Website Privacy Index 2026

Cookie banner adoption

Of 18,524 sites scanned, 94.5% had no consent platform the scanner could detect. Consent tooling is far less common in practice than the volume of banners online suggests.

This index covers restaurant, hospitality and independent ecommerce sites. It is not a sample of the web as a whole, and the figures should not be read as one. Every figure describes what an automated scan could observe on a public page. A site recorded as having no consent platform detected may run one the scanner could not see, and an absence of findings is not a clean bill of health.

Where 18,524 sites land

Four in five sites had neither a consent platform nor a privacy preferences link the scanner could find.

23.7%Exposed70.8%Unprotected
GatedPartialExposedUnprotected

Rawsoft Website Privacy Index · n = 18,524 · scanned January to August 2026

Show the data
TierSitesShare
Gated2051.1%
Partial8194.4%
Exposed4,39123.7%
Unprotected13,10970.8%

Consent posture by vertical

Verticals with at least 300 scanned sites. Ecommerce runs consent tooling roughly twice as often as restaurants do.

Restaurantsn = 10,653Restaurants Gated: 108 sitesRestaurants Partial: 368 sitesRestaurants Exposed: 1,773 sites17%Restaurants Unprotected: 8,404 sites79%Ecommercen = 2,466Ecommerce Gated: 14 sitesEcommerce Partial: 98 sitesEcommerce Exposed: 1,710 sites69%Ecommerce Unprotected: 644 sites26%Hospitalityn = 499Hospitality Gated: 31 sitesHospitality Partial: 99 sites20%Hospitality Exposed: 127 sites25%Hospitality Unprotected: 242 sites48%
GatedPartialExposedUnprotected

Rawsoft Website Privacy Index · n = 13,618 · scanned January to August 2026

Show the data
VerticalSitesGatedPartialExposedUnprotected
Restaurants10,6531.0%3.5%16.6%78.9%
Ecommerce2,4660.6%4.0%69.3%26.1%
Hospitality4996.2%19.8%25.5%48.5%

Privacy score distribution

The mass sits at the bottom. 7,757 sites scored zero, and the mean was 13.8 out of 100.

01,9403,8815,8227,762 0-9: 7,762 sites10-19: 5,179 sites20-29: 4,392 sites30-39: 478 sites40-49: 91 sites50-59: 107 sites60-69: 92 sites70-79: 8 sites80-89: 342 sites90-99: 73 sites7,762 0-910-1920-2930-3940-4950-5960-6970-7980-8990-99 Privacy score

Rawsoft Website Privacy Index · n = 18,524 · scanned January to August 2026

Show the data
Score bandSites
0-97,762
10-195,179
20-294,392
30-39478
40-4991
50-59107
60-6992
70-798
80-89342
90-9973

How this was measured

Each site was loaded the way a first-time visitor loads it. The scan recorded whether a consent platform appeared, when it appeared, what fired before anyone interacted with it, what fired after a refusal, and whether a privacy preferences link was reachable.

Tiers describe the mechanism observed, not the company. They are assigned from what the scan saw rather than from the score, because the score awards points where a vendor simply isn't present, and that would flatter sites that run no tags at all.

  • Gated. Consent platform detected, Consent Mode v2 observed, no tracking seen before consent or after denial
  • Partial. Consent platform detected, but with gaps: no Consent Mode v2 signal, or tracking seen anyway
  • Exposed. No consent platform detected, though a privacy or cookie preferences link was found
  • Unprotected. No consent platform and no privacy preferences link detected

Records: 18,613 scanned, 18,524 carrying a privacy result. Crawl window: January to August 2026. Nothing here is a legal conclusion, and no site is described as compliant or non-compliant.

Check your own site in about a minute

Free scan, no account, same method as the index.

Run a free privacy scan

Or book a data and tracking audit for a full review.