# Privacy Assessment Tool

> A free, interactive tool that helps individuals evaluate their personal digital privacy and security posture across 14 threat domains — all processing happens client-side with no data sent to any server.

## About

The Privacy Assessment Tool at [me.myprivacy.blog](https://me.myprivacy.blog/) is a self-assessment quiz covering 80+ questions across 14 privacy and security categories. Users receive a scored breakdown (0–100 per category) and actionable, tool-specific recommendations to improve their privacy posture.

The tool is built as a React single-page application. All scoring, recommendations, and data handling occur entirely in the user's browser using localStorage for session persistence. No personally identifiable information is collected or transmitted.

It is published by Privacy Posture under the myprivacy.blog umbrella, which provides privacy education resources for individuals concerned about surveillance, data brokers, AI profiling, and digital security.

## Assessment Categories

The tool evaluates privacy across these 14 domains:

- **Device Security** — Full-disk encryption, OS updates, app permissions, hardened OS (GrapheneOS, QubesOS), hardware security
- **Communications Security** — End-to-end encrypted messaging (Signal, Element), VPN usage, DNS-over-HTTPS, ephemeral messaging, security key verification
- **Data Protection** — Cloud encryption (Cryptomator), password managers (Bitwarden, 1Password), encrypted backups, social media privacy
- **Location Privacy** — Location service controls, privacy-respecting navigation (Organic Maps, OsmAnd), app permission audits
- **Identity Protection** — Multi-factor authentication type (passkeys, TOTP, SMS), email aliases (SimpleLogin, AnonAddy), data broker removal (Incogni, DeleteMe), credential uniqueness
- **Browser Security** — Privacy browsers (Firefox, Brave, Mullvad Browser), extensions (uBlock Origin), WebRTC leak prevention, browser AI feature review, fingerprinting resistance
- **Network Security** — Router credential hygiene, IoT network isolation, privacy DNS (Quad9, NextDNS), network-level blocking (Pi-hole, AdGuard Home)
- **Advanced Operational Security** — Threat modeling, secure file deletion (BleachBit), air-gapped computing, metadata stripping (MAT2, ExifTool), software signature verification
- **Physical Security & Surveillance** — Visual privacy measures, audio surveillance countermeasures, TSCM awareness, physical document security
- **Government-Level Surveillance** — Current surveillance law awareness (FISA, EU AI Act), data sovereignty, Tor/anonymity tools, traffic analysis countermeasures
- **Smart Home Security** — IoT firmware updates, device credential hygiene, network segmentation, data minimisation settings
- **AI & ML Exposure** — Facial recognition countermeasures, AI agent access controls (ChatGPT, Copilot, Gemini), deepfake/voice clone awareness, AI training opt-outs, local vs. cloud AI (Ollama, LM Studio)
- **Biometric Security** — Biometric authentication risks, on-device storage awareness, alternative auth for high-security accounts, legal rights (BIPA, GDPR Article 9)
- **Financial Privacy** — Privacy-preserving payments, virtual cards (Privacy.com), digital footprint minimisation, credit freezes

## Scoring System

- Each question is assigned a risk level: 0 (best practice) → 3 (high risk)
- Section score = `100 × (1 − average_risk / 3)`, producing a 0–100 scale
- Overall score = unweighted average of all answered section scores
- Score bands: 80–100 Strong | 60–79 Adequate | 40–59 Vulnerable | 0–39 High Risk

## Recommended Tools Referenced

Signal, Element, Mullvad VPN, ProtonVPN, Tor Browser, Proton Mail, Tuta, SimpleLogin, AnonAddy, Bitwarden, 1Password, KeePassXC, Firefox, Brave, Mullvad Browser, uBlock Origin, Privacy Badger, Incogni, DeleteMe, GrapheneOS, CalyxOS, Quad9, NextDNS, Pi-hole, AdGuard Home, Organic Maps, OsmAnd, Cryptomator, BleachBit, MAT2, ExifTool, Ollama, LM Studio, Privacy.com, Ente Auth, Aegis

## Links

- [Privacy Assessment Tool](https://me.myprivacy.blog/): Main interactive assessment application
- [Privacy Posture Blog](https://myprivacy.blog/): Privacy education articles and guides

## Contact

- Publisher: Privacy Posture
- Technical contact: info@quantumsecurity.ai
- Last updated: 2026-05-17