Privacy Risk Auditor

The P&C Privacy Risk Auditor (PRA) is an international standard that provides independent assessment of a website’s compliance with cookie regulation. The PRA score allows an organisation to focus on improvement, reducing risk and building trust.

Risk level relating to GDPR compliance

Site:
Date:
Risk Score:
GDPR Compliant:
PECR Compliance:

GDPR & PECR explanation (opens in a new window)

What does this mean?

Your PRA shows your current risk score and level of respect for privacy. It helps you see what needs attention and guides you to actions to improve your score.

Essential cookies

Essential cookies are classified as those that are essential to provide an online service at someone’s request (e.g. to remember what’s in their online basket, or to ensure security in online banking). Essential cookies must be essential to the user and the operation of the site, not what the organisation considers to be essential to them.

Impact on your ‘brand’ reputation

Creating true transparency and control makes the difference when establishing brand trust. Brands that respect privacy by earning consent whilst delivering a positive user experience, will gain competitive advantage and be the ultimate winners in the digital economy.

How a PRA of is calculated

The PRA score is a mathematical calculation which considers the number, categorisation, and impact on privacy for the cookies and Web Storage objects being set on any given website. There is no subjectivity in the calculation, automated intelligence is used to identify cookies that are set ahead of consent being freely given.

Overall position

Below are details of all the storage items found, including the following categories:

Cookies

Standard web cookies, set either by HTTP headers or by JavaScript code. These can be "session" (generally deleted when the browser is fully closed down) or "persistent" (deleted when the expiry date shown is reached).

Web Storage

Web Storage items (sometimes known as DOM storage or HTML5 storage), set by JavaScript code. These can be "session" (deleted when the individual browser window or tab is closed) or "persistent" (lasting indefinitely).

Databases

Databases (known as IndexedDB or the Indexed Database API) stored on the browser by JavaScript code. These last indefinitely.

Pixels

A tracking pixel is an invisible component embedded in a web page in order to track site visitors via a third party. The information they gather is generally recorded indefinitely and combined with data from other sites using the same pixel system.

Domain	Total	Cookies		Web storage		Databases	Pixels
		Session	Persistent	Session	Persistent

Summary

Site
Pages assessed
Date
Session cookies	first party, third party
Persistent cookies	first party, third party
Session storage	first party, third party
Persistent storage	first party, third party
Databases	first party, third party
Pixels

Detail

Below are listed full details of all the storage items found, including the following categories:

Cookies: Standard web cookies, set either by HTTP headers or by JavaScript code. These can be "session" (generally deleted when the browser is fully closed down) or "persistent" (deleted when the expiry date shown is reached).
Web Storage: Web Storage items (sometimes known as DOM storage or HTML5 storage), set by JavaScript code. These can be "session" (deleted when the individual browser window or tab is closed) or "persistent" (lasting indefinitely).
Databases: Databases (known as IndexedDB or the Indexed Database API) stored on the browser by JavaScript code. These last indefinitely.
Pixels: A tracking pixel is an invisible component embedded in a web page in order to track site visitors via a third party. The information they gather is generally recorded indefinitely and combined with data from other sites using the same pixel system.

Domain	Cookies		Web Storage		Databases	Pixels
Domain	Session	Persistent	Session	Persistent	Databases	Pixels