GDPR Form Field Auditor
Free to download on every platform. Comes pre-installed on BotFone, BotPad and BotFlip — with extra free apps included.
About this app
WHAT IT DOES
The GDPR Form Field Auditor scans any webpage for form input fields—input, select, textarea, checkbox, and radio—and audits them against key GDPR compliance requirements. It checks for consent checkboxes (opt‑in for data processing), privacy policy links, proper labeling of personal data fields (name, email, phone, address, ID, and other identifiers), and identifies fields that collect personal data without explicit consent mechanisms or privacy notices. It generates a detailed report showing compliance status, missing consent checkboxes, missing privacy links, and improperly labeled personal data fields. This helps developers, compliance officers, and QA teams ensure forms meet GDPR data protection standards.
WHERE IT RUNS
It runs as a draggable overlay panel inside the BotGentz extension on any website—contact forms, registration forms, checkout flows, newsletter signups, or any page that collects user data. It works on any form framework (React, Vue, Angular, vanilla HTML).
HOW TO USE
1. Install the free BotGentz extension.
2. Navigate to any page with a form that collects user data.
3. Click the BotGentz icon and select "GDPR Form Field Auditor" from the tools menu.
4. Click "Run Audit" to scan the page.
5. Review the report showing total fields, personal data fields, consent checkboxes, privacy links, and issues.
6. Use the "Copy Report" button to copy the full audit to your clipboard.
7. Enable or disable highlighting for missing consent or missing privacy links in settings.
8. Click "Clear Highlights" to remove visual markers.
9. Drag the panel to reposition it, resize it, collapse it, or press Escape to close.
THE ACTUAL MECHANISM — keyword-based personal data detection with consent and privacy link scanning
This tool performs a three‑layer GDPR compliance audit. First, it scans the DOM for all form input fields and extracts labels using a priority chain: label for/id association, parent label, aria-label, aria-labelledby, and placeholder fallback. It then classifies fields as personal data by checking labels, names, and IDs against a comprehensive list of personal data keywords (name, email, phone, address, ID, birth, gender, nationality, passport, tax ID, credit card, etc.). Second, it scans for consent checkboxes by looking for checkbox inputs with labels containing consent-related terms (consent, agree, accept, opt-in, GDPR, data processing). Third, it scans for privacy policy links using anchor text and href attributes containing privacy-related terms (privacy, GDPR, data protection, cookies). Fields collecting personal data without a nearby consent checkbox or privacy link are flagged. The report includes all findings with visual highlights on the page.
THE PANEL
The panel is fully draggable by its title bar and snaps to the nearest edge of the viewport when released. You can resize it horizontally by dragging the left or right border; the height expands to fit content up to a maximum, with scrolling inside the report area. A collapse button minimizes the panel to a small floating chip showing "⚙️ GDPR Auditor" — click it to expand back. Press Escape at any time to close the panel entirely. The panel remembers its last position, size, and expansion state per domain via localStorage.
PLEASE NOTE
- This tool requires the free BotGentz extension (available for Chromium‑based browsers and Firefox).
- GDPR compliance is a legal matter—this tool provides a technical audit based on common best practices and is not a substitute for professional legal advice.
- The tool works on any site, but dynamic forms (React/Vue with client-side rendering) may require a manual re‑audit after interactions.
- Highlights are visual aids and are removed when the panel is closed or manually cleared.
- No page content is ever sent to any server—all scanning and auditing happens locally in your browser. Only anonymized usage metrics (panel open/close, audit runs) are collected; you can disable this in the extension settings at any time.