Personal Privacy Score

privacyscore.me

// ABOUT

A privacy audit that stays on your machine.

Personal Privacy Score turns the fog of who-holds-your-data into a single number, a letter grade, and a plan you can actually act on — without collecting anything about you to do it.

01

What it is, and the problem it solves

Most people can't answer a deceptively simple question: who holds my data, what are they allowed to do with it, and how do I reduce that? The information is scattered across dozens of accounts and buried in privacy policies almost no one reads.

Personal Privacy Score turns that fog into three concrete things: a single 0–100 score, an A–F letter grade, and a ranked list of concrete actions — quick toggles first, larger migrations after. You inventory the services that hold your data, answer a few questions about how you use each, and get back a prioritized plan instead of a vague sense of unease.

02

Local-first, on purpose

There's an irony the design refuses to commit: a privacy-audit tool has no business being a cloud service that collects the very data it audits.

So it doesn't. Everything happens on your machine, in your browser. There is no account, no server, and no telemetry. The only form of saving is an optional JSON file you export and control — your data, your file, nowhere else.

No account No server No telemetry Runs in-browser You own the file
03

How it works

01
Inventory
Add the accounts, apps, and devices that hold your data — email, search, your phone OS, social, cloud, banking, smart-home gear.
02
Describe
For each service, mark the data types it holds and how you use it: hardened settings, ad opt-outs, aliases, private payment, 2FA.
03
Score
Get a 0–100 score and an A–F grade. Your leakiest holdings weigh heavier, and concentration and posture gaps cost you points.
04
Act
Work a ranked list ordered by score-per-minute — single toggles first, bigger migrations and new habits after.
04

Where the grades come from

Recipient risk starts from a built-in baseline — business model, jurisdiction, declared data collection, and policy flags — that works fully offline. Optionally, you can overlay live crowd-sourced Class A–E ratings from ToS;DR (Terms of Service Didn't Read), matched to each service by domain and refreshed daily at the source.

It's a deliberately transparent heuristic and a starting point — not a legal assessment. Ratings are a place to begin; verify the current policy for anything that matters.

Start your audit → ☕ Buy me a coffee