Independent ecommerce and direct-to-consumer sites. We scored 8,386 of them on what happens to a visitor before they agree to anything. The mean came out at 24.0 out of 100.
This index covers restaurant, hospitality and independent ecommerce sites. It is not a sample of the web as a whole, and the figures should not be read as one. Every figure describes what an automated scan could observe on a public page. A site recorded as having no consent platform detected may run one the scanner could not see, and an absence of findings is not a clean bill of health.
Rawsoft Website Privacy Index · n = 8,386 · scanned January to September 2026
| Tier | Sites | Share |
|---|---|---|
| Gated | 14 | 0.2% |
| Partial | 131 | 1.6% |
| Exposed | 6,808 | 81.2% |
| Unprotected | 1,433 | 17.1% |
Only 145 of the 8,386 ecommerce sites in this edition had a consent platform the scanner could detect. Of those, 67 still fired tracking before consent or after a refusal. That base is small, so treat it as an indication rather than a rate.
Rawsoft Website Privacy Index · n = 40,257 · scanned January to September 2026
| Vertical | Mean score | Sites |
|---|---|---|
| Restaurants | 9.9 | 31,167 |
| Ecommerce | 24.0 | 8,386 |
| Hospitality | 18.6 | 704 |
Every site here had a consent platform detected, a working Consent Mode v2 signal, and no tracking observed before consent or after a refusal. Listing is positive only.
Each site was loaded the way a first-time visitor loads it. The scan recorded whether a consent platform appeared, when it appeared, what fired before anyone interacted with it, what fired after a refusal, and whether a privacy preferences link was reachable.
Tiers describe the mechanism observed, not the company. They are assigned from what the scan saw rather than from the score, because the score awards points where a vendor simply isn't present, and that would flatter sites that run no tags at all.
Records: 47,505 scanned, 47,419 carrying a privacy result. Crawl window: January to September 2026. Nothing here is a legal conclusion, and no site is described as compliant or non-compliant.
Same scan, same method, free.
Run a free privacy scanOr book a data and tracking audit for a full review.