Steven | TrustYourWebsite

Steven | TrustYourWebsite

@trustyourwebsite.com

I'm Steven, building TrustYourWebsite: a compliance scanner for EU and UK websites. Checks GDPR, cookies, image copyright, accessibility and 150+ other things in 90 seconds. Check it out: trustyourwebsite.com

84 followers123 following55 posts

France's Conseil d'État upheld CNIL's €50 million fine against Orange on 16 October. One finding matters for every site: cookies stayed readable after users withdrew consent. The court said it is irrelevant that no data was processed afterwards. Test: withdraw consent, reload, check storage.

You can vibecode a website in an afternoon now. Lovable, Bolt, v0, Cursor: prompt in, live site out. The prompt never asks one question though: is this legal in the EU? What AI-built sites tend to get wrong 🧵

View full thread

You can vibecode a website in an afternoon now. Lovable, Bolt, v0, Cursor: prompt in, live site out. The prompt never asks one question though: is this legal in the EU? What AI-built sites tend to get wrong 🧵

View full thread

Legal pages: the e-Commerce Directive (art. 5) requires your name, geographic address, email, trade register number and VAT number to be easy to find. A generated footer with a logo and a Calendly link doesn't cover that.

And no, asking the AI "is my site GDPR compliant?" doesn't close the gap. It reads your code as text. You only see whether a cookie drops before consent by loading the page in a real browser, clicking the banner and watching the network traffic.

You can vibecode a website in an afternoon now. Lovable, Bolt, v0, Cursor: prompt in, live site out. The prompt never asks one question though: is this legal in the EU? What AI-built sites tend to get wrong 🧵

View full thread

You can vibecode a website in an afternoon now. Lovable, Bolt, v0, Cursor: prompt in, live site out. The prompt never asks one question though: is this legal in the EU? What AI-built sites tend to get wrong 🧵

View full thread

Consent has to be an active choice. The CJEU settled in Planet49 (C-673/17) that pre-ticked boxes don't count. A banner with only an "OK" button, while scripts already fired on load, is exactly the pattern regulators flag.

You can vibecode a website in an afternoon now. Lovable, Bolt, v0, Cursor: prompt in, live site out. The prompt never asks one question though: is this legal in the EU? What AI-built sites tend to get wrong 🧵

The models learned from a web built on US defaults. So generated sites often ship Google Analytics in the head, fonts from a third-party CDN and a cookie banner that is pure decoration. It looks fine. It breaks the rules on the first page load.

69.5% of restaurant websites in the Netherlands loaded Google Fonts from Google servers instead of hosting them themselves. We checked 347 of 499 restaurant websites, scanned in April 2026. #privacy #GDPR

Europe’s new AI data centres are landing 175km from the big hubs. It used to be 46km. Electricity, not fibre, decides where compute goes now. Worth remembering: where your servers sit is the easy question. Where your visitors’ data gets sent is the one regulators ask.

A cookie banner where accept is one click and reject is five isn't a real choice. France's data authority fined Google 150 million euros over exactly that. Refusing has to be as easy as agreeing. #GDPR #cookies trustyourwebsite.com/eu/en/guides...

trustyourwebsite.comCookie Banner Requirements Under EU Law (2026 Guide)Cookie banner requirements in the EU 2026: reject equal to accept, no dark patterns, prior consent. EDPB Guidelines 05/2020 explained.

We scan sites for the things that get EU and UK businesses in trouble. Cookie consent, GDPR, accessibility, tracking, security headers. You get a risk score and a ranked list. Technical analysis, not legal advice. #GDPR #accessibility

The European Accessibility Act has applied since 28 June 2025. Sell to consumers in the EU online and accessibility is now a legal duty, not a nice to have. Some small firms are exempt, so check where you stand.

The Dutch privacy watchdog (AP) received over 13,000 privacy complaints & signals in 2025 — nearly double the 7,100 from the year before.  Europeans are increasingly standing up for their GDPR rights. Privacy matters. 🔗 trustyourwebsite.com/nl/en/news/d... #GDPR #Privacy #Netherlands

trustyourwebsite.comNetherlands GDPR Complaints Surge in 2025: What It MeansNetherlands privacy complaints hit 13,000 in 2025! Discover how the Clinical Diagnostics breach affected victims and what GDPR changes mean for your website.

New guide: a step-by-step GDPR website audit checklist. Cookies, privacy policy, forms, third-party scripts, security, ROPA, DPAs — what to check, what regulators actually flag, and what to fix first. or just run the automated scan :) trustyourwebsite.com/eu/en/guides...

trustyourwebsite.comComplete GDPR Website Audit: Step-by-Step ChecklistA step-by-step GDPR audit checklist for your website. Check cookies, tracking, privacy policy, forms, third-party services, and security in one pass.

You are up to date.