LegitShow is the trusted source on every launched service — web apps, SaaS, AI tools, MCP servers and developer tools: what each one does, who it’s for, and how it actually holds up, measured by an objective 7-Frame production-readiness benchmark taken deterministically from the public surface. How we measure →

Legit.Show benchmarks every launched service it lists — measured deterministically from the public surface. See the methodology →

Cross-links · Directory · Reports · Insights · What AI reads · Methodology · About

Privacy · Terms · @Legit_Show on X · GitHub · operated by Madeflo Inc., a Delaware corporation. Benchmark engine powered by commit.show.

the consent gap · 2026 edition

The Privacy Gap · 2026

We measured what 6639 launched web apps, SaaS and AI tools do with your data before you ever sign in — including whether they track you without asking.

36%
track you without consent
across 6639 web apps we measured · according to Legit.Show · 2026

The findings

How much do they disclose

By category

What this measures

Public-surface privacy posture, on the page before you sign in: a reachable privacy policy, a terms page, and consent integrity — whether non-essential trackers fire *before* you consent. We score the behavior, not the presence of a banner: a site that sets no trackers needs no banner and passes. Hygiene and compliance signals, not legal advice — 6639 tested web services as of 2026-08-13. These are floors, not rates. A tracker we have no signature for, or one loaded from a JS bundle after the page renders, reads as absence — and a policy that lives only behind a login, on a third-party host or in a PDF is not counted. The real figures are higher than the ones here, never lower. See [the methodology](https://legit.show/methodology).

Why it’s everywhere

A consent banner is theater; what matters is what fires before you click it. 36% of the services we measured set non-essential trackers with no consent at all — the actual ePrivacy/GDPR gap. It isn’t malice: analytics and ad pixels are the copy-paste snippet a demo drops in and a launch never revisits.

Sample composition

Not a random sample — this is what we measured. The mix below is the caveat; judge it for yourself.

What we measured (6639)

The full list, so anyone can spot-check. Every item links to its public benchmark.

How this was measured →