Website Privacy Index 2026

Cookie banner adoption

Of 47,419 sites scanned, 96.9% had no consent platform the scanner could detect. Consent tooling is far less common in practice than the volume of banners online suggests.

This index covers restaurant, hospitality and independent ecommerce sites. It is not a sample of the web as a whole, and the figures should not be read as one. Every figure describes what an automated scan could observe on a public page. A site recorded as having no consent platform detected may run one the scanner could not see, and an absence of findings is not a clean bill of health.

Where 47,419 sites land

Four in five sites had neither a consent platform nor a privacy preferences link the scanner could find.

27.1%Exposed69.8%Unprotected
GatedPartialExposedUnprotected

Rawsoft Website Privacy Index · n = 47,419 · scanned January to September 2026

Show the data
TierSitesShare
Gated2390.5%
Partial1,2362.6%
Exposed12,82827.1%
Unprotected33,11669.8%

Consent posture by vertical

Verticals with at least 300 scanned sites. Ecommerce runs consent tooling roughly twice as often as restaurants do.

Restaurantsn = 31,167Restaurants Gated: 132 sitesRestaurants Partial: 683 sitesRestaurants Exposed: 4,662 sites15%Restaurants Unprotected: 25,690 sites82%Ecommercen = 8,386Ecommerce Gated: 14 sitesEcommerce Partial: 131 sitesEcommerce Exposed: 6,808 sites81%Ecommerce Unprotected: 1,433 sites17%Hospitalityn = 704Hospitality Gated: 36 sitesHospitality Partial: 129 sites18%Hospitality Exposed: 187 sites27%Hospitality Unprotected: 352 sites50%
GatedPartialExposedUnprotected

Rawsoft Website Privacy Index · n = 40,257 · scanned January to September 2026

Show the data
VerticalSitesGatedPartialExposedUnprotected
Restaurants31,1670.4%2.2%15.0%82.4%
Ecommerce8,3860.2%1.6%81.2%17.1%
Hospitality7045.1%18.3%26.6%50.0%

Privacy score distribution

The mass sits at the bottom. 18,550 sites scored zero, and the mean was 13.5 out of 100.

04,6399,27813,91618,555 0-9: 18,555 sites10-19: 16,906 sites20-29: 10,422 sites30-39: 569 sites40-49: 121 sites50-59: 139 sites60-69: 129 sites70-79: 17 sites80-89: 489 sites90-99: 72 sites18,555 0-910-1920-2930-3940-4950-5960-6970-7980-8990-99 Privacy score

Rawsoft Website Privacy Index · n = 47,419 · scanned January to September 2026

Show the data
Score bandSites
0-918,555
10-1916,906
20-2910,422
30-39569
40-49121
50-59139
60-69129
70-7917
80-89489
90-9972

How this was measured

Each site was loaded the way a first-time visitor loads it. The scan recorded whether a consent platform appeared, when it appeared, what fired before anyone interacted with it, what fired after a refusal, and whether a privacy preferences link was reachable.

Tiers describe the mechanism observed, not the company. They are assigned from what the scan saw rather than from the score, because the score awards points where a vendor simply isn't present, and that would flatter sites that run no tags at all.

  • Gated. Consent platform detected, Consent Mode v2 observed, no tracking seen before consent or after denial
  • Partial. Consent platform detected, but with gaps: no Consent Mode v2 signal, or tracking seen anyway
  • Exposed. No consent platform detected, though a privacy or cookie preferences link was found
  • Unprotected. No consent platform and no privacy preferences link detected

Records: 47,505 scanned, 47,419 carrying a privacy result. Crawl window: January to September 2026. Nothing here is a legal conclusion, and no site is described as compliant or non-compliant.

Check your own site in about a minute

Free scan, no account, same method as the index.

Run a free privacy scan

Or book a data and tracking audit for a full review.