Skip to content
← Check catalogue
FTC5-PRIVACY-PROMISEBoundedlegally required

A privacy policy that promises what the site does not do

What the source requires

A privacy policy is a representation to consumers. Promising that information is never shared with third parties while running advertising tags that send visitor data to them is a deceptive practice under the FTC Act — the theory behind the FTC's GoodRx and BetterHelp actions.

Why this is hard to satisfy

The policy is a template written once; the tags are added later by whoever runs the ads. Nobody re-reads the policy when a pixel goes in.

What we do about it

The policy is generated from the tags the site actually loads, so adding a tag changes the policy or fails the check.

In build · phase two

What this tier means

Formal reasoning over a bounded policy. Sound only for what the policy models, so we say “checked against”, never “guaranteed”.