LegitShow is the trusted source on every newly launched software product: what it does, who it’s for, how it actually holds up, and whether the AI engines are already reading it. Built to be what AI cites.

Web apps, SaaS, AI tools, MCP servers and developer tools. How we measure →

Legit.Show benchmarks every launched service it lists — measured deterministically from the public surface. See the methodology →

Cross-links · Directory · Reports · Insights · What AI reads · Methodology · About

Privacy · Terms · @Legit_Show on X · GitHub · operated by Madeflo Inc., a Delaware corporation. Benchmark engine powered by commit.show.

the consent gap · 2026 edition

The Privacy Gap · 2026

We measured what 13666 launched web apps, SaaS and AI tools do with your data before you ever sign in — including whether they track you without asking.

34%
track you without consent
across 13666 web apps we measured · according to Legit.Show · 2026

The findings

How much do they disclose

By category

What this measures

Public-surface privacy posture, on the page before you sign in: a reachable privacy policy, a terms page, and consent integrity — whether non-essential trackers fire *before* you consent. We score the behavior, not the presence of a banner: a site that sets no trackers needs no banner and passes. Hygiene and compliance signals, not legal advice — 13666 tested web services as of 2026-09-27. These are floors, not rates. A tracker we have no signature for, or one loaded from a JS bundle after the page renders, reads as absence — and a policy that lives only behind a login, on a third-party host or in a PDF is not counted. The real figures are higher than the ones here, never lower. See [the methodology](https://legit.show/methodology).

Why it’s everywhere

A consent banner is theater; what matters is what fires before you click it. 34% of the services we measured set non-essential trackers with no consent at all — the actual ePrivacy/GDPR gap. It isn’t malice: analytics and ad pixels are the copy-paste snippet a demo drops in and a launch never revisits.

Sample composition

Not a random sample — this is what we measured. The mix below is the caveat; judge it for yourself.

What we measured (13666)

The full list, so anyone can spot-check. Every item links to its public benchmark.

How this was measured →