
808
+ "risk_score": 3,
809
+ "alternatives": [
810
+ "calendly"
811
+ ]
812
+ },
813
+ {
814
+ "id": "doubleclick",
815
+ "domains": [
816
+ "doubleclick.net",
817
+ "ad.doubleclick.net",
818
+ "stats.g.doubleclick.net"
819
+ ],
820
+ "name": "DoubleClick",
821
+ "company": "Google LLC",
822
+ "category": "advertising",
823
+ "gdpr_compliant": true,
824
+ "dpa_url": "https://privacy.google.com/businesses/processorterms/",
825
+ "purpose": "Ad serving and tracking",
826
+ "data_collected": [
827
+ "cookies",
828
+ "IP address",
829
+ "ad interactions"
830
+ ],
831
+ "risk_score": 7,
832
+ "alternatives": []
833
+ },
834
+ {
835
+ "id": "drift",
836
+ "domains": [
837
+ "drift.com",
838
+ "js.driftt.com",
839
+ "event.drift.com"
840
+ ],
841
+ "name": "Drift",
842
+ "company": "Salesloft Inc.",
843
+ "category": "chat",
844
+ "gdpr_compliant": true,
845
+ "privacy_policy": "https://www.drift.com/privacy-policy/",
846
+ "purpose": "Conversational marketing and live chat",
847
+ "data_collected": [
848
+ "user identity",
849
+ "conversation data",
850
+ "browsing behavior"
851
+ ],
852
+ "risk_score": 4
853
+ },
854
+ {
855
+ "id": "dune-analytics",
856
+ "domains": [
857
+ "dune.com",
858
+ "*.dune.com"
859
+ ],
860
+ "name": "Dune Analytics",
861
+ "company": "Dune Analytics Inc.",
862
+ "category": "web3",
863
+ "gdpr_compliant": true,
864
+ "privacy_policy": "https://dune.com/privacy",
865
+ "purpose": "Blockchain data analytics",
866
+ "data_collected": [
867
+ "query data",
868
+ "IP address"
869
+ ],
870
+ "risk_score": 3,
871
+ "alternatives": []
872
+ },
873
+ {
874
+ "id": "etherscan",
875
+ "domains": [
876
+ "etherscan.io",
877
+ "*.etherscan.io",
878
+ "api.etherscan.io"
879
+ ],
880
+ "name": "Etherscan",
881
+ "company": "Etherscan.io",
882
+ "category": "web3",
883
+ "gdpr_compliant": true,
884
+ "privacy_policy": "https://etherscan.io/privacyPolicy",
885
+ "purpose": "Ethereum blockchain explorer",
886
+ "data_collected": [
887
+ "wallet lookup data",
888
+ "IP address"
889
+ ],
890
+ "risk_score": 3,
891
+ "alternatives": []
892
+ },
893
+ {
894
+ "id": "facebook-pixel",
895
+ "domains": [
896
+ "facebook.com",
897
+ "www.facebook.com",
898
+ "connect.facebook.net",
899
+ "pixel.facebook.com"
900
+ ],
901
+ "name": "Facebook Pixel",
902
+ "company": "Meta Platforms Inc.",
903
+ "category": "advertising",
904
+ "gdpr_compliant": true,
905
+ "dpa_url": "https://www.facebook.com/legal/terms/dataprocessing",
906
+ "privacy_policy": "https://www.facebook.com/policy.php",
907
+ "purpose": "Conversion tracking, retargeting, and audience building",
908
+ "data_collected": [
909
+ "cookies",
910
+ "IP address",
911
+ "browsing behavior",
912
+ "device info"
913
+ ],
914
+ "risk_score": 7,
915
+ "alternatives": []
916
+ },
917
+ {
918
+ "id": "facebook-sdk",
919
+ "domains": [
920
+ "graph.facebook.com",
921
+ "staticxx.facebook.com"
922
+ ],
923
+ "name": "Facebook SDK",
924
+ "company": "Meta Platforms Inc.",
925
+ "category": "social",
926
+ "gdpr_compliant": true,
927
+ "privacy_policy": "https://www.facebook.com/policy.php",
928
+ "purpose": "Social login, sharing, and comments",
929
+ "data_collected": [
930
+ "cookies",
931
+ "user profile",
932
+ "social interactions"
933
+ ],
934
+ "risk_score": 5
935
+ },
936
+ {
937
+ "id": "fastly",
938
+ "domains": [
939
+ "fastly.com",
940
+ "fastly.net",
941
+ "global.fastly.net"
942
+ ],
943
+ "name": "Fastly",
944
+ "company": "Fastly Inc.",
945
+ "category": "cdn",
946
+ "gdpr_compliant": true,
947
+ "purpose": "CDN and edge computing",
948
+ "data_collected": [
949
+ "IP address",
950
+ "request headers"
951
+ ],
952
+ "risk_score": 1
953
+ },
954
+ {
955
+ "id": "fathom",
956
+ "domains": [
957
+ "usefathom.com",
958
+ "cdn.usefathom.com"
959
+ ],
960
+ "name": "Fathom Analytics",
961
+ "company": "Conva Ventures Inc.",
962
+ "category": "analytics",
963
+ "gdpr_compliant": true,
964
+ "privacy_policy": "https://usefathom.com/privacy/",
965
+ "purpose": "Privacy-first website analytics",
966
+ "data_collected": [
967
+ "page views",
968
+ "referrer"
969
+ ],
970
+ "risk_score": 1
971
+ },
972
+ {
973
+ "id": "firebase-messaging",
974
+ "domains": [
975
+ "fcm.googleapis.com",
976
+ "firebase.google.com"
977
+ ],
978
+ "name": "Firebase Cloud Messaging",
979
+ "company": "Google LLC",
980
+ "category": "push",
981
+ "gdpr_compliant": true,
982
+ "privacy_policy": "https://policies.google.com/privacy",
983
+ "purpose": "Push notification delivery for web and mobile",
984
+ "data_collected": [
985
+ "device tokens",
986
+ "message data"
987
+ ],
988
+ "risk_score": 4,
989
+ "alternatives": [
990
+ "onesignal"
991
+ ]
992
+ },
993
+ {
994
+ "id": "formstack",
995
+ "domains": [
996
+ "formstack.com",
997
+ "*.formstack.com"
998
+ ],
999
+ "name": "Formstack",
1000
+ "company": "Formstack LLC",
1001
+ "category": "forms",
1002
+ "gdpr_compliant": true,
1003
+ "privacy_policy": "https://www.formstack.com/privacy-policy",
1004
+ "purpose": "Workflow automation and forms",
1005
+ "data_collected": [
1006
+ "form data",
1007
+ "IP address"
1008
+ ],
1009
+ "risk_score": 3,
1010
+ "alternatives": [
1011
+ "typeform",
1012
+ "jotform"
1013
+ ]
1014
+ },
1015
+ {
1016
+ "id": "foursquare",
1017
+ "domains": [
1018
+ "foursquare.com",
1019
+ "api.foursquare.com"
1020
+ ],
1021
+ "name": "Foursquare",
1022
+ "company": "Foursquare Labs Inc.",
1023
+ "category": "maps",
1024
+ "gdpr_compliant": true,
1025
+ "privacy_policy": "https://foursquare.com/legal/privacy",
1026
+ "purpose": "Location intelligence and venue data",
1027
+ "data_collected": [
1028
+ "location data",
1029
+ "venue visits",
1030
+ "device data"
1031
+ ],
1032
+ "risk_score": 6,
1033
+ "alternatives": [
1034
+ "google-maps"
1035
+ ]
1036
+ },
1037
+ {
1038
+ "id": "freshdesk",
1039
+ "domains": [
1040
+ "freshdesk.com",
1041
+ "wchat.freshchat.com",
1042
+ "assetscdn-wchat.freshchat.com"
1043
+ ],
1044
+ "name": "Freshdesk / Freshchat",
1045
+ "company": "Freshworks Inc.",
1046
+ "category": "chat",
1047
+ "gdpr_compliant": true,
1048
+ "purpose": "Customer support and live chat",
1049
+ "data_collected": [
1050
+ "conversation data",
1051
+ "user identity"
1052
+ ],
1053
+ "risk_score": 3
1054
+ },
1055
+ {
1056
+ "id": "fullstory",
1057
+ "domains": [
1058
+ "fullstory.com",
1059
+ "rs.fullstory.com",
1060
+ "edge.fullstory.com"
1061
+ ],
1062
+ "name": "FullStory",
1063
+ "company": "FullStory Inc.",
1064
+ "category": "heatmaps",
1065
+ "gdpr_compliant": true,
1066
+ "dpa_url": "https://www.fullstory.com/legal/dpa/",
1067
+ "purpose": "Session replay and digital experience analytics",
1068
+ "data_collected": [
1069
+ "session recordings",
1070
+ "clicks",
1071
+ "user interactions"
1072
+ ],
1073
+ "risk_score": 5
1074
+ },
1075
+ {
1076
+ "id": "google-ads",
1077
+ "domains": [
1078
+ "googleads.g.doubleclick.net",
1079
+ "googleadservices.com",
1080
+ "www.googleadservices.com",
1081
+ "pagead2.googlesyndication.com"
1082
+ ],
1083
+ "name": "Google Ads",
1084
+ "company": "Google LLC",
1085
+ "category": "advertising",
1086
+ "gdpr_compliant": true,
1087
+ "dpa_url": "https://privacy.google.com/businesses/processorterms/",
1088
+ "privacy_policy": "https://policies.google.com/privacy",
1089
+ "purpose": "Advertising conversion tracking and remarketing",
1090
+ "data_collected": [
1091
+ "cookies",
1092
+ "IP address",
1093
+ "browsing behavior",
1094
+ "conversion data"
1095
+ ],
1096
+ "risk_score": 6,
1097
+ "alternatives": []
1098
+ },
1099
+ {
1100
+ "id": "google-adsense",
1101
+ "domains": [
1102
+ "googlesyndication.com",
1103
+ "tpc.googlesyndication.com"
1104
+ ],
1105
+ "name": "Google AdSense",
1106
+ "company": "Google LLC",
1107
+ "category": "advertising",
1108
+ "gdpr_compliant": true,
1109
+ "purpose": "Display advertising network",
1110
+ "data_collected": [
1111
+ "cookies",
1112
+ "browsing behavior",
1113
+ "ad interactions"
1114
+ ],
1115
+ "risk_score": 6
1116
+ },
1117
+ {
1118
+ "id": "google-analytics",
1119
+ "domains": [
1120
+ "google-analytics.com",
1121
+ "www.google-analytics.com",
1122
+ "ssl.google-analytics.com",
1123
+ "analytics.google.com"
1124
+ ],
1125
+ "name": "Google Analytics",
1126
+ "company": "Google LLC",
1127
+ "category": "analytics",
1128
+ "gdpr_compliant": true,
1129
+ "dpa_url": "https://privacy.google.com/businesses/processorterms/",
1130
+ "privacy_policy": "https://policies.google.com/privacy",
1131
+ "purpose": "Web analytics and user behavior tracking",
1132
+ "data_collected": [
1133
+ "IP address",
1134
+ "cookies",
1135
+ "page views",
1136
+ "user agent",
1137
+ "demographics"
1138
+ ],
1139
+ "retention_period": "26 months (configurable)",
1140
+ "last_verified": "2025-01-15",
1141
+ "risk_score": 3,
1142
+ "alternatives": [
1143
+ "plausible",
1144
+ "fathom",
1145
+ "matomo"
1146
+ ]
1147
+ },
1148
+ {
1149
+ "id": "google-fonts",
1150
+ "domains": [
1151
+ "fonts.googleapis.com",
1152
+ "fonts.gstatic.com"
1153
+ ],
1154
+ "name": "Google Fonts",
1155
+ "company": "Google LLC",
1156
+ "category": "fonts",
1157
+ "gdpr_compliant": false,
1158
+ "privacy_policy": "https://policies.google.com/privacy",
1159
+ "purpose": "Web font delivery",
1160
+ "data_collected": [
1161
+ "IP address",
1162
+ "user agent",
1163
+ "referrer"
1164
+ ],
1165
+ "risk_score": 3,
1166
+ "alternatives": [
1167
+ "self-hosted fonts",
1168
+ "bunny-fonts"
1169
+ ]
1170
+ },
1171
+ {
1172
+ "id": "google-forms",
1173
+ "domains": [
1174
+ "docs.google.com/forms"
1175
+ ],
1176
+ "name": "Google Forms",
1177
+ "company": "Google LLC",
1178
+ "category": "forms",
1179
+ "gdpr_compliant": true,
1180
+ "privacy_policy": "https://policies.google.com/privacy",
1181
+ "purpose": "Free form and survey builder",
1182
+ "data_collected": [
1183
+ "form responses",
1184
+ "Google account data"
1185
+ ],
1186
+ "risk_score": 3,
1187
+ "alternatives": [
1188
+ "typeform"
1189
+ ]
1190
+ },
1191
+ {
1192
+ "id": "google-maps",
1193
+ "domains": [
1194
+ "maps.googleapis.com",
1195
+ "maps.google.com",
1196
+ "maps.gstatic.com"
1197
+ ],
1198
+ "name": "Google Maps",
1199
+ "company": "Google LLC",
1200
+ "category": "other",
1201
+ "gdpr_compliant": true,
1202
+ "purpose": "Maps and location services",
1203
+ "data_collected": [
1204
+ "IP address",
1205
+ "location queries"
1206
+ ],
1207
+ "risk_score": 3
1208
+ },
1209
+ {
1210
+ "id": "google-recaptcha",
1211
+ "domains": [
1212
+ "www.google.com/recaptcha",
1213
+ "recaptcha.net",
1214
+ "www.recaptcha.net",
1215
+ "www.gstatic.com/recaptcha"
1216
+ ],
1217
+ "name": "Google reCAPTCHA",
1218
+ "company": "Google LLC",
1219
+ "category": "security",
1220
+ "gdpr_compliant": true,
1221
+ "privacy_policy": "https://policies.google.com/privacy",
1222
+ "purpose": "Bot detection and spam prevention",
1223
+ "data_collected": [
1224
+ "cookies",
1225
+ "IP address",
1226
+ "browser fingerprint",
1227
+ "mouse movements"
1228
+ ],
1229
+ "risk_score": 4,
1230
+ "alternatives": [
1231
+ "hcaptcha",
1232
+ "turnstile"
1233
+ ]
1234
+ },
1235
+ {
1236
+ "id": "google-tag-manager",
1237
+ "domains": [
1238
+ "googletagmanager.com",
1239
+ "www.googletagmanager.com"
1240
+ ],
1241
+ "name": "Google Tag Manager",
1242
+ "company": "Google LLC",
1243
+ "category": "tag_manager",
1244
+ "gdpr_compliant": true,
1245
+ "dpa_url": "https://privacy.google.com/businesses/processorterms/",
1246
+ "privacy_policy": "https://policies.google.com/privacy",
1247
+ "purpose": "Tag management and script loading orchestration",
1248
+ "data_collected": [
1249
+ "page views",
1250
+ "events"
1251
+ ],
1252
+ "risk_score": 3,
1253
+ "alternatives": [
1254
+ "segment"
1255
+ ]
1256
+ },
1257
+ {
1258
+ "id": "gravatar",
1259
+ "domains": [
1260
+ "gravatar.com",
1261
+ "secure.gravatar.com",
1262
+ "s.gravatar.com"
1263
+ ],
1264
+ "name": "Gravatar",
1265
+ "company": "Automattic Inc.",
1266
+ "category": "other",
1267
+ "gdpr_compliant": true,
1268
+ "purpose": "Avatar/profile image service",
1269
+ "data_collected": [
1270
+ "email hash",
1271
+ "IP address"
1272
+ ],
1273
+ "risk_score": 2
1274
+ },
1275
+ {
1276
+ "id": "growthbook",
1277
+ "domains": [
1278
+ "growthbook.io",
1279
+ "cdn.growthbook.io"
1280
+ ],
1281
+ "name": "GrowthBook",
1282
+ "company": "GrowthBook",
1283
+ "category": "ab_testing",
1284
+ "gdpr_compliant": true,
1285
+ "privacy_policy": "https://www.growthbook.io/privacy",
1286
+ "purpose": "Open-source feature flagging and A/B testing",
1287
+ "data_collected": [
1288
+ "feature evaluations"
1289
+ ],
1290
+ "risk_score": 1,
1291
+ "alternatives": [
1292
+ "launchdarkly"
1293
+ ]
1294
+ },
1295
+ {
1296
+ "id": "hcaptcha",
1297
+ "domains": [
1298
+ "hcaptcha.com",
1299
+ "assets.hcaptcha.com",
1300
+ "js.hcaptcha.com",
1301
+ "newassets.hcaptcha.com"
1302
+ ],
1303
+ "name": "hCaptcha",
1304
+ "company": "Intuition Machines Inc.",
1305
+ "category": "security",
1306
+ "gdpr_compliant": true,
1307
+ "privacy_policy": "https://www.hcaptcha.com/privacy",
1308
+ "purpose": "Bot detection and CAPTCHA",
1309
+ "data_collected": [
1310
+ "browser signals",
1311
+ "IP address"
1312
+ ],
1313
+ "risk_score": 2
1314
+ },
1315
+ {
1316
+ "id": "heap",
1317
+ "domains": [
1318
+ "heapanalytics.com",
1319
+ "cdn.heapanalytics.com",
1320
+ "heap.io"
1321
+ ],
1322
+ "name": "Heap",
1323
+ "company": "Heap Inc.",
1324
+ "category": "analytics",
1325
+ "gdpr_compliant": true,
1326
+ "privacy_policy": "https://heap.io/privacy",
1327
+ "purpose": "Auto-capture analytics",
1328
+ "data_collected": [
1329
+ "clicks",
1330
+ "page views",
1331
+ "form interactions",
1332
+ "user sessions"
1333
+ ],
1334
+ "risk_score": 4
1335
+ },
1336
+ {
1337
+ "id": "hotjar",
1338
+ "domains": [
1339
+ "hotjar.com",
1340
+ "static.hotjar.com",
1341
+ "script.hotjar.com",
1342
+ "vars.hotjar.com"
1343
+ ],
1344
+ "name": "Hotjar",
1345
+ "company": "Hotjar Ltd.",
1346
+ "category": "heatmaps",
1347
+ "gdpr_compliant": true,
1348
+ "dpa_url": "https://www.hotjar.com/legal/support/dpa/",
1349
+ "privacy_policy": "https://www.hotjar.com/legal/policies/privacy/",
1350
+ "purpose": "Heatmaps, session recordings, and user feedback",
1351
+ "data_collected": [
1352
+ "mouse movements",
1353
+ "clicks",
1354
+ "scrolls",
1355
+ "form interactions"
1356
+ ],
1357
+ "risk_score": 5,
1358
+ "alternatives": [
1359
+ "microsoft-clarity",
1360
+ "posthog"
1361
+ ]
1362
+ },
1363
+ {
1364
+ "id": "hotmart",
1365
+ "domains": [
1366
+ "hotmart.com",
1367
+ "*.hotmart.com"
1368
+ ],
1369
+ "name": "Hotmart",
1370
+ "company": "Hotmart B.V.",
1371
+ "category": "referral",
1372
+ "gdpr_compliant": true,
1373
+ "privacy_policy": "https://www.hotmart.com/legal/privacy",
1374
+ "purpose": "LatAm digital product marketplace and affiliate platform",
1375
+ "data_collected": [
1376
+ "customer data",
1377
+ "purchase data",
1378
+ "affiliate data"
1379
+ ],
1380
+ "risk_score": 4,
1381
+ "alternatives": [
1382
+ "impact"
1383
+ ]
1384
+ },
1385
+ {
1386
+ "id": "hubspot",
1387
+ "domains": [
1388
+ "hubspot.com",
1389
+ "js.hs-scripts.com",
1390
+ "js.hs-analytics.net",
1391
+ "js.hsforms.net",
1392
+ "js.hscollectedforms.net",
1393
+ "track.hubspot.com",
1394
+ "forms.hubspot.com"
1395
+ ],
1396
+ "name": "HubSpot",
1397
+ "company": "HubSpot Inc.",
1398
+ "category": "analytics",
1399
+ "gdpr_compliant": true,
1400
+ "dpa_url": "https://legal.hubspot.com/dpa",
1401
+ "privacy_policy": "https://legal.hubspot.com/privacy-policy",
1402
+ "purpose": "Marketing analytics, forms, and CRM tracking",
1403
+ "data_collected": [
1404
+ "page views",
1405
+ "form submissions",
1406
+ "user identity",
1407
+ "email interactions"
1408
+ ],
1409
+ "risk_score": 4
1410
+ },
1411
+ {
1412
+ "id": "hyperpay",
1413
+ "domains": [
1414
+ "hyperpay.com",
1415
+ "*.hyperpay.com"
1416
+ ],
1417
+ "name": "HyperPay",
1418
+ "company": "HyperPay Ltd.",
1419
+ "category": "payments",
1420
+ "gdpr_compliant": true,
1421
+ "privacy_policy": "https://www.hyperpay.com/privacy-policy/",
1422
+ "purpose": "MENA online payment gateway",
1423
+ "data_collected": [
1424
+ "payment data",
1425
+ "personal info"
1426
+ ],
1427
+ "risk_score": 4,
1428
+ "alternatives": [
1429
+ "paytabs"
1430
+ ]
1431
+ },
1432
+ {
1433
+ "id": "impact",
1434
+ "domains": [
1435
+ "impact.com",
1436
+ "*.impactradius.com",
1437
+ "app.impact.com"
1438
+ ],
1439
+ "name": "Impact",
1440
+ "company": "Impact Tech Inc.",
1441
+ "category": "referral",
1442
+ "gdpr_compliant": true,
1443
+ "privacy_policy": "https://impact.com/privacy-policy/",
1444
+ "purpose": "Partnership and affiliate management",
1445
+ "data_collected": [
1446
+ "clicks",
1447
+ "conversions",
1448
+ "cookies",
1449
+ "referral data"
1450
+ ],
1451
+ "risk_score": 5,
1452
+ "alternatives": [
1453
+ "shareasale",
1454
+ "partnerstack"
1455
+ ]
1456
+ },
1457
+ {
1458
+ "id": "instagram",
1459
+ "domains": [
1460
+ "instagram.com",
1461
+ "www.instagram.com",
1462
+ "scontent.cdninstagram.com"
1463
+ ],
1464
+ "name": "Instagram Embeds",
1465
+ "company": "Meta Platforms Inc.",
1466
+ "category": "social",
1467
+ "gdpr_compliant": true,
1468
+ "privacy_policy": "https://help.instagram.com/519522125107875",
1469
+ "purpose": "Social media embedding",
1470
+ "data_collected": [
1471
+ "cookies",
1472
+ "IP address"
1473
+ ],
1474
+ "risk_score": 4
1475
+ },
1476
+ {
1477
+ "id": "intercom",
1478
+ "domains": [
1479
+ "intercom.io",
1480
+ "widget.intercom.io",
1481
+ "api-iam.intercom.io",
1482
+ "js.intercomcdn.com"
1483
+ ],
1484
+ "name": "Intercom",
1485
+ "company": "Intercom Inc.",
1486
+ "category": "chat",
1487
+ "gdpr_compliant": true,
1488
+ "dpa_url": "https://www.intercom.com/legal/data-processing-agreement",
1489
+ "privacy_policy": "https://www.intercom.com/legal/privacy",
1490
+ "purpose": "Live chat, customer messaging, and support",
1491
+ "data_collected": [
1492
+ "user identity",
1493
+ "conversation data",
1494
+ "browsing behavior"
1495
+ ],
1496
+ "risk_score": 4
1497
+ },
1498
+ {
1499
+ "id": "jotform",
1500
+ "domains": [
1501
+ "jotform.com",
1502
+ "*.jotform.com",
1503
+ "submit.jotform.com"
1504
+ ],
1505
+ "name": "JotForm",
1506
+ "company": "JotForm Inc.",
1507
+ "category": "forms",
1508
+ "gdpr_compliant": true,
1509
+ "privacy_policy": "https://www.jotform.com/privacy/",
1510
+ "purpose": "Online form builder",
1511
+ "data_collected": [
1512
+ "form responses",
1513
+ "IP address",
1514
+ "cookies"
1515
+ ],
1516
+ "risk_score": 4,
1517
+ "alternatives": [
1518
+ "typeform"
1519
+ ]
1520
+ },
1521
+ {
1522
+ "id": "jsdelivr",
1523
+ "domains": [
1524
+ "cdn.jsdelivr.net"
1525
+ ],
1526
+ "name": "jsDelivr",
1527
+ "company": "jsDelivr",
1528
+ "category": "cdn",
1529
+ "gdpr_compliant": true,
1530
+ "privacy_policy": "https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net",
1531
+ "purpose": "Open-source CDN for npm and GitHub",
1532
+ "data_collected": [
1533
+ "IP address"
1534
+ ],
1535
+ "risk_score": 1
1536
+ },
1537
+ {
1538
+ "id": "judge-me",
1539
+ "domains": [
1540
+ "judge.me",
1541
+ "*.judge.me"
1542
+ ],
1543
+ "name": "Judge.me",
1544
+ "company": "Judge.me Ltd.",
1545
+ "category": "other",
1546
+ "gdpr_compliant": true,
1547
+ "privacy_policy": "https://judge.me/privacy",
1548
+ "purpose": "Product review platform",
1549
+ "data_collected": [
1550
+ "review data",
1551
+ "customer info",
1552
+ "email"
1553
+ ],
1554
+ "risk_score": 3,
1555
+ "alternatives": [
1556
+ "yotpo"
1557
+ ]
1558
+ },
1559
+ {
1560
+ "id": "kakao-pixel",
1561
+ "domains": [
1562
+ "kakao.com",
1563
+ "*.kakao.com",
1564
+ "t1.kakaocdn.net"
1565
+ ],
1566
+ "name": "Kakao Pixel",
1567
+ "company": "Kakao Corp.",
1568
+ "category": "advertising",
1569
+ "gdpr_compliant": false,
1570
+ "privacy_policy": "https://www.kakao.com/policy/privacy",
1571
+ "purpose": "Korean ad tracking and conversion measurement",
1572
+ "data_collected": [
1573
+ "cookies",
1574
+ "conversions",
1575
+ "device data",
1576
+ "browsing behavior"
1577
+ ],
1578
+ "risk_score": 7,
1579
+ "retention_period": "180 days",
1580
+ "alternatives": []
1581
+ },
1582
+ {
1583
+ "id": "kameleoon",
1584
+ "domains": [
1585
+ "kameleoon.com",
1586
+ "static.kameleoon.com"
1587
+ ],
1588
+ "name": "Kameleoon",
1589
+ "company": "Kameleoon SAS",
1590
+ "category": "ab_testing",
1591
+ "gdpr_compliant": true,
1592
+ "privacy_policy": "https://www.kameleoon.com/en/privacy-policy",
1593
+ "purpose": "AI-powered A/B testing and personalization",
1594
+ "data_collected": [
1595
+ "cookies",
1596
+ "user behavior",
1597
+ "segments"
1598
+ ],
1599
+ "risk_score": 3,
1600
+ "alternatives": [
1601
+ "optimizely",
1602
+ "vwo"
1603
+ ]
1604
+ },
1605
+ {
1606
+ "id": "klaviyo",
1607
+ "domains": [
1608
+ "klaviyo.com",
1609
+ "static.klaviyo.com",
1610
+ "a.]klaviyo.com"
1611
+ ],
1612
+ "name": "Klaviyo",
1613
+ "company": "Klaviyo Inc.",
1614
+ "category": "analytics",
1615
+ "gdpr_compliant": true,
1616
+ "purpose": "Email and SMS marketing analytics",
1617
+ "data_collected": [
1618
+ "browsing behavior",
1619
+ "purchase data",
1620
+ "email engagement"
1621
+ ],
1622
+ "risk_score": 4
1623
+ },
1624
+ {
1625
+ "id": "kore-ai",
1626
+ "domains": [
1627
+ "kore.ai",
1628
+ "*.kore.ai"
1629
+ ],
1630
+ "name": "Kore.ai",
1631
+ "company": "Kore.ai Inc.",
1632
+ "category": "chat",
1633
+ "gdpr_compliant": true,
1634
+ "privacy_policy": "https://kore.ai/privacy-policy/",
1635
+ "purpose": "Enterprise AI chatbot platform",
1636
+ "data_collected": [
1637
+ "chat data",
1638
+ "user queries",
1639
+ "interaction logs"
1640
+ ],
1641
+ "risk_score": 4,
1642
+ "alternatives": [
1643
+ "liveperson"
1644
+ ]
1645
+ },
1646
+ {
1647
+ "id": "launchdarkly",
1648
+ "domains": [
1649
+ "app.launchdarkly.com",
1650
+ "events.launchdarkly.com",
1651
+ "clientsdk.launchdarkly.com"
1652
+ ],
1653
+ "name": "LaunchDarkly",
1654
+ "company": "LaunchDarkly Inc.",
1655
+ "category": "ab_testing",
1656
+ "gdpr_compliant": true,
1657
+ "dpa_url": "https://launchdarkly.com/policies/data-processing-addendum/",
1658
+ "purpose": "Feature flags and progressive delivery",
1659
+ "data_collected": [
1660
+ "feature flag evaluations",
1661
+ "user context"
1662
+ ],
1663
+ "risk_score": 2
1664
+ },
1665
+ {
1666
+ "id": "libsyn",
1667
+ "domains": [
1668
+ "libsyn.com",
1669
+ "*.libsynpro.com"
1670
+ ],
1671
+ "name": "Libsyn",
1672
+ "company": "Liberated Syndication",
1673
+ "category": "video",
1674
+ "gdpr_compliant": true,
1675
+ "privacy_policy": "https://libsyn.com/privacy-policy/",
1676
+ "purpose": "Podcast hosting and distribution",
1677
+ "data_collected": [
1678
+ "downloads",
1679
+ "IP address",
1680
+ "user agent"
1681
+ ],
1682
+ "risk_score": 3,
1683
+ "alternatives": [
1684
+ "anchor"
1685
+ ]
1686
+ },
1687
+ {
1688
+ "id": "linkedin-insight",
1689
+ "domains": [
1690
+ "snap.licdn.com",
1691
+ "px.ads.linkedin.com",
1692
+ "www.linkedin.com/px"
1693
+ ],
1694
+ "name": "LinkedIn Insight Tag",
1695
+ "company": "LinkedIn Corporation",
1696
+ "category": "advertising",
1697
+ "gdpr_compliant": true,
1698
+ "dpa_url": "https://legal.linkedin.com/dpa",
1699
+ "privacy_policy": "https://www.linkedin.com/legal/privacy-policy",
1700
+ "purpose": "Conversion tracking and audience targeting for LinkedIn ads",
1701
+ "data_collected": [
1702
+ "cookies",
1703
+ "IP address",
1704
+ "page views",
1705
+ "professional info"
1706
+ ],
1707
+ "risk_score": 5
1708
+ },
1709
+ {
1710
+ "id": "linkedin-widgets",
1711
+ "domains": [
1712
+ "platform.linkedin.com",
1713
+ "badges.linkedin.com"
1714
+ ],
1715
+ "name": "LinkedIn Widgets",
1716
+ "company": "LinkedIn Corporation",
1717
+ "category": "social",
1718
+ "gdpr_compliant": true,
1719
+ "privacy_policy": "https://www.linkedin.com/legal/privacy-policy",
1720
+ "purpose": "Share buttons and profile badges",
1721
+ "data_collected": [
1722
+ "cookies",
1723
+ "IP address"
1724
+ ],
1725
+ "risk_score": 3
1726
+ },
1727
+ {
1728
+ "id": "livechat",
1729
+ "domains": [
1730
+ "livechatinc.com",
1731
+ "cdn.livechatinc.com",
1732
+ "secure.livechatinc.com"
1733
+ ],
1734
+ "name": "LiveChat",
1735
+ "company": "LiveChat Inc.",
1736
+ "category": "chat",
1737
+ "gdpr_compliant": true,
1738
+ "privacy_policy": "https://www.livechat.com/legal/privacy-policy/",
1739
+ "purpose": "Live chat support",
1740
+ "data_collected": [
1741
+ "conversation data",
1742
+ "user agent"
1743
+ ],
1744
+ "risk_score": 3
1745
+ },
1746
+ {
1747
+ "id": "liveperson",
1748
+ "domains": [
1749
+ "liveperson.com",
1750
+ "*.liveperson.net",
1751
+ "lpcdn.lpsnmedia.net"
1752
+ ],
1753
+ "name": "LivePerson",
1754
+ "company": "LivePerson Inc.",
1755
+ "category": "chat",
1756
+ "gdpr_compliant": true,
1757
+ "privacy_policy": "https://www.liveperson.com/policies/privacy",
1758
+ "purpose": "AI-powered conversational platform",
1759
+ "data_collected": [
1760
+ "chat transcripts",
1761
+ "user data",
1762
+ "behavioral data"
1763
+ ],
1764
+ "risk_score": 5,
1765
+ "alternatives": [
1766
+ "intercom"
1767
+ ]
1768
+ },
1769
+ {
1770
+ "id": "logrocket",
1771
+ "domains": [
1772
+ "logrocket.com",
1773
+ "cdn.lr-ingest.io",
1774
+ "r.lr-ingest.io"
1775
+ ],
1776
+ "name": "LogRocket",
1777
+ "company": "LogRocket Inc.",
1778
+ "category": "heatmaps",
1779
+ "gdpr_compliant": true,
1780
+ "privacy_policy": "https://logrocket.com/privacy",
1781
+ "purpose": "Session replay and frontend monitoring",
1782
+ "data_collected": [
1783
+ "session recordings",
1784
+ "network requests",
1785
+ "console logs"
1786
+ ],
1787
+ "risk_score": 5
1788
+ },
1789
+ {
1790
+ "id": "lucky-orange",
1791
+ "domains": [
1792
+ "luckyorange.com",
1793
+ "cdn.luckyorange.com",
1794
+ "cs.luckyorange.com"
1795
+ ],
1796
+ "name": "Lucky Orange",
1797
+ "company": "Lucky Orange LLC",
1798
+ "category": "heatmaps",
1799
+ "gdpr_compliant": true,
1800
+ "purpose": "Heatmaps, session recordings, and surveys",
1801
+ "data_collected": [
1802
+ "mouse movements",
1803
+ "clicks",
1804
+ "form data"
1805
+ ],
1806
+ "risk_score": 4
1807
+ },
1808
+ {
1809
+ "id": "lusha",
1810
+ "domains": [
1811
+ "lusha.com",
1812
+ "*.lusha.com"
1813
+ ],
1814
+ "name": "Lusha",
1815
+ "company": "Lusha Systems Inc.",
1816
+ "category": "b2b_intelligence",
1817
+ "gdpr_compliant": true,
1818
+ "privacy_policy": "https://www.lusha.com/privacy-policy/",
1819
+ "purpose": "B2B contact enrichment",
1820
+ "data_collected": [
1821
+ "contact info",
1822
+ "company data",
1823
+ "phone numbers",
1824
+ "email addresses"
1825
+ ],
1826
+ "risk_score": 7,
1827
+ "alternatives": [
1828
+ "apollo"
1829
+ ]
1830
+ },
1831
+ {
1832
+ "id": "magicbell",
1833
+ "domains": [
1834
+ "magicbell.com",
1835
+ "api.magicbell.com"
1836
+ ],
1837
+ "name": "MagicBell",
1838
+ "company": "MagicBell Inc.",
1839
+ "category": "push",
1840
+ "gdpr_compliant": true,
1841
+ "privacy_policy": "https://www.magicbell.com/privacy-policy",
1842
+ "purpose": "In-app notification inbox",
1843
+ "data_collected": [
1844
+ "notification data",
1845
+ "user preferences"
1846
+ ],
1847
+ "risk_score": 2,
1848
+ "alternatives": [
1849
+ "courier"
1850
+ ]
1851
+ },
1852
+ {
1853
+ "id": "mailchimp",
1854
+ "domains": [
1855
+ "mailchimp.com",
1856
+ "chimpstatic.com",
1857
+ "list-manage.com",
1858
+ "mc.us1.list-manage.com"
1859
+ ],
1860
+ "name": "Mailchimp",
1861
+ "company": "Intuit Inc.",
1862
+ "category": "analytics",
1863
+ "gdpr_compliant": true,
1864
+ "dpa_url": "https://mailchimp.com/legal/data-processing-addendum/",
1865
+ "purpose": "Email marketing tracking and forms",
1866
+ "data_collected": [
1867
+ "email addresses",
1868
+ "open rates",
1869
+ "click data"
1870
+ ],
1871
+ "risk_score": 3
1872
+ },
1873
+ {
1874
+ "id": "mapbox",
1875
+ "domains": [
1876
+ "mapbox.com",
1877
+ "api.mapbox.com",
1878
+ "*.tiles.mapbox.com"
1879
+ ],
1880
+ "name": "Mapbox",
1881
+ "company": "Mapbox Inc.",
1882
+ "category": "maps",
1883
+ "gdpr_compliant": true,
1884
+ "privacy_policy": "https://www.mapbox.com/legal/privacy",
1885
+ "purpose": "Custom map rendering and geolocation",
1886
+ "data_collected": [
1887
+ "location data",
1888
+ "map interactions",
1889
+ "API usage"
1890
+ ],
1891
+ "risk_score": 4,
1892
+ "alternatives": [
1893
+ "google-maps"
1894
+ ]
1895
+ },
1896
+ {
1897
+ "id": "marketo",
1898
+ "domains": [
1899
+ "marketo.net",
1900
+ "munchkin.marketo.net",
1901
+ "mktoresp.com"
1902
+ ],
1903
+ "name": "Marketo",
1904
+ "company": "Adobe Inc.",
1905
+ "category": "analytics",
1906
+ "gdpr_compliant": true,
1907
+ "purpose": "Marketing automation and lead tracking",
1908
+ "data_collected": [
1909
+ "page views",
1910
+ "form submissions",
1911
+ "user identity"
1912
+ ],
1913
+ "risk_score": 4
1914
+ },
1915
+ {
1916
+ "id": "matomo",
1917
+ "domains": [
1918
+ "matomo.cloud",
1919
+ "cdn.matomo.cloud"
1920
+ ],
1921
+ "name": "Matomo",
1922
+ "company": "InnoCraft Ltd.",
1923
+ "category": "analytics",
1924
+ "gdpr_compliant": true,
1925
+ "dpa_url": "https://matomo.org/matomo-cloud-dpa/",
1926
+ "purpose": "Open-source web analytics",
1927
+ "data_collected": [
1928
+ "page views",
1929
+ "events",
1930
+ "IP address (anonymizable)"
1931
+ ],
1932
+ "risk_score": 2,
1933
+ "alternatives": [
1934
+ "plausible",
1935
+ "fathom"
1936
+ ]
1937
+ },
1938
+ {
1939
+ "id": "media-net",
1940
+ "domains": [
1941
+ "media.net",
1942
+ "contextual.media.net",
1943
+ "static.media.net"
1944
+ ],
1945
+ "name": "Media.net",
1946
+ "company": "Media.net Advertising FZ-LLC",
1947
+ "category": "advertising",
1948
+ "gdpr_compliant": true,
1949
+ "purpose": "Contextual advertising",
1950
+ "data_collected": [
1951
+ "cookies",
1952
+ "page content"
1953
+ ],
1954
+ "risk_score": 5
1955
+ },
1956
+ {
1957
+ "id": "medium-widget",
1958
+ "domains": [
1959
+ "medium.com",
1960
+ "cdn-images-1.medium.com"
1961
+ ],
1962
+ "name": "Medium Embed",
1963
+ "company": "A Medium Corporation",
1964
+ "category": "social",
1965
+ "gdpr_compliant": true,
1966
+ "privacy_policy": "https://policy.medium.com/medium-privacy-policy-f03bf92035c9",
1967
+ "purpose": "Medium article embedding",
1968
+ "data_collected": [
1969
+ "cookies",
1970
+ "reading data"
1971
+ ],
1972
+ "risk_score": 3,
1973
+ "alternatives": []
1974
+ },
1975
+ {
1976
+ "id": "mercadopago",
1977
+ "domains": [
1978
+ "mercadopago.com",
1979
+ "*.mercadopago.com",
1980
+ "sdk.mercadopago.com"
1981
+ ],
1982
+ "name": "Mercado Pago",
1983
+ "company": "MercadoLibre Inc.",
1984
+ "category": "payments",
1985
+ "gdpr_compliant": true,
1986
+ "privacy_policy": "https://www.mercadopago.com/privacypolicy",
1987
+ "purpose": "Latin American payment platform",
1988
+ "data_collected": [
1989
+ "payment data",
1990
+ "personal info",
1991
+ "transaction history"
1992
+ ],
1993
+ "risk_score": 4,
1994
+ "alternatives": [
1995
+ "stripe"
1996
+ ]
1997
+ },
1998
+ {
1999
+ "id": "meta-pixel",
2000
+ "domains": [
2001
+ "tr.facebook.com",
2002
+ "tr.snapchat.com"
2003
+ ],
2004
+ "name": "Meta Conversion API",
2005
+ "company": "Meta Platforms Inc.",
2006
+ "category": "advertising",
2007
+ "gdpr_compliant": true,
2008
+ "purpose": "Server-side conversion tracking",
2009
+ "data_collected": [
2010
+ "conversion events",
2011
+ "hashed user data"
2012
+ ],
2013
+ "risk_score": 6
2014
+ },
2015
+ {
2016
+ "id": "metamask",
2017
+ "domains": [
2018
+ "metamask.io",
2019
+ "*.metamask.io"
2020
+ ],
2021
+ "name": "MetaMask",
2022
+ "company": "ConsenSys Software Inc.",
2023
+ "category": "web3",
2024
+ "gdpr_compliant": true,
2025
+ "privacy_policy": "https://metamask.io/privacy.html",
2026
+ "purpose": "Ethereum wallet and dApp browser",
2027
+ "data_collected": [
2028
+ "wallet address",
2029
+ "transaction data",
2030
+ "browser data"
2031
+ ],
2032
+ "risk_score": 5,
2033
+ "alternatives": [
2034
+ "walletconnect"
2035
+ ]
2036
+ },
2037
+ {
2038
+ "id": "microsoft-ads",
2039
+ "domains": [
2040
+ "bat.bing.com",
2041
+ "bing.com/action"
2042
+ ],
2043
+ "name": "Microsoft Advertising (Bing UET)",
2044
+ "company": "Microsoft Corporation",
2045
+ "category": "advertising",
2046
+ "gdpr_compliant": true,
2047
+ "purpose": "Conversion tracking for Microsoft/Bing ads",
2048
+ "data_collected": [
2049
+ "cookies",
2050
+ "page views",
2051
+ "conversions"
2052
+ ],
2053
+ "risk_score": 5
2054
+ },
2055
+ {
2056
+ "id": "microsoft-clarity",
2057
+ "domains": [
2058
+ "clarity.ms",
2059
+ "www.clarity.ms"
2060
+ ],
2061
+ "name": "Microsoft Clarity",
2062
+ "company": "Microsoft Corporation",
2063
+ "category": "heatmaps",
2064
+ "gdpr_compliant": true,
2065
+ "dpa_url": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA",
2066
+ "privacy_policy": "https://privacy.microsoft.com/en-us/privacystatement",
2067
+ "purpose": "Free heatmaps and session recordings",
2068
+ "data_collected": [
2069
+ "mouse movements",
2070
+ "clicks",
2071
+ "scrolls"
2072
+ ],
2073
+ "risk_score": 3
2074
+ },
2075
+ {
2076
+ "id": "mixpanel",
2077
+ "domains": [
2078
+ "api.mixpanel.com",
2079
+ "cdn.mxpnl.com",
2080
+ "mixpanel.com"
2081
+ ],
2082
+ "name": "Mixpanel",
2083
+ "company": "Mixpanel Inc.",
2084
+ "category": "analytics",
2085
+ "gdpr_compliant": true,
2086
+ "dpa_url": "https://mixpanel.com/legal/dpa/",
2087
+ "privacy_policy": "https://mixpanel.com/legal/privacy-policy/",
2088
+ "purpose": "Product analytics and user behavior tracking",
2089
+ "data_collected": [
2090
+ "events",
2091
+ "user properties",
2092
+ "device info"
2093
+ ],
2094
+ "risk_score": 3,
2095
+ "alternatives": [
2096
+ "posthog",
2097
+ "amplitude"
2098
+ ]
2099
+ },
2100
+ {
2101
+ "id": "moengage",
2102
+ "domains": [
2103
+ "moengage.com",
2104
+ "*.moengage.com",
2105
+ "cdn.moengage.com"
2106
+ ],
2107
+ "name": "MoEngage",
2108
+ "company": "MoEngage Inc.",
2109
+ "category": "push",
2110
+ "gdpr_compliant": true,
2111
+ "privacy_policy": "https://www.moengage.com/privacy-policy/",
2112
+ "purpose": "Customer engagement and analytics",
2113
+ "data_collected": [
2114
+ "user data",
2115
+ "events",
2116
+ "device info"
2117
+ ],
2118
+ "risk_score": 5,
2119
+ "alternatives": [
2120
+ "clevertap"
2121
+ ]
2122
+ },
2123
+ {
2124
+ "id": "mouseflow",
2125
+ "domains": [
2126
+ "mouseflow.com",
2127
+ "cdn.mouseflow.com",
2128
+ "o2.mouseflow.com"
2129
+ ],
2130
+ "name": "Mouseflow",
2131
+ "company": "Mouseflow ApS",
2132
+ "category": "heatmaps",
2133
+ "gdpr_compliant": true,
2134
+ "dpa_url": "https://mouseflow.com/legal/dpa/",
2135
+ "purpose": "Session replay and heatmaps",
2136
+ "data_collected": [
2137
+ "mouse movements",
2138
+ "clicks",
2139
+ "form interactions"
2140
+ ],
2141
+ "risk_score": 4
2142
+ },
2143
+ {
2144
+ "id": "naver",
2145
+ "domains": [
2146
+ "naver.com",
2147
+ "*.naver.com",
2148
+ "wcs.naver.com"
2149
+ ],
2150
+ "name": "Naver Analytics",
2151
+ "company": "Naver Corporation",
2152
+ "category": "analytics",
2153
+ "gdpr_compliant": false,
2154
+ "privacy_policy": "https://policy.naver.com/policy/privacy_en.html",
2155
+ "purpose": "Korean web analytics and advertising",
2156
+ "data_collected": [
2157
+ "page views",
2158
+ "cookies",
2159
+ "user behavior",
2160
+ "IP address"
2161
+ ],
2162
+ "risk_score": 6,
2163
+ "alternatives": [
2164
+ "google-analytics"
2165
+ ]
2166
+ },
2167
+ {
2168
+ "id": "newrelic",
2169
+ "domains": [
2170
+ "js-agent.newrelic.com",
2171
+ "bam.nr-data.net",
2172
+ "bam-cell.nr-data.net"
2173
+ ],
2174
+ "name": "New Relic Browser",
2175
+ "company": "New Relic Inc.",
2176
+ "category": "error_tracking",
2177
+ "gdpr_compliant": true,
2178
+ "dpa_url": "https://newrelic.com/termsandconditions/dataprocessingaddendum",
2179
+ "purpose": "Browser performance monitoring",
2180
+ "data_collected": [
2181
+ "performance metrics",
2182
+ "errors",
2183
+ "page load times"
2184
+ ],
2185
+ "risk_score": 2
2186
+ },
2187
+ {
2188
+ "id": "onesignal",
2189
+ "domains": [
2190
+ "onesignal.com",
2191
+ "cdn.onesignal.com",
2192
+ "*.os.tc"
2193
+ ],
2194
+ "name": "OneSignal",
2195
+ "company": "OneSignal Inc.",
2196
+ "category": "push",
2197
+ "gdpr_compliant": true,
2198
+ "privacy_policy": "https://onesignal.com/privacy_policy",
2199
+ "purpose": "Push notification delivery and engagement",
2200
+ "data_collected": [
2201
+ "device tokens",
2202
+ "engagement data",
2203
+ "user segments"
2204
+ ],
2205
+ "risk_score": 5,
2206
+ "alternatives": [
2207
+ "pusher",
2208
+ "firebase-messaging"
2209
+ ]
2210
+ },
2211
+ {
2212
+ "id": "onetrust",
2213
+ "domains": [
2214
+ "onetrust.com",
2215
+ "cdn.cookielaw.org",
2216
+ "optanon.blob.core.windows.net",
2217
+ "cookie-cdn.cookiepro.com"
2218
+ ],
2219
+ "name": "OneTrust",
2220
+ "company": "OneTrust LLC",
2221
+ "category": "consent",
2222
+ "gdpr_compliant": true,
2223
+ "purpose": "Cookie consent management",
2224
+ "data_collected": [
2225
+ "consent preferences",
2226
+ "IP address"
2227
+ ],
2228
+ "risk_score": 2
2229
+ },
2230
+ {
2231
+ "id": "opensea",
2232
+ "domains": [
2233
+ "opensea.io",
2234
+ "*.opensea.io",
2235
+ "api.opensea.io"
2236
+ ],
2237
+ "name": "OpenSea",
2238
+ "company": "Ozone Networks Inc.",
2239
+ "category": "web3",
2240
+ "gdpr_compliant": true,
2241
+ "privacy_policy": "https://opensea.io/privacy",
2242
+ "purpose": "NFT marketplace and embeds",
2243
+ "data_collected": [
2244
+ "wallet address",
2245
+ "transaction data",
2246
+ "browsing behavior"
2247
+ ],
2248
+ "risk_score": 5,
2249
+ "alternatives": []
2250
+ },
2251
+ {
2252
+ "id": "optimizely",
2253
+ "domains": [
2254
+ "optimizely.com",
2255
+ "cdn.optimizely.com",
2256
+ "logx.optimizely.com"
2257
+ ],
2258
+ "name": "Optimizely",
2259
+ "company": "Optimizely Inc.",
2260
+ "category": "ab_testing",
2261
+ "gdpr_compliant": true,
2262
+ "dpa_url": "https://www.optimizely.com/legal/dpa/",
2263
+ "purpose": "A/B testing and experimentation",
2264
+ "data_collected": [
2265
+ "cookies",
2266
+ "experiment assignments",
2267
+ "conversion data"
2268
+ ],
2269
+ "risk_score": 3
2270
+ },
2271
+ {
2272
+ "id": "osano",
2273
+ "domains": [
2274
+ "cmp.osano.com",
2275
+ "disclosure.osano.com"
2276
+ ],
2277
+ "name": "Osano",
2278
+ "company": "Osano Inc.",
2279
+ "category": "consent",
2280
+ "gdpr_compliant": true,
2281
+ "purpose": "Consent management platform",
2282
+ "data_collected": [
2283
+ "consent preferences"
2284
+ ],
2285
+ "risk_score": 1
2286
+ },
2287
+ {
2288
+ "id": "outbrain",
2289
+ "domains": [
2290
+ "outbrain.com",
2291
+ "widgets.outbrain.com",
2292
+ "log.outbrain.com"
2293
+ ],
2294
+ "name": "Outbrain",
2295
+ "company": "Outbrain Inc.",
2296
+ "category": "advertising",
2297
+ "gdpr_compliant": true,
2298
+ "privacy_policy": "https://www.outbrain.com/privacy/",
2299
+ "purpose": "Content recommendation and native advertising",
2300
+ "data_collected": [
2301
+ "cookies",
2302
+ "browsing behavior"
2303
+ ],
2304
+ "risk_score": 6
2305
+ },
2306
+ {
2307
+ "id": "pardot",
2308
+ "domains": [
2309
+ "pardot.com",
2310
+ "pi.pardot.com",
2311
+ "go.pardot.com"
2312
+ ],
2313
+ "name": "Pardot (Salesforce)",
2314
+ "company": "Salesforce Inc.",
2315
+ "category": "analytics",
2316
+ "gdpr_compliant": true,
2317
+ "purpose": "B2B marketing automation",
2318
+ "data_collected": [
2319
+ "page views",
2320
+ "form submissions",
2321
+ "email engagement"
2322
+ ],
2323
+ "risk_score": 4
2324
+ },
2325
+ {
2326
+ "id": "partnerstack",
2327
+ "domains": [
2328
+ "partnerstack.com",
2329
+ "*.partnerstack.com"
2330
+ ],
2331
+ "name": "PartnerStack",
2332
+ "company": "PartnerStack Inc.",
2333
+ "category": "referral",
2334
+ "gdpr_compliant": true,
2335
+ "privacy_policy": "https://partnerstack.com/privacy",
2336
+ "purpose": "Partner ecosystem platform",
2337
+ "data_collected": [
2338
+ "referral data",
2339
+ "conversions",
2340
+ "partner info"
2341
+ ],
2342
+ "risk_score": 4,
2343
+ "alternatives": [
2344
+ "impact"
2345
+ ]
2346
+ },
2347
+ {
2348
+ "id": "paypal",
2349
+ "domains": [
2350
+ "paypal.com",
2351
+ "www.paypal.com",
2352
+ "www.paypalobjects.com",
2353
+ "t.paypal.com"
2354
+ ],
2355
+ "name": "PayPal",
2356
+ "company": "PayPal Holdings Inc.",
2357
+ "category": "payments",
2358
+ "gdpr_compliant": true,
2359
+ "privacy_policy": "https://www.paypal.com/webapps/mpp/ua/privacy-full",
2360
+ "purpose": "Payment processing",
2361
+ "data_collected": [
2362
+ "payment information",
2363
+ "IP address"
2364
+ ],
2365
+ "risk_score": 2
2366
+ },
2367
+ {
2368
+ "id": "paytabs",
2369
+ "domains": [
2370
+ "paytabs.com",
2371
+ "*.paytabs.com"
2372
+ ],
2373
+ "name": "PayTabs",
2374
+ "company": "PayTabs Holding Company",
2375
+ "category": "payments",
2376
+ "gdpr_compliant": true,
2377
+ "privacy_policy": "https://site.paytabs.com/en/privacy-policy/",
2378
+ "purpose": "MENA payment processing",
2379
+ "data_collected": [
2380
+ "payment data",
2381
+ "personal info",
2382
+ "transaction history"
2383
+ ],
2384
+ "risk_score": 4,
2385
+ "alternatives": [
2386
+ "stripe"
2387
+ ]
2388
+ },
2389
+ {
2390
+ "id": "pinterest",
2391
+ "domains": [
2392
+ "ct.pinterest.com",
2393
+ "widgets.pinterest.com",
2394
+ "assets.pinterest.com"
2395
+ ],
2396
+ "name": "Pinterest Tag",
2397
+ "company": "Pinterest Inc.",
2398
+ "category": "advertising",
2399
+ "gdpr_compliant": true,
2400
+ "privacy_policy": "https://policy.pinterest.com/en/privacy-policy",
2401
+ "purpose": "Conversion tracking for Pinterest ads",
2402
+ "data_collected": [
2403
+ "cookies",
2404
+ "conversion data"
2405
+ ],
2406
+ "risk_score": 5
2407
+ },
2408
+ {
2409
+ "id": "piwik-pro",
2410
+ "domains": [
2411
+ "piwik.pro",
2412
+ "*.piwik.pro"
2413
+ ],
2414
+ "name": "Piwik PRO",
2415
+ "company": "Piwik PRO",
2416
+ "category": "analytics",
2417
+ "gdpr_compliant": true,
2418
+ "privacy_policy": "https://piwik.pro/privacy-policy/",
2419
+ "purpose": "Privacy-compliant analytics suite",
2420
+ "data_collected": [
2421
+ "page views",
2422
+ "events",
2423
+ "user attributes"
2424
+ ],
2425
+ "risk_score": 2,
2426
+ "alternatives": [
2427
+ "matomo",
2428
+ "plausible"
2429
+ ]
2430
+ },
2431
+ {
2432
+ "id": "plausible",
2433
+ "domains": [
2434
+ "plausible.io"
2435
+ ],
2436
+ "name": "Plausible Analytics",
2437
+ "company": "Plausible Insights O\u00dc",
2438
+ "category": "analytics",
2439
+ "gdpr_compliant": true,
2440
+ "dpa_url": "https://plausible.io/dpa",
2441
+ "privacy_policy": "https://plausible.io/data-policy",
2442
+ "purpose": "Privacy-friendly web analytics (no cookies)",
2443
+ "data_collected": [
2444
+ "page views",
2445
+ "referrer",
2446
+ "country"
2447
+ ],
2448
+ "risk_score": 1
2449
+ },
2450
+ {
2451
+ "id": "posthog",
2452
+ "domains": [
2453
+ "app.posthog.com",
2454
+ "us.posthog.com",
2455
+ "eu.posthog.com"
2456
+ ],
2457
+ "name": "PostHog",
2458
+ "company": "PostHog Inc.",
2459
+ "category": "analytics",
2460
+ "gdpr_compliant": true,
2461
+ "dpa_url": "https://posthog.com/dpa",
2462
+ "purpose": "Product analytics, feature flags, session replay",
2463
+ "data_collected": [
2464
+ "events",
2465
+ "session recordings",
2466
+ "user properties"
2467
+ ],
2468
+ "risk_score": 3
2469
+ },
2470
+ {
2471
+ "id": "pushengage",
2472
+ "domains": [
2473
+ "pushengage.com",
2474
+ "clientcdn.pushengage.com"
2475
+ ],
2476
+ "name": "PushEngage",
2477
+ "company": "PushEngage Inc.",
2478
+ "category": "push",
2479
+ "gdpr_compliant": true,
2480
+ "privacy_policy": "https://www.pushengage.com/privacy-policy/",
2481
+ "purpose": "Web push notification platform",
2482
+ "data_collected": [
2483
+ "subscriber data",
2484
+ "engagement",
2485
+ "device info"
2486
+ ],
2487
+ "risk_score": 4,
2488
+ "alternatives": [
2489
+ "onesignal"
2490
+ ]
2491
+ },
2492
+ {
2493
+ "id": "pusher",
2494
+ "domains": [
2495
+ "pusher.com",
2496
+ "*.pusher.com",
2497
+ "*.pusherapp.com"
2498
+ ],
2499
+ "name": "Pusher",
2500
+ "company": "Pusher Ltd.",
2501
+ "category": "push",
2502
+ "gdpr_compliant": true,
2503
+ "privacy_policy": "https://pusher.com/legal/privacy-policy",
2504
+ "purpose": "Real-time messaging and push notifications",
2505
+ "data_collected": [
2506
+ "connection data",
2507
+ "messages"
2508
+ ],
2509
+ "risk_score": 3,
2510
+ "alternatives": [
2511
+ "onesignal"
2512
+ ]
2513
+ },
2514
+ {
2515
+ "id": "qualtrics",
2516
+ "domains": [
2517
+ "qualtrics.com",
2518
+ "*.qualtrics.com",
2519
+ "siteintercept.qualtrics.com"
2520
+ ],
2521
+ "name": "Qualtrics",
2522
+ "company": "Qualtrics International",
2523
+ "category": "forms",
2524
+ "gdpr_compliant": true,
2525
+ "privacy_policy": "https://www.qualtrics.com/privacy-statement/",
2526
+ "purpose": "Experience management and surveys",
2527
+ "data_collected": [
2528
+ "survey responses",
2529
+ "behavioral data",
2530
+ "user attributes"
2531
+ ],
2532
+ "risk_score": 4,
2533
+ "alternatives": [
2534
+ "surveymonkey"
2535
+ ]
2536
+ },
2537
+ {
2538
+ "id": "quantcast",
2539
+ "domains": [
2540
+ "quantserve.com",
2541
+ "pixel.quantserve.com",
2542
+ "quantcast.com"
2543
+ ],
2544
+ "name": "Quantcast",
2545
+ "company": "Quantcast Corporation",
2546
+ "category": "advertising",
2547
+ "gdpr_compliant": true,
2548
+ "purpose": "Audience measurement and targeted advertising",
2549
+ "data_collected": [
2550
+ "cookies",
2551
+ "browsing behavior",
2552
+ "demographics"
2553
+ ],
2554
+ "risk_score": 6
2555
+ },
2556
+ {
2557
+ "id": "rakuten",
2558
+ "domains": [
2559
+ "rakuten.co.jp",
2560
+ "*.rakuten-static.com",
2561
+ "grp01.id.rakuten.co.jp"
2562
+ ],
2563
+ "name": "Rakuten",
2564
+ "company": "Rakuten Group Inc.",
2565
+ "category": "advertising",
2566
+ "gdpr_compliant": false,
2567
+ "privacy_policy": "https://privacy.rakuten.co.jp/",
2568
+ "purpose": "Japanese e-commerce and advertising",
2569
+ "data_collected": [
2570
+ "cookies",
2571
+ "purchase data",
2572
+ "browsing behavior"
2573
+ ],
2574
+ "risk_score": 5,
2575
+ "alternatives": []
2576
+ },
2577
+ {
2578
+ "id": "recaptcha-enterprise",
2579
+ "domains": [
2580
+ "recaptchaenterprise.googleapis.com"
2581
+ ],
2582
+ "name": "reCAPTCHA Enterprise",
2583
+ "company": "Google LLC",
2584
+ "category": "security",
2585
+ "gdpr_compliant": true,
2586
+ "purpose": "Enterprise bot detection",
2587
+ "data_collected": [
2588
+ "browser signals",
2589
+ "interactions"
2590
+ ],
2591
+ "risk_score": 3
2592
+ },
2593
+ {
2594
+ "id": "reddit-pixel",
2595
+ "domains": [
2596
+ "alb.reddit.com",
2597
+ "redditmedia.com"
2598
+ ],
2599
+ "name": "Reddit Pixel",
2600
+ "company": "Reddit Inc.",
2601
+ "category": "advertising",
2602
+ "gdpr_compliant": true,
2603
+ "privacy_policy": "https://www.reddit.com/policies/privacy-policy",
2604
+ "purpose": "Conversion tracking for Reddit ads",
2605
+ "data_collected": [
2606
+ "cookies",
2607
+ "IP address"
2608
+ ],
2609
+ "risk_score": 4
2610
+ },
2611
+ {
2612
+ "id": "referralcandy",
2613
+ "domains": [
2614
+ "referralcandy.com",
2615
+ "*.referralcandy.com"
2616
+ ],
2617
+ "name": "ReferralCandy",
2618
+ "company": "ReferralCandy Pte. Ltd.",
2619
+ "category": "referral",
2620
+ "gdpr_compliant": true,
2621
+ "privacy_policy": "https://www.referralcandy.com/privacy-policy",
2622
+ "purpose": "Referral marketing for e-commerce",
2623
+ "data_collected": [
2624
+ "customer data",
2625
+ "referral data",
2626
+ "purchase data"
2627
+ ],
2628
+ "risk_score": 4,
2629
+ "alternatives": [
2630
+ "rewardful"
2631
+ ]
2632
+ },
2633
+ {
2634
+ "id": "rewardful",
2635
+ "domains": [
2636
+ "rewardful.com",
2637
+ "*.getrewardful.com"
2638
+ ],
2639
+ "name": "Rewardful",
2640
+ "company": "Rewardful",
2641
+ "category": "referral",
2642
+ "gdpr_compliant": true,
2643
+ "privacy_policy": "https://www.rewardful.com/privacy",
2644
+ "purpose": "Affiliate tracking for SaaS",
2645
+ "data_collected": [
2646
+ "referral cookies",
2647
+ "conversion data"
2648
+ ],
2649
+ "risk_score": 3,
2650
+ "alternatives": [
2651
+ "partnerstack"
2652
+ ]
2653
+ },
2654
+ {
2655
+ "id": "rollbar",
2656
+ "domains": [
2657
+ "rollbar.com",
2658
+ "api.rollbar.com",
2659
+ "cdn.rollbar.com"
2660
+ ],
2661
+ "name": "Rollbar",
2662
+ "company": "Rollbar Inc.",
2663
+ "category": "error_tracking",
2664
+ "gdpr_compliant": true,
2665
+ "purpose": "Error monitoring and deployment tracking",
2666
+ "data_collected": [
2667
+ "error data",
2668
+ "user agent"
2669
+ ],
2670
+ "risk_score": 2
2671
+ },
2672
+ {
2673
+ "id": "rudderstack",
2674
+ "domains": [
2675
+ "rudderstack.com",
2676
+ "cdn.rudderlabs.com",
2677
+ "api.rudderlabs.com"
2678
+ ],
2679
+ "name": "RudderStack",
2680
+ "company": "RudderStack Inc.",
2681
+ "category": "analytics",
2682
+ "gdpr_compliant": true,
2683
+ "purpose": "Open-source customer data platform",
2684
+ "data_collected": [
2685
+ "events",
2686
+ "user identities"
2687
+ ],
2688
+ "risk_score": 2
2689
+ },
2690
+ {
2691
+ "id": "segment",
2692
+ "domains": [
2693
+ "api.segment.io",
2694
+ "cdn.segment.com",
2695
+ "segment.com"
2696
+ ],
2697
+ "name": "Segment",
2698
+ "company": "Twilio Inc.",
2699
+ "category": "analytics",
2700
+ "gdpr_compliant": true,
2701
+ "dpa_url": "https://www.twilio.com/legal/data-protection-addendum",
2702
+ "privacy_policy": "https://segment.com/legal/privacy/",
2703
+ "purpose": "Customer data platform and analytics routing",
2704
+ "data_collected": [
2705
+ "events",
2706
+ "user identities",
2707
+ "device info"
2708
+ ],
2709
+ "risk_score": 3,
2710
+ "alternatives": [
2711
+ "rudderstack",
2712
+ "jitsu"
2713
+ ]
2714
+ },
2715
+ {
2716
+ "id": "sentry",
2717
+ "domains": [
2718
+ "sentry.io",
2719
+ "browser.sentry-cdn.com",
2720
+ "js.sentry-cdn.com",
2721
+ "o0.ingest.sentry.io"
2722
+ ],
2723
+ "name": "Sentry",
2724
+ "company": "Functional Software Inc.",
2725
+ "category": "error_tracking",
2726
+ "gdpr_compliant": true,
2727
+ "dpa_url": "https://sentry.io/legal/dpa/",
2728
+ "privacy_policy": "https://sentry.io/privacy/",
2729
+ "purpose": "Error monitoring and performance tracking",
2730
+ "data_collected": [
2731
+ "error stack traces",
2732
+ "user agent",
2733
+ "IP address"
2734
+ ],
2735
+ "risk_score": 2
2736
+ },
2737
+ {
2738
+ "id": "shareasale",
2739
+ "domains": [
2740
+ "shareasale.com",
2741
+ "*.shareasale.com"
2742
+ ],
2743
+ "name": "ShareASale",
2744
+ "company": "Awin Ltd.",
2745
+ "category": "referral",
2746
+ "gdpr_compliant": true,
2747
+ "privacy_policy": "https://www.shareasale.com/PrivacyPolicy.pdf",
2748
+ "purpose": "Affiliate marketing network",
2749
+ "data_collected": [
2750
+ "cookies",
2751
+ "clicks",
2752
+ "conversions",
2753
+ "commission data"
2754
+ ],
2755
+ "risk_score": 5,
2756
+ "alternatives": [
2757
+ "impact",
2758
+ "cj-affiliate"
2759
+ ]
2760
+ },
2761
+ {
2762
+ "id": "sharethis",
2763
+ "domains": [
2764
+ "sharethis.com",
2765
+ "*.sharethis.com",
2766
+ "t.sharethis.com"
2767
+ ],
2768
+ "name": "ShareThis",
2769
+ "company": "ShareThis Inc.",
2770
+ "category": "social",
2771
+ "gdpr_compliant": true,
2772
+ "privacy_policy": "https://sharethis.com/privacy/",
2773
+ "purpose": "Social sharing buttons with data collection",
2774
+ "data_collected": [
2775
+ "browsing behavior",
2776
+ "cookies",
2777
+ "device data",
2778
+ "share activity"
2779
+ ],
2780
+ "risk_score": 7,
2781
+ "alternatives": [
2782
+ "addtoany"
2783
+ ]
2784
+ },
2785
+ {
2786
+ "id": "shopify",
2787
+ "domains": [
2788
+ "cdn.shopify.com",
2789
+ "monorail-edge.shopifysvc.com",
2790
+ "v.shopify.com"
2791
+ ],
2792
+ "name": "Shopify",
2793
+ "company": "Shopify Inc.",
2794
+ "category": "analytics",
2795
+ "gdpr_compliant": true,
2796
+ "privacy_policy": "https://www.shopify.com/legal/privacy",
2797
+ "purpose": "E-commerce platform and analytics",
2798
+ "data_collected": [
2799
+ "page views",
2800
+ "cart data",
2801
+ "purchase data"
2802
+ ],
2803
+ "risk_score": 2
2804
+ },
2805
+ {
2806
+ "id": "shopify-analytics",
2807
+ "domains": [
2808
+ "shopify.com",
2809
+ "cdn.shopify.com",
2810
+ "monorail-edge.shopifysvc.com"
2811
+ ],
2812
+ "name": "Shopify Analytics",
2813
+ "company": "Shopify Inc.",
2814
+ "category": "analytics",
2815
+ "gdpr_compliant": true,
2816
+ "privacy_policy": "https://www.shopify.com/legal/privacy",
2817
+ "purpose": "E-commerce analytics and tracking",
2818
+ "data_collected": [
2819
+ "purchase data",
2820
+ "browsing behavior",
2821
+ "cart data",
2822
+ "customer info"
2823
+ ],
2824
+ "risk_score": 4,
2825
+ "alternatives": []
2826
+ },
2827
+ {
2828
+ "id": "sitespect",
2829
+ "domains": [
2830
+ "sitespect.com",
2831
+ "*.sitespect.net"
2832
+ ],
2833
+ "name": "SiteSpect",
2834
+ "company": "SiteSpect Inc.",
2835
+ "category": "ab_testing",
2836
+ "gdpr_compliant": true,
2837
+ "privacy_policy": "https://www.sitespect.com/privacy-policy/",
2838
+ "purpose": "Server-side A/B testing",
2839
+ "data_collected": [
2840
+ "cookies",
2841
+ "page views"
2842
+ ],
2843
+ "risk_score": 2,
2844
+ "alternatives": [
2845
+ "optimizely"
2846
+ ]
2847
+ },
2848
+ {
2849
+ "id": "sixsense",
2850
+ "domains": [
2851
+ "6sense.com",
2852
+ "*.6sense.com",
2853
+ "j.6sc.co"
2854
+ ],
2855
+ "name": "6sense",
2856
+ "company": "6sense Insights Inc.",
2857
+ "category": "b2b_intelligence",
2858
+ "gdpr_compliant": true,
2859
+ "privacy_policy": "https://6sense.com/privacy-policy/",
2860
+ "purpose": "B2B intent data and account-based marketing",
2861
+ "data_collected": [
2862
+ "company data",
2863
+ "IP-based identification",
2864
+ "intent signals",
2865
+ "browsing behavior"
2866
+ ],
2867
+ "risk_score": 7,
2868
+ "alternatives": [
2869
+ "demandbase"
2870
+ ]
2871
+ },
2872
+ {
2873
+ "id": "snapchat-pixel",
2874
+ "domains": [
2875
+ "sc-static.net",
2876
+ "tr.snapchat.com"
2877
+ ],
2878
+ "name": "Snapchat Pixel",
2879
+ "company": "Snap Inc.",
2880
+ "category": "advertising",
2881
+ "gdpr_compliant": true,
2882
+ "privacy_policy": "https://snap.com/en-US/privacy/privacy-policy",
2883
+ "purpose": "Conversion tracking for Snapchat ads",
2884
+ "data_collected": [
2885
+ "cookies",
2886
+ "IP address",
2887
+ "conversion data"
2888
+ ],
2889
+ "risk_score": 5
2890
+ },
2891
+ {
2892
+ "id": "soundcloud",
2893
+ "domains": [
2894
+ "soundcloud.com",
2895
+ "w.soundcloud.com",
2896
+ "api-v2.soundcloud.com"
2897
+ ],
2898
+ "name": "SoundCloud Embeds",
2899
+ "company": "SoundCloud Limited",
2900
+ "category": "other",
2901
+ "gdpr_compliant": true,
2902
+ "purpose": "Audio embedding",
2903
+ "data_collected": [
2904
+ "cookies",
2905
+ "IP address"
2906
+ ],
2907
+ "risk_score": 3
2908
+ },
2909
+ {
2910
+ "id": "split-io",
2911
+ "domains": [
2912
+ "cdn.split.io",
2913
+ "events.split.io",
2914
+ "streaming.split.io"
2915
+ ],
2916
+ "name": "Split.io",
2917
+ "company": "Split Software Inc.",
2918
+ "category": "ab_testing",
2919
+ "gdpr_compliant": true,
2920
+ "purpose": "Feature flags and experimentation",
2921
+ "data_collected": [
2922
+ "feature flag evaluations",
2923
+ "events"
2924
+ ],
2925
+ "risk_score": 2
2926
+ },
2927
+ {
2928
+ "id": "spotify-embed",
2929
+ "domains": [
2930
+ "open.spotify.com",
2931
+ "embed.spotify.com"
2932
+ ],
2933
+ "name": "Spotify Embeds",
2934
+ "company": "Spotify AB",
2935
+ "category": "other",
2936
+ "gdpr_compliant": true,
2937
+ "purpose": "Music and podcast embedding",
2938
+ "data_collected": [
2939
+ "cookies",
2940
+ "listening data"
2941
+ ],
2942
+ "risk_score": 3
2943
+ },
2944
+ {
2945
+ "id": "spotify-widget",
2946
+ "domains": [
2947
+ "open.spotify.com",
2948
+ "embed.spotify.com"
2949
+ ],
2950
+ "name": "Spotify Embed",
2951
+ "company": "Spotify AB",
2952
+ "category": "video",
2953
+ "gdpr_compliant": true,
2954
+ "privacy_policy": "https://www.spotify.com/legal/privacy-policy/",
2955
+ "purpose": "Spotify content embedding",
2956
+ "data_collected": [
2957
+ "listening data",
2958
+ "cookies"
2959
+ ],
2960
+ "risk_score": 4,
2961
+ "alternatives": [
2962
+ "soundcloud"
2963
+ ]
2964
+ },
2965
+ {
2966
+ "id": "statsig",
2967
+ "domains": [
2968
+ "api.statsig.com",
2969
+ "featuregates.org"
2970
+ ],
2971
+ "name": "Statsig",
2972
+ "company": "Statsig Inc.",
2973
+ "category": "ab_testing",
2974
+ "gdpr_compliant": true,
2975
+ "purpose": "Feature flags and product experimentation",
2976
+ "data_collected": [
2977
+ "events",
2978
+ "experiment assignments"
2979
+ ],
2980
+ "risk_score": 2
2981
+ },
2982
+ {
2983
+ "id": "stripe",
2984
+ "domains": [
2985
+ "stripe.com",
2986
+ "js.stripe.com",
2987
+ "m.stripe.com",
2988
+ "m.stripe.network",
2989
+ "q.stripe.com"
2990
+ ],
2991
+ "name": "Stripe",
2992
+ "company": "Stripe Inc.",
2993
+ "category": "payments",
2994
+ "gdpr_compliant": true,
2995
+ "dpa_url": "https://stripe.com/legal/dpa",
2996
+ "privacy_policy": "https://stripe.com/privacy",
2997
+ "purpose": "Payment processing",
2998
+ "data_collected": [
2999
+ "payment information",
3000
+ "IP address",
3001
+ "device fingerprint"
3002
+ ],
3003
+ "risk_score": 2
3004
+ },
3005
+ {
3006
+ "id": "substack",
3007
+ "domains": [
3008
+ "substack.com",
3009
+ "substackcdn.com",
3010
+ "substack-post-media.s3.amazonaws.com"
3011
+ ],
3012
+ "name": "Substack",
3013
+ "company": "Substack Inc.",
3014
+ "category": "social",
3015
+ "gdpr_compliant": true,
3016
+ "privacy_policy": "https://substack.com/privacy",
3017
+ "purpose": "Newsletter platform embedding and content delivery",
3018
+ "data_collected": [
3019
+ "IP address",
3020
+ "cookies",
3021
+ "reading behavior"
3022
+ ],
3023
+ "risk_score": 3
3024
+ },
3025
+ {
3026
+ "id": "sumo",
3027
+ "domains": [
3028
+ "sumo.com",
3029
+ "load.sumo.com",
3030
+ "sumo-logger.herokuapp.com"
3031
+ ],
3032
+ "name": "Sumo",
3033
+ "company": "Sumo Group Inc.",
3034
+ "category": "analytics",
3035
+ "gdpr_compliant": true,
3036
+ "purpose": "Email capture and site analytics",
3037
+ "data_collected": [
3038
+ "email addresses",
3039
+ "page views"
3040
+ ],
3041
+ "risk_score": 3
3042
+ },
3043
+ {
3044
+ "id": "super-so",
3045
+ "domains": [
3046
+ "super.so",
3047
+ "assets.super.so",
3048
+ "assets-v2.super.so",
3049
+ "images.spr.so"
3050
+ ],
3051
+ "name": "Super.so",
3052
+ "company": "Super Technologies Inc.",
3053
+ "category": "cdn",
3054
+ "gdpr_compliant": true,
3055
+ "privacy_policy": "https://super.so/privacy",
3056
+ "purpose": "Website builder and hosting platform (Notion-based)",
3057
+ "data_collected": [
3058
+ "IP address",
3059
+ "page views"
3060
+ ],
3061
+ "risk_score": 2
3062
+ },
3063
+ {
3064
+ "id": "surveymonkey",
3065
+ "domains": [
3066
+ "surveymonkey.com",
3067
+ "*.surveymonkey.com"
3068
+ ],
3069
+ "name": "SurveyMonkey",
3070
+ "company": "Momentive Inc.",
3071
+ "category": "forms",
3072
+ "gdpr_compliant": true,
3073
+ "privacy_policy": "https://www.surveymonkey.com/mp/legal/privacy/",
3074
+ "purpose": "Survey creation and analysis",
3075
+ "data_collected": [
3076
+ "survey responses",
3077
+ "IP address",
3078
+ "cookies"
3079
+ ],
3080
+ "risk_score": 4,
3081
+ "alternatives": [
3082
+ "qualtrics",
3083
+ "typeform"
3084
+ ]
3085
+ },
3086
+ {
3087
+ "id": "taboola",
3088
+ "domains": [
3089
+ "cdn.taboola.com",
3090
+ "trc.taboola.com",
3091
+ "api.taboola.com"
3092
+ ],
3093
+ "name": "Taboola",
3094
+ "company": "Taboola.com Ltd.",
3095
+ "category": "advertising",
3096
+ "gdpr_compliant": true,
3097
+ "privacy_policy": "https://www.taboola.com/policies/privacy-policy",
3098
+ "purpose": "Content recommendation and native advertising",
3099
+ "data_collected": [
3100
+ "cookies",
3101
+ "browsing behavior"
3102
+ ],
3103
+ "risk_score": 6
3104
+ },
3105
+ {
3106
+ "id": "tapfiliate",
3107
+ "domains": [
3108
+ "tapfiliate.com",
3109
+ "*.tapfiliate.com"
3110
+ ],
3111
+ "name": "Tapfiliate",
3112
+ "company": "Tapfiliate B.V.",
3113
+ "category": "referral",
3114
+ "gdpr_compliant": true,
3115
+ "privacy_policy": "https://tapfiliate.com/privacy-policy/",
3116
+ "purpose": "Affiliate tracking software",
3117
+ "data_collected": [
3118
+ "referral data",
3119
+ "conversions",
3120
+ "cookies"
3121
+ ],
3122
+ "risk_score": 3,
3123
+ "alternatives": [
3124
+ "rewardful"
3125
+ ]
3126
+ },
3127
+ {
3128
+ "id": "tealium",
3129
+ "domains": [
3130
+ "tealium.com",
3131
+ "tags.tiqcdn.com",
3132
+ "collect.tealiumiq.com",
3133
+ "datacloud.tealiumiq.com"
3134
+ ],
3135
+ "name": "Tealium",
3136
+ "company": "Tealium Inc.",
3137
+ "category": "tag_manager",
3138
+ "gdpr_compliant": true,
3139
+ "dpa_url": "https://tealium.com/dpa/",
3140
+ "purpose": "Tag management and customer data platform",
3141
+ "data_collected": [
3142
+ "page views",
3143
+ "events",
3144
+ "user data"
3145
+ ],
3146
+ "risk_score": 3
3147
+ },
3148
+ {
3149
+ "id": "telegram-widget",
3150
+ "domains": [
3151
+ "telegram.org",
3152
+ "t.me",
3153
+ "core.telegram.org"
3154
+ ],
3155
+ "name": "Telegram Widget",
3156
+ "company": "Telegram FZ-LLC",
3157
+ "category": "chat",
3158
+ "gdpr_compliant": true,
3159
+ "privacy_policy": "https://telegram.org/privacy",
3160
+ "purpose": "Telegram chat and channel embeds",
3161
+ "data_collected": [
3162
+ "user data",
3163
+ "messages"
3164
+ ],
3165
+ "risk_score": 4,
3166
+ "alternatives": [
3167
+ "whatsapp-widget"
3168
+ ]
3169
+ },
3170
+ {
3171
+ "id": "telr",
3172
+ "domains": [
3173
+ "telr.com",
3174
+ "*.telr.com"
3175
+ ],
3176
+ "name": "Telr",
3177
+ "company": "Telr Online Payment",
3178
+ "category": "payments",
3179
+ "gdpr_compliant": true,
3180
+ "privacy_policy": "https://telr.com/privacy-policy/",
3181
+ "purpose": "MENA payment processing",
3182
+ "data_collected": [
3183
+ "payment data",
3184
+ "personal info"
3185
+ ],
3186
+ "risk_score": 4,
3187
+ "alternatives": [
3188
+ "paytabs"
3189
+ ]
3190
+ },
3191
+ {
3192
+ "id": "tidio",
3193
+ "domains": [
3194
+ "tidio.co",
3195
+ "code.tidio.co",
3196
+ "widget-v4.tidiochat.com"
3197
+ ],
3198
+ "name": "Tidio",
3199
+ "company": "Tidio LLC",
3200
+ "category": "chat",
3201
+ "gdpr_compliant": true,
3202
+ "purpose": "Live chat and chatbot",
3203
+ "data_collected": [
3204
+ "conversation data",
3205
+ "user agent"
3206
+ ],
3207
+ "risk_score": 3
3208
+ },
3209
+ {
3210
+ "id": "tiktok-pixel",
3211
+ "domains": [
3212
+ "analytics.tiktok.com",
3213
+ "an.tiktok.com"
3214
+ ],
3215
+ "name": "TikTok Pixel",
3216
+ "company": "ByteDance Ltd.",
3217
+ "category": "advertising",
3218
+ "gdpr_compliant": false,
3219
+ "privacy_policy": "https://www.tiktok.com/legal/privacy-policy",
3220
+ "purpose": "Ad conversion tracking and retargeting",
3221
+ "data_collected": [
3222
+ "cookies",
3223
+ "IP address",
3224
+ "device fingerprint",
3225
+ "browsing behavior"
3226
+ ],
3227
+ "risk_score": 8,
3228
+ "alternatives": []
3229
+ },
3230
+ {
3231
+ "id": "twitter-pixel",
3232
+ "domains": [
3233
+ "t.co",
3234
+ "analytics.twitter.com",
3235
+ "static.ads-twitter.com",
3236
+ "ads-api.twitter.com"
3237
+ ],
3238
+ "name": "Twitter/X Pixel",
3239
+ "company": "X Corp.",
3240
+ "category": "advertising",
3241
+ "gdpr_compliant": true,
3242
+ "privacy_policy": "https://twitter.com/en/privacy",
3243
+ "purpose": "Conversion tracking for Twitter ads",
3244
+ "data_collected": [
3245
+ "cookies",
3246
+ "IP address",
3247
+ "conversion data"
3248
+ ],
3249
+ "risk_score": 5
3250
+ },
3251
+ {
3252
+ "id": "twitter-widgets",
3253
+ "domains": [
3254
+ "platform.twitter.com",
3255
+ "syndication.twitter.com"
3256
+ ],
3257
+ "name": "Twitter/X Widgets",
3258
+ "company": "X Corp.",
3259
+ "category": "social",
3260
+ "gdpr_compliant": true,
3261
+ "privacy_policy": "https://twitter.com/en/privacy",
3262
+ "purpose": "Embedded tweets and follow buttons",
3263
+ "data_collected": [
3264
+ "cookies",
3265
+ "IP address"
3266
+ ],
3267
+ "risk_score": 3
3268
+ },
3269
+ {
3270
+ "id": "typeform",
3271
+ "domains": [
3272
+ "typeform.com",
3273
+ "embed.typeform.com",
3274
+ "renderer-assets.typeform.com"
3275
+ ],
3276
+ "name": "Typeform",
3277
+ "company": "TYPEFORM SL",
3278
+ "category": "other",
3279
+ "gdpr_compliant": true,
3280
+ "purpose": "Form and survey embedding",
3281
+ "data_collected": [
3282
+ "form responses",
3283
+ "user agent"
3284
+ ],
3285
+ "risk_score": 2
3286
+ },
3287
+ {
3288
+ "id": "typekit",
3289
+ "domains": [
3290
+ "use.typekit.net",
3291
+ "p.typekit.net"
3292
+ ],
3293
+ "name": "Adobe Fonts (Typekit)",
3294
+ "company": "Adobe Inc.",
3295
+ "category": "fonts",
3296
+ "gdpr_compliant": true,
3297
+ "purpose": "Web font delivery",
3298
+ "data_collected": [
3299
+ "IP address",
3300
+ "page views"
3301
+ ],
3302
+ "risk_score": 2
3303
+ },
3304
+ {
3305
+ "id": "umeng",
3306
+ "domains": [
3307
+ "umeng.com",
3308
+ "*.umeng.com",
3309
+ "log.umsns.com"
3310
+ ],
3311
+ "name": "Umeng Analytics",
3312
+ "company": "Alibaba Group",
3313
+ "category": "analytics",
3314
+ "gdpr_compliant": false,
3315
+ "privacy_policy": "https://www.umeng.com/policy",
3316
+ "purpose": "Chinese mobile and web analytics",
3317
+ "data_collected": [
3318
+ "device data",
3319
+ "location",
3320
+ "app usage",
3321
+ "IMEI",
3322
+ "IP address"
3323
+ ],
3324
+ "risk_score": 8,
3325
+ "alternatives": [
3326
+ "google-analytics"
3327
+ ]
3328
+ },
3329
+ {
3330
+ "id": "uniswap",
3331
+ "domains": [
3332
+ "uniswap.org",
3333
+ "app.uniswap.org",
3334
+ "*.uniswap.org"
3335
+ ],
3336
+ "name": "Uniswap",
3337
+ "company": "Uniswap Labs",
3338
+ "category": "web3",
3339
+ "gdpr_compliant": true,
3340
+ "privacy_policy": "https://uniswap.org/privacy-policy",
3341
+ "purpose": "Decentralized exchange widget",
3342
+ "data_collected": [
3343
+ "wallet address",
3344
+ "swap data",
3345
+ "IP address"
3346
+ ],
3347
+ "risk_score": 5,
3348
+ "alternatives": []
3349
+ },
3350
+ {
3351
+ "id": "unpkg",
3352
+ "domains": [
3353
+ "unpkg.com"
3354
+ ],
3355
+ "name": "unpkg",
3356
+ "company": "unpkg",
3357
+ "category": "cdn",
3358
+ "gdpr_compliant": true,
3359
+ "purpose": "CDN for npm packages",
3360
+ "data_collected": [
3361
+ "IP address"
3362
+ ],
3363
+ "risk_score": 1
3364
+ },
3365
+ {
3366
+ "id": "usercentrics",
3367
+ "domains": [
3368
+ "usercentrics.eu",
3369
+ "app.usercentrics.eu",
3370
+ "v2.usercentrics.eu"
3371
+ ],
3372
+ "name": "Usercentrics",
3373
+ "company": "Usercentrics GmbH",
3374
+ "category": "consent",
3375
+ "gdpr_compliant": true,
3376
+ "purpose": "Consent management platform",
3377
+ "data_collected": [
3378
+ "consent preferences"
3379
+ ],
3380
+ "risk_score": 1
3381
+ },
3382
+ {
3383
+ "id": "vimeo",
3384
+ "domains": [
3385
+ "vimeo.com",
3386
+ "player.vimeo.com",
3387
+ "f.vimeocdn.com",
3388
+ "i.vimeocdn.com"
3389
+ ],
3390
+ "name": "Vimeo",
3391
+ "company": "Vimeo Inc.",
3392
+ "category": "video",
3393
+ "gdpr_compliant": true,
3394
+ "privacy_policy": "https://vimeo.com/privacy",
3395
+ "purpose": "Video hosting and embedding",
3396
+ "data_collected": [
3397
+ "cookies",
3398
+ "IP address",
3399
+ "viewing data"
3400
+ ],
3401
+ "risk_score": 3
3402
+ },
3403
+ {
3404
+ "id": "vwo",
3405
+ "domains": [
3406
+ "dev.visualwebsiteoptimizer.com",
3407
+ "d5nxst8fruw4z.cloudfront.net"
3408
+ ],
3409
+ "name": "VWO",
3410
+ "company": "Wingify Software Pvt. Ltd.",
3411
+ "category": "ab_testing",
3412
+ "gdpr_compliant": true,
3413
+ "privacy_policy": "https://vwo.com/privacy-policy/",
3414
+ "purpose": "A/B testing and conversion optimization",
3415
+ "data_collected": [
3416
+ "cookies",
3417
+ "experiment data",
3418
+ "user interactions"
3419
+ ],
3420
+ "risk_score": 3
3421
+ },
3422
+ {
3423
+ "id": "walletconnect",
3424
+ "domains": [
3425
+ "walletconnect.com",
3426
+ "*.walletconnect.org",
3427
+ "bridge.walletconnect.org"
3428
+ ],
3429
+ "name": "WalletConnect",
3430
+ "company": "WalletConnect Inc.",
3431
+ "category": "web3",
3432
+ "gdpr_compliant": true,
3433
+ "privacy_policy": "https://walletconnect.com/privacy",
3434
+ "purpose": "Wallet connection protocol for dApps",
3435
+ "data_collected": [
3436
+ "wallet address",
3437
+ "session data"
3438
+ ],
3439
+ "risk_score": 4,
3440
+ "alternatives": [
3441
+ "metamask"
3442
+ ]
3443
+ },
3444
+ {
3445
+ "id": "wechat-widget",
3446
+ "domains": [
3447
+ "weixin.qq.com",
3448
+ "res.wx.qq.com",
3449
+ "open.weixin.qq.com"
3450
+ ],
3451
+ "name": "WeChat Widget",
3452
+ "company": "Tencent Holdings Ltd.",
3453
+ "category": "social",
3454
+ "gdpr_compliant": false,
3455
+ "privacy_policy": "https://www.wechat.com/en/privacy_policy.html",
3456
+ "purpose": "WeChat social sharing and login",
3457
+ "data_collected": [
3458
+ "user profile",
3459
+ "social connections",
3460
+ "device data",
3461
+ "IP address"
3462
+ ],
3463
+ "risk_score": 8,
3464
+ "alternatives": []
3465
+ },
3466
+ {
3467
+ "id": "whatsapp-widget",
3468
+ "domains": [
3469
+ "wa.me",
3470
+ "api.whatsapp.com",
3471
+ "web.whatsapp.com"
3472
+ ],
3473
+ "name": "WhatsApp Widget",
3474
+ "company": "Meta Platforms Inc.",
3475
+ "category": "chat",
3476
+ "gdpr_compliant": true,
3477
+ "privacy_policy": "https://www.whatsapp.com/legal/privacy-policy",
3478
+ "purpose": "WhatsApp chat widget for customer support",
3479
+ "data_collected": [
3480
+ "phone number",
3481
+ "chat messages"
3482
+ ],
3483
+ "risk_score": 5,
3484
+ "alternatives": [
3485
+ "telegram-widget"
3486
+ ]
3487
+ },
3488
+ {
3489
+ "id": "wistia",
3490
+ "domains": [
3491
+ "wistia.com",
3492
+ "fast.wistia.com",
3493
+ "fast.wistia.net",
3494
+ "embedwistia-a.akamaihd.net"
3495
+ ],
3496
+ "name": "Wistia",
3497
+ "company": "Wistia Inc.",
3498
+ "category": "video",
3499
+ "gdpr_compliant": true,
3500
+ "purpose": "Business video hosting and analytics",
3501
+ "data_collected": [
3502
+ "viewing data",
3503
+ "engagement metrics"
3504
+ ],
3505
+ "risk_score": 3
3506
+ },
3507
+ {
3508
+ "id": "yahoo-japan",
3509
+ "domains": [
3510
+ "yahoo.co.jp",
3511
+ "yjtag.yahoo.co.jp",
3512
+ "*.yimg.jp"
3513
+ ],
3514
+ "name": "Yahoo Japan",
3515
+ "company": "LY Corporation",
3516
+ "category": "advertising",
3517
+ "gdpr_compliant": false,
3518
+ "privacy_policy": "https://privacy.yahoo.co.jp/",
3519
+ "purpose": "Japanese advertising and analytics",
3520
+ "data_collected": [
3521
+ "cookies",
3522
+ "browsing behavior",
3523
+ "conversion data"
3524
+ ],
3525
+ "risk_score": 5,
3526
+ "alternatives": []
3527
+ },
3528
+ {
3529
+ "id": "yellow-ai",
3530
+ "domains": [
3531
+ "yellow.ai",
3532
+ "*.yellow.ai",
3533
+ "cloud.yellow.ai"
3534
+ ],
3535
+ "name": "Yellow.ai",
3536
+ "company": "Yellow.ai",
3537
+ "category": "chat",
3538
+ "gdpr_compliant": true,
3539
+ "privacy_policy": "https://yellow.ai/privacy-policy/",
3540
+ "purpose": "Conversational AI for customer support",
3541
+ "data_collected": [
3542
+ "chat data",
3543
+ "customer info",
3544
+ "interaction data"
3545
+ ],
3546
+ "risk_score": 4,
3547
+ "alternatives": [
3548
+ "kore-ai"
3549
+ ]
3550
+ },
3551
+ {
3552
+ "id": "yotpo",
3553
+ "domains": [
3554
+ "yotpo.com",
3555
+ "*.yotpo.com",
3556
+ "staticw2.yotpo.com"
3557
+ ],
3558
+ "name": "Yotpo",
3559
+ "company": "Yotpo Ltd.",
3560
+ "category": "other",
3561
+ "gdpr_compliant": true,
3562
+ "privacy_policy": "https://www.yotpo.com/privacy-policy/",
3563
+ "purpose": "Reviews, UGC, and loyalty for e-commerce",
3564
+ "data_collected": [
3565
+ "review data",
3566
+ "customer info",
3567
+ "purchase data"
3568
+ ],
3569
+ "risk_score": 4,
3570
+ "alternatives": []
3571
+ },
3572
+ {
3573
+ "id": "youtube",
3574
+ "domains": [
3575
+ "youtube.com",
3576
+ "www.youtube.com",
3577
+ "youtube-nocookie.com",
3578
+ "youtu.be",
3579
+ "ytimg.com",
3580
+ "i.ytimg.com"
3581
+ ],
3582
+ "name": "YouTube Embeds",
3583
+ "company": "Google LLC",
3584
+ "category": "video",
3585
+ "gdpr_compliant": true,
3586
+ "privacy_policy": "https://policies.google.com/privacy",
3587
+ "purpose": "Video embedding and playback",
3588
+ "data_collected": [
3589
+ "cookies",
3590
+ "IP address",
3591
+ "viewing history"
3592
+ ],
3593
+ "risk_score": 4,
3594
+ "alternatives": [
3595
+ "self-hosted video",
3596
+ "vimeo"
3597
+ ]
3598
+ },
3599
+ {
3600
+ "id": "zendesk",
3601
+ "domains": [
3602
+ "zendesk.com",
3603
+ "static.zdassets.com",
3604
+ "ekr.zdassets.com",
3605
+ "v2.zopim.com"
3606
+ ],
3607
+ "name": "Zendesk",
3608
+ "company": "Zendesk Inc.",
3609
+ "category": "chat",
3610
+ "gdpr_compliant": true,
3611
+ "dpa_url": "https://www.zendesk.com/company/data-processing-form/",
3612
+ "purpose": "Customer support and live chat widget",
3613
+ "data_collected": [
3614
+ "user identity",
3615
+ "conversation data",
3616
+ "browsing context"
3617
+ ],
3618
+ "risk_score": 3
3619
+ }
3620
+ ],
3621
+ "categories": [
3622
+ {
3623
+ "id": "analytics",
3624
+ "name": "Analytics",
3625
+ "description": "Tools for measuring website traffic and user behavior",
3626
+ "risk_level": "medium"
3627
+ },
3628
+ {
3629
+ "id": "advertising",
3630
+ "name": "Advertising",
3631
+ "description": "Ad networks, retargeting pixels, and conversion tracking",
3632
+ "risk_level": "high"
3633
+ },
3634
+ {
3635
+ "id": "social",
3636
+ "name": "Social Media",
3637
+ "description": "Social media widgets, share buttons, and embeds",
3638
+ "risk_level": "medium"
3639
+ },
3640
+ {
3641
+ "id": "cdn",
3642
+ "name": "CDN",
3643
+ "description": "Content delivery networks and static asset hosting",
3644
+ "risk_level": "low"
3645
+ },
3646
+ {
3647
+ "id": "payments",
3648
+ "name": "Payments",
3649
+ "description": "Payment processing and checkout services",
3650
+ "risk_level": "low"
3651
+ },
3652
+ {
3653
+ "id": "chat",
3654
+ "name": "Chat & Support",
3655
+ "description": "Live chat widgets and customer support tools",
3656
+ "risk_level": "medium"
3657
+ },
3658
+ {
3659
+ "id": "heatmaps",
3660
+ "name": "Heatmaps & Session Replay",
3661
+ "description": "Visual analytics, heatmaps, and session recording tools",
3662
+ "risk_level": "medium"
3663
+ },
3664
+ {
3665
+ "id": "ab_testing",
3666
+ "name": "A/B Testing",
3667
+ "description": "Experimentation, feature flags, and optimization platforms",
3668
+ "risk_level": "low"
3669
+ },
3670
+ {
3671
+ "id": "error_tracking",
3672
+ "name": "Error Tracking",
3673
+ "description": "Error monitoring, crash reporting, and performance tools",
3674
+ "risk_level": "low"
3675
+ },
3676
+ {
3677
+ "id": "tag_manager",
3678
+ "name": "Tag Management",
3679
+ "description": "Tag management systems for loading third-party scripts",
3680
+ "risk_level": "medium"
3681
+ },
3682
+ {
3683
+ "id": "consent",
3684
+ "name": "Consent Management",
3685
+ "description": "Cookie consent and privacy preference management platforms",
3686
+ "risk_level": "low"
3687
+ },
3688
+ {
3689
+ "id": "video",
3690
+ "name": "Video",
3691
+ "description": "Video hosting and embedding services",
3692
+ "risk_level": "medium"
3693
+ },
3694
+ {
3695
+ "id": "fonts",
3696
+ "name": "Fonts",
3697
+ "description": "Web font delivery services",
3698
+ "risk_level": "low"
3699
+ },
3700
+ {
3701
+ "id": "security",
3702
+ "name": "Security",
3703
+ "description": "CAPTCHA, bot detection, and security services",
3704
+ "risk_level": "low"
3705
+ },
3706
+ {
3707
+ "id": "other",
3708
+ "name": "Other",
3709
+ "description": "Other third-party services and embeds",
3710
+ "risk_level": "low"
3711
+ },
3712
+ {
3713
+ "id": "push",
3714
+ "name": "Push Notifications",
3715
+ "description": "Push notification delivery and engagement platforms",
3716
+ "risk_level": "medium"
3717
+ },
3718
+ {
3719
+ "id": "forms",
3720
+ "name": "Forms & Surveys",
3721
+ "description": "Form builders, survey tools, and data collection platforms",
3722
+ "risk_level": "medium"
3723
+ },
3724
+ {
3725
+ "id": "referral",
3726
+ "name": "Referral & Affiliate",
3727
+ "description": "Affiliate networks, referral tracking, and partnership platforms",
3728
+ "risk_level": "medium"
3729
+ },
3730
+ {
3731
+ "id": "booking",
3732
+ "name": "Booking & Scheduling",
3733
+ "description": "Appointment scheduling and booking tools",
3734
+ "risk_level": "low"
3735
+ },
3736
+ {
3737
+ "id": "maps",
3738
+ "name": "Maps & Location",
3739
+ "description": "Map embedding and location intelligence services",
3740
+ "risk_level": "medium"
3741
+ },
3742
+ {
3743
+ "id": "web3",
3744
+ "name": "Web3 & Crypto",
3745
+ "description": "Blockchain wallets, DEX widgets, and crypto analytics",
3746
+ "risk_level": "medium"
3747
+ },
3748
+ {
3749
+ "id": "b2b_intelligence",
3750
+ "name": "B2B Intelligence",
3751
+ "description": "Business data enrichment, intent data, and account identification",
3752
+ "risk_level": "high"
3753
+ }
3754
+ ]
3755
+ }