Protect resident privacy on every page you publish
Government websites often carry analytics tools, embedded maps, and social media widgets that track visitors without their knowledge. Govzu scans for third-party trackers, verifies consent mechanisms, and checks that your privacy disclosures match what your site actually does.
Privacy checks in Govzu
Every check runs automatically on your schedule. Issues are prioritized by severity so your team knows exactly where to focus.
Cookie consent
Verifies that cookie consent banners appear before tracking cookies are set and that opt-out controls function correctly.
Third-party tracker inventory
Identifies all third-party scripts and pixels loaded on your site, including analytics, advertising, social, and mapping services.
Privacy policy accuracy
Checks that the third parties listed in your Privacy Policy match the third-party scripts actually found on your site.
Data collection disclosures
Verifies that forms collecting personal information include required disclosures about how that data will be used.
GDPR/CCPA notice elements
Checks for required elements of GDPR and CCPA-compliant privacy notices, including data subject rights information.
The compliance case for privacy
Residents trust government websites with sensitive information. State privacy laws — including California’s CPRA, Virginia’s CDPA, and similar laws in 15+ states — impose disclosure and consent requirements on government websites. The FTC has issued guidance on cookie disclosures applicable to public-sector entities.
Beyond legal requirements, privacy matters for public trust. Undisclosed tracking of visitors to a government health or benefits site is a serious breach of the public’s confidence in their government.
What a flagged privacy issue looks like
Govzu surfaces issues with clear context so your team can understand and act without decoding technical jargon.
Google Analytics set before consent
The GA4 cookie _ga is written on page load before the cookie consent banner is acknowledged. This violates GDPR and several US state privacy laws.
3 undisclosed trackers not in Privacy Policy
Hotjar, Meta Pixel, and a LinkedIn Insight tag are loading on your site but are not mentioned in your published Privacy Policy.
CCPA opt-out link missing from footer
California law requires a 'Do Not Sell or Share My Personal Information' link in the footer for sites that share data with third parties.
