Privacy Risk Cleanup
I’m Andy, a developer in Iowa. I’ve run 48web since 2007. I can scan your site for session-replay tools and chat widgets, tell you whether they load before anyone consents, and clean that up at a fixed price. The scan is free.
A free scan, then cleanup or monthly monitoring
Send me the site URL and I’ll tell you what I found and what the next step would be.
Ask about a scanA lot of small-business sites add a chat bubble or a tool that records how people move around the page — Microsoft Clarity, Mouseflow, Hotjar, or something similar. Those tools can start working as soon as the page loads, before a consent banner has done anything. That is where I start.
The scan is free. I look at the public site for session replay, chat widgets, and how the consent banner actually behaves. Then I write that up in plain language: what I found, what I would change, and what I would leave alone.
If you want the cleanup, I do the technical work. Chat and session replay can wait for consent. A privacy notice can be written or brought up to date so it matches what the site actually does. Tools you don’t need can come out. I don’t publish changes until you’ve had a chance to review them.
Advertising pixels and other trackers are still worth cleaning up, and I include them in the scan and the cleanup. They are a secondary part of the work.
Some businesses have received letters under California’s Invasion of Privacy Act arguing that a chat widget or session-replay tool intercepted the contents of a communication under Penal Code section 631. Those are legal theories, and courts have not treated them the same way in every case. A person injured by a violation may seek $5,000 per violation, or three times actual damages if that amount is greater, and does not have to show actual harm to bring the claim. Section 631 is unchanged by the 2026 amendment described below.
A 2026 change to that statute, Senate Bill 690, takes effect on January 1, 2027. From that date, a private person will no longer be able to bring a section 638.51 claim that arises from conduct on a website or app; only the California Attorney General may bring that kind of claim. Tracking pixels have often been argued under that section. The underlying rules about pen registers are unchanged, so pixels are still worth reviewing, but they are not the first thing I look at. I can’t tell you what a letter you receive would be worth, or how you should respond. Talk to an attorney about that.
Iowa also has its own consumer privacy law. The Iowa Consumer Data Protection Act, Iowa Code chapter 715D, took effect on January 1, 2025. It applies to a business that conducts business in Iowa, or targets Iowa residents, and that during a calendar year either controls or processes personal data of at least 100,000 consumers, or of at least 25,000 consumers while also deriving more than half of its gross revenue from selling personal data. The Iowa Attorney General has exclusive authority to enforce the chapter. Before filing an action, the Attorney General must give 90 days’ written notice and a chance to fix the issue. The statute says it does not create a private right of action. If an action goes forward after that notice period, the Attorney General may seek an injunction and civil penalties of up to $7,500 for each violation.
Those Iowa thresholds are high. Many Iowa and Midwest small businesses will not meet them. I can’t tell you whether your business is in or out of scope. That is a question for an attorney.
The scan is free. Cleanup is a fixed price. Monthly monitoring depends on the scope of the site. I’ll confirm what I’m looking at before I begin, including which domain and what the cleanup includes.
I look at your public website for session-replay tools, chat widgets, and how the consent banner actually behaves. Advertising pixels and other trackers are included in the report. You get a written note of what is firing, what I would change, and what I would leave alone.
Free
The scan, plus the cleanup we agree on. I can make chat, session replay, and other tracking wait for consent, write or refresh the privacy notice, and remove tools you don’t need. I work in a way you can review before anything goes live.
$1,500
After the first cleanup, I can re-scan the site on a monthly schedule and tell you when a new tool or a changed consent banner shows up. The monthly price depends on the scope of the site. This is optional, and we can stop it at any time.
$99–150/month
48web is not a law firm, and I am not an attorney. Nothing on this page, in a scan report, or in a privacy notice I draft is legal advice. I do the technical work on the website. I don’t assess your legal risk, tell you whether a law applies to you, or respond to a demand letter on your behalf.
If you have legal questions, or you have received a letter about your website, talk to an attorney. You’re responsible for what you publish, including any privacy notice we work on. Have a lawyer review it if you want legal advice about it.
Privacy Risk Cleanup
Tell me the website you want scanned and which option you’re considering. I’ll reply with the next step.