Website Privacy Index 2026

Cookie banner adoption

Of 4,815 sites scanned, 92.7% had no consent platform the scanner could detect. Consent tooling is far less common in practice than the volume of banners online suggests.

This index covers restaurant, hospitality and independent ecommerce sites. It is not a sample of the web as a whole, and the figures should not be read as one. Every figure describes what an automated scan could observe on a public page. A site recorded as having no consent platform detected may run one the scanner could not see, and an absence of findings is not a clean bill of health.

Where 4,815 sites land

Four in five sites had neither a consent platform nor a privacy preferences link the scanner could find.

12.6%Exposed80.0%Unprotected
GatedPartialExposedUnprotected

Rawsoft Website Privacy Index · n = 4,815 · scanned January to February 2026

Show the data
TierSitesShare
Gated611.3%
Partial2926.1%
Exposed60912.6%
Unprotected3,85380.0%

Consent posture by vertical

Verticals with at least 300 scanned sites. Ecommerce runs consent tooling roughly twice as often as restaurants do.

Restaurantsn = 1,152Restaurants Gated: 13 sitesRestaurants Partial: 50 sitesRestaurants Exposed: 137 sites12%Restaurants Unprotected: 952 sites83%Ecommercen = 457Ecommerce Gated: 5 sitesEcommerce Partial: 50 sites11%Ecommerce Exposed: 107 sites23%Ecommerce Unprotected: 295 sites65%
GatedPartialExposedUnprotected

Rawsoft Website Privacy Index · n = 1,609 · scanned January to February 2026

Show the data
VerticalSitesGatedPartialExposedUnprotected
Restaurants1,1521.1%4.3%11.9%82.6%
Ecommerce4571.1%10.9%23.4%64.6%

Privacy score distribution

The mass sits at the bottom. 1,631 sites scored zero, and the mean was 18.2 out of 100.

05541,1091,6642,218 0-9: 1,633 sites10-19: 278 sites20-29: 2,218 sites30-39: 356 sites40-49: 34 sites50-59: 5 sites60-69: 18 sites70-79: 0 sites80-89: 195 sites90-99: 78 sites2,218 0-910-1920-2930-3940-4950-5960-6970-7980-8990-99 Privacy score

Rawsoft Website Privacy Index · n = 4,815 · scanned January to February 2026

Show the data
Score bandSites
0-91,633
10-19278
20-292,218
30-39356
40-4934
50-595
60-6918
70-790
80-89195
90-9978

How this was measured

Each site was loaded the way a first-time visitor loads it. The scan recorded whether a consent platform appeared, when it appeared, what fired before anyone interacted with it, what fired after a refusal, and whether a privacy preferences link was reachable.

Tiers describe the mechanism observed, not the company. They are assigned from what the scan saw rather than from the score, because the score awards points where a vendor simply isn't present, and that would flatter sites that run no tags at all.

  • Gated. Consent platform detected, Consent Mode v2 observed, no tracking seen before consent or after denial
  • Partial. Consent platform detected, but with gaps: no Consent Mode v2 signal, or tracking seen anyway
  • Exposed. No consent platform detected, though a privacy or cookie preferences link was found
  • Unprotected. No consent platform and no privacy preferences link detected

Records: 4,904 scanned, 4,815 carrying a privacy result. Crawl window: January to February 2026. Nothing here is a legal conclusion, and no site is described as compliant or non-compliant.

Check your own site in about a minute

Free scan, no account, same method as the index.

Run a free privacy scan

Or book a data and tracking audit for a full review.