Privacy Plans

Start With a Free Check. Go Further Only if It Helps.

Start free. Every paid step is optional and quoted in writing before it begins.

Talk About Your Site See the Sample Report

Start small. Go from there.

Pigeon Check

Free

A one-page look at who your homepage talks to.
Pigeon Check in Detail
Pigeon Report

Quoted after your first look

A written check of up to five key pages, with the evidence.
Pigeon Report in Detail
Pigeon Cleanup

Quoted after your Report

We make the agreed fixes, then check again to show what changed.
Pigeon Cleanup in Detail
Pigeon Watch

Monthly, quoted after your Report

A monthly re-check that tells you when something changes.
Pigeon Watch in Detail

Is the platform itself the problem? Ask about a custom rebuild, for example from WordPress to Astro. Custom Rebuild in Detail

What each step includes.

Pigeon Check

A one-page look at who your homepage talks to.

Free

Get a Free Pigeon Check

You get

How many outside companies your homepage contacts before anyone clicks.
How many of them your privacy policy doesn't name, or describes only in general terms.
The first three to look at, by name.
A short note of how we checked and what this first look does not cover.

Not in this plan: Other pages, the Reject test on your cookie banner and your email settings. Those are in the Report.

There is nothing to sign, and what happens next is up to you.

Scope and delivery

We load your homepage once in a new, empty browser, note every outside company it contacts before anyone clicks, and compare that list with your privacy policy.

How it arrives: One page by email, sent only to the site's owner or someone the owner has asked to look after the site.
What we need from you: Your website address. No passwords and no access.
Best when: You want to know whether a closer look is worth it.

See an example

Pigeon Check

Example

Pigeon Check for fernandfinch.example

A free first look at your homepage, prepared for the owner of fernandfinch.example on September 1, 2026.

4 outside companies were contacted by your homepage before anyone clicked anything.

Counted: companies whose tools are used for advertising, analytics, visitor recording, chat, social media, embedded video or maps, booking and similar features. Not counted: services that only deliver fonts or files, take payments, run security checks or run your cookie banner.

3 of them are not named in your privacy policy. 1 of these is described only in general terms, such as "embedded content".

The first three to look at

Ad Platform: an advertising pixel (Ad Pixel). Not named in your privacy policy.
Chat Provider: a live chat widget (Chat Widget). Not named in your privacy policy.
Video Platform: an embedded video player (Video Player). Described only in general terms in your privacy policy.

Privacy Pigeon · privacypigeon.com Check fernandfinch.example_20260901T180500Z · pigeon-check 1.0.0

One visit to one page on September 1, 2026. Results can change between visits.

An example Pigeon Check for Fern & Finch, a fictional florist. In a real Check, companies appear under their real names. Counts describe this example. Every website is different. See the Whole Example

Pigeon Report

A written check of up to five key pages, with the evidence.

Quoted after your first look

Read the Sample Report

You get

Every outside company each page contacts, with the evidence: a request log, screenshots, and the date and location of the check.
Consent behavior: what loads before any click, and whether clicking Reject on your cookie banner actually stops it.
Policy match: which companies your privacy and cookie policies name, describe only in general terms, or don't mention.
Public records: your domain's email settings (SPF, DKIM and DMARC) and, if you ask, how many accounts your WordPress site lists publicly.
A prioritized fix list in plain language: keep, remove or load on click, each with what it changes.
A vendor list your lawyer or advisor can use. Facts, not legal advice.
A 30-minute walkthrough call.

Not in this plan: Changes to your website. Those are the Cleanup.

Your Report fee is credited toward a Pigeon Cleanup.

Scope and delivery

Every finding comes with the record behind it, so you, your web developer and your lawyer are looking at the same facts.

How it arrives: Within 3 business days of agreeing the pages, then a 30-minute call.
What we need from you: Your homepage and up to four more pages that matter most to you, and links to your privacy and cookie policies if you have them. No passwords.
Best when: You want the whole picture, with evidence you can act on or hand to someone else.

See an example

Inside the sample report

Read the Sample Report

Pigeon Cleanup

We make the agreed fixes, then check again to show what changed.

Quoted after your Report

See an Example Re-Check

You get

Tags and plugins that no longer do a job, removed.
Tags that load before a visitor chooses, set to wait for consent.
Maps and videos that load only when a visitor clicks.
Email settings repaired: SPF, DKIM and DMARC.
Forgotten files and photo location data you point us to, cleaned up. The Report does not look for them.
A re-check of the same pages, run the same way as your Report.
A handover record and an updated vendor list.

Not in this plan: Writing or rewording your privacy policy. Your lawyer or policy provider works from the updated vendor list.

Your Report fee is credited toward the Cleanup. Before any change, we agree what must keep working and make sure there is a way back.

Scope and delivery

We work through the fix list you approve, test the features you rely on, and run the same checks on the same pages, so the difference is on record.

How it arrives: On the schedule agreed in your quote.
What we need from you: Access to your website and, for email settings, your domain's DNS. We agree it in writing, and a separate account that you remove afterward works best.
Best when: You'd rather not make the changes yourself.

See an example

Pigeon Cleanup re-check

Example

What changed, in numbers
What we counted	Before	After
Contacted before any click	6	2
Waiting for a click	0	2
Removed	0	2

See the Whole Re-Check Try the Same Cleanup on the Map

An example re-check after a Pigeon Cleanup, for Fern & Finch, a fictional florist. Counts describe this example. Every website is different.

Pigeon Watch

A monthly re-check that tells you when something changes.

Monthly, quoted after your Report

See an Example Monthly Note

You get

A re-check of the same pages every month, run by us the same way as your Report.
An alert when a new outside company appears, or your policy stops matching.
A one-page note each month.
A 20-minute review call every quarter.

Not in this plan: Fixes. They are quoted separately.

Scope and delivery

Websites keep changing. Watch re-checks the pages from your Report every month and tells you when a new outside company appears or your policy stops matching.

How it arrives: Monthly, by email.
What we need from you: Nothing new. Watch uses the pages from your Report.
Best when: Several people add tools to your site, or campaigns come and go.

See an example

Pigeon Watch

Example

Pigeon Watch for fernandfinch.example

Monthly note, October 22, 2026. The same five pages, checked the same way as your Report.

New outside companies: 1 new company: Reviews Provider (Review Widget), contacted on Home before anyone clicked anything. Your privacy policy does not name it. It was not there at the re-check on September 22.
Still as after your Cleanup: Site Analytics and the Booking Calendar load as before. The video and the map still wait for a click. The ad pixel and the chat have not come back.
Your privacy policy: The same text as on September 9.
Email settings: SPF, DKIM and DMARC are as we left them.
What you could do: If you added the reviews on purpose, you could load them on click, or name Reviews Provider in your privacy policy. Fixes are quoted separately.

Example only. Fern & Finch is a fictional florist, and every company, address and finding here is invented. Addresses end in .example, a name reserved for examples, so none of them can belong to a real business.

Custom rebuild

A simpler website, when the platform itself keeps causing the problem.

Quoted after we talk it through

Why We Work With WordPress and Astro

You get

A written reason for the rebuild, and the approach we recommend, before any quote.
The features your business relies on, such as forms, bookings and editing, agreed before work begins.
The same re-check, handover record and vendor list as a Cleanup.

WordPress remains a good home for many businesses. A rebuild is never the default.

Scope and delivery

Sometimes the most practical fix is a rebuild, for example moving from WordPress to Astro. We suggest it only when a cleanup can't get you where you want to be, and you get the reason in writing first.

How it arrives: Scoped and scheduled in your quote.
What we need from you: A conversation about how you and your customers use the site today.
Best when: Plugins and page builders make every fix fragile, or the site is hard to keep up to date.

Never included, in any plan

Legal advice or policy writing

We record facts about your website. Your lawyer or policy provider decides what your policies should say.
Removing personal data from data brokers

That is a different service. We work on your website and the public information you control.
Investigating people

We check websites for their owners. We don't look into people or businesses for anyone.
Security testing

We look at what your website loads and shows, as a visitor's browser does. We don't test passwords or try to get in.
A promise that you're fully protected

Nobody can honestly make one. We show what your website does and what changed.

Good questions to ask first.

How does the free Pigeon Check work?

Email us your website address. We load your homepage once in a new, empty browser, scroll down it, wait and click nothing. We note every outside company it contacts, then read your privacy policy and compare the two.

You get one page back by email. There is nothing to install and no form to fill in.

What does it cost?

The Pigeon Check is free. Every step after it is quoted in writing before any work begins, based on your site and what the Check found.

If you go on to a Pigeon Cleanup, your Report fee is credited toward it.

Do I have to buy anything after the Check?

No. The Check is free and there is nothing to sign. If it raises questions you want answered, we can talk about a Pigeon Report. If not, the Check is yours to keep.

How long does it take?

When you ask for a Pigeon Check, we'll tell you when to expect it. A Pigeon Report arrives within 3 business days of agreeing which pages to check, followed by a 30-minute walkthrough call.

A Cleanup's schedule depends on the fixes you choose, and your quote includes it.

What access do you need?

For the Check and the Report, none. We look at your public pages the way a visitor's browser does. The Report also checks your domain's public email settings.

For a Cleanup, we agree in writing what access the work needs: usually your website's admin, and sometimes your domain's DNS settings. A separate account that you can remove afterward works best.

Will the changes break my site?

Before a Cleanup starts, we agree which features must keep working, such as forms, booking and editing, and make sure there is a way back. We test those features after the changes, and the re-check shows what changed. If a fix would cost you a feature, we tell you before making it.

Can my own web person make the fixes?

Yes. The fix list is written so anyone who looks after your site can follow it. Choose a Pigeon Cleanup if you'd rather we made the changes and checked them again.

Do I need Pigeon Watch?

No, it's optional. It suits sites that change often, where new tools and campaigns come and go. It tells you when something changes, and fixes are quoted separately.

Do you work with WordPress?

Yes. The Check and the Report work on most websites, whatever they're built with, because they look at what your pages do in a browser. If a site shows a visitor check to automated browsers, we say so and report nothing from it. Most fixes happen inside the site you already have, including WordPress.

A rebuild only comes up when the platform itself keeps causing the problem, and then you get the reason in writing first.

Who receives the Check?

Only the site's owner, or someone the owner has asked to look after the site. Write from an address at your website's domain, or tell us how you're connected to the site. We send the Check to one email address and never publish it.

Free Pigeon Check

Wonder who your website talks to?

Send your website address for a free Pigeon Check. One page of findings, straight to your inbox.

Get a Free Pigeon Check