A consent platform was detected on 353 sites in this crawl. We could identify the vendor on 170 of them.
This index covers restaurant, hospitality and independent ecommerce sites. It is not a sample of the web as a whole, and the figures should not be read as one. Every figure describes what an automated scan could observe on a public page. A site recorded as having no consent platform detected may run one the scanner could not see, and an absence of findings is not a clean bill of health.
Counted across the 353 sites where a consent platform was detected. A vendor could be identified on 170 of them; the remaining 183 ran something the scanner could not attribute, so this is a share of identifiable platforms rather than of the whole market.
Rawsoft Website Privacy Index · n = 170 · scanned January to February 2026
| Vendor | Sites detected |
|---|---|
| OneTrust | 84 |
| CookieYes | 49 |
| Cookiebot | 18 |
| iubenda | 13 |
| Termly | 6 |
We can calculate how often sites running each platform still leaked, and the numbers do differ. We're not publishing them, for two reasons.
The first is sample size. The largest vendor group in this crawl has 84 sites in it. That's nowhere near enough to say anything about a product deployed on millions of domains, and a chart built on it would look far more authoritative than it deserves.
The second is that leak rates mostly aren't about the tool. A consent platform governs the tags it's been wired to govern. Two sites running the same platform, one configured properly and one not, produce opposite results. Ranking vendors on that would be measuring the installers and labelling it the product.
Rawsoft implements and manages consent platforms for clients, CookieYes among them. That is a commercial relationship and it's why this page reports what was detected and stops there, rather than recommending one platform over another.
Each site was loaded the way a first-time visitor loads it. The scan recorded whether a consent platform appeared, when it appeared, what fired before anyone interacted with it, what fired after a refusal, and whether a privacy preferences link was reachable.
Tiers describe the mechanism observed, not the company. They are assigned from what the scan saw rather than from the score, because the score awards points where a vendor simply isn't present, and that would flatter sites that run no tags at all.
Records: 4,904 scanned, 4,815 carrying a privacy result. Crawl window: January to February 2026. Nothing here is a legal conclusion, and no site is described as compliant or non-compliant.
Free scan, no account, same method as the index.
Run a free privacy scanOr book a data and tracking audit for a full review.