Detector registry

Public-surface detector registry

Each detector page explains what LaunchTrust can observe on a public page, how the signal is interpreted and what to fix before launch.

27 pagesUpdated 2026-06-19Compliance aid, not legal advice
account deletion requirement app store Account Deletion Requirement for App Stores

How LaunchTrust checks for an account or data deletion route, why Google Play and GDPR expect one, and how to add a public deletion path before launch.

age verification requirement app Age Verification Requirement for Your App

How LaunchTrust detects whether your app or site shows an age gate, and why COPPA, the UK Children's Code, and the EU DSA care.

app store privacy nutrition label App Store Privacy Nutrition Label Check

Scan your App Store listing for a privacy-policy reference before review. See detected, not-detected, and unable signals tied to Apple 5.1.2.

app store privacy policy requirement App Store Privacy Policy Requirement Check

Detect whether your site links a privacy policy before submitting. See what stores and GDPR expect, and how to fix a missing-policy signal.

check if my .env file is exposed Check If Your .env File Is Exposed Publicly

See how to check if your .env file is exposed and whether your /.git folder is downloadable. A passive pre-launch scan for leaked secrets and config.

cookie consent banner requirement Cookie Consent Banner Requirement Explained

Does your site need a cookie consent banner? See what GDPR and ePrivacy expect, how detection works, and how to spot a missing banner signal.

do I need an AI disclosure on my app Do I Need an AI Disclosure on My App?

Find out when AI chat needs a disclosure and how a scanner detects whether your page already tells users they're talking to AI.

do I need terms of service for my app Do I Need Terms of Service for My App?

Find out if your app needs terms of service, what stores expect, and how LaunchTrust detects a terms link before you submit.

exposed api key in frontend Exposed API Key in Frontend: Detect & Fix

Find secret API keys leaked in your frontend code before launch. See how a passive scan spots exposed keys and how to rotate and remove them.

form label accessibility Form Label Accessibility Check for Indie Apps

See whether your forms expose accessible labels. LaunchTrust scans for <label> and aria-label signals tied to WCAG 3.3.2 and the EAA.

global privacy control gpc Global Privacy Control (GPC): Detection

Find out if your site publishes a Global Privacy Control (GPC) signal. See what LaunchTrust checks, why CCPA/CPRA cares, and how to add gpc.json.

google play data safety form Google Play Data Safety Form Check

Detect whether your Play listing shows a privacy policy and Data safety section before submitting. See what Google expects and how to fix gaps.

html lang attribute accessibility HTML lang Attribute Accessibility Check

A missing <html lang> attribute is a common accessibility gap. See what WCAG 3.1.1 expects and how LaunchTrust detects the signal before you ship.

https requirement for website HTTPS Requirement for Websites: A Detector Guide

See why HTTPS is expected for live sites, what a passive scan detects, and how to fix a site that still serves over plain HTTP before launch.

image alt text accessibility Image Alt Text Accessibility Check

Scan your site for images missing alt attributes. See what LaunchTrust detects, why EAA and WCAG care, and how to fix gaps fast.

kvkk aydinlatma metni website KVKK Aydınlatma Metni Website Check

Serving users in Turkey? See what a KVKK aydınlatma metni is, how a website check detects it, and how to spot a missing data-protection notice signal.

mixed content https warning Mixed Content HTTPS Warning Scanner

Find mixed content that triggers HTTPS warnings: insecure http images, scripts, and stylesheets loaded on a secure page. Scan your site free.

page title accessibility requirement Page Title Accessibility Requirement Check

Catch a missing or empty page <title> before launch. See what LaunchTrust detects and how a descriptive title maps to WCAG 2.4.2 and the EAA.

refund policy requirement ecommerce Refund Policy Requirement for Ecommerce

See why ecommerce stores need a refund, return, or cancellation policy and how LaunchTrust detects whether one is present on your page.

security headers checker Security Headers Checker for Indie App Launches

Run a security headers checker on your own site to spot missing CSP, X-Frame-Options, and more before you ship. See detected vs not-detected signals.

security.txt file security.txt File Check (RFC 9116) for Apps

See how LaunchTrust detects a security.txt file at /.well-known/security.txt, what RFC 9116 expects, and how to publish a valid disclosure contact.

spf dmarc check SPF and DMARC Check for Your Domain

Run a free SPF DMARC check on your domain. See what LaunchTrust detects in DNS, why anti-spoofing matters at launch, and how to fix gaps.

subscription auto renewal disclosure law Subscription Auto-Renewal Disclosure Check

Scan your pricing page for auto-renewal and cancellation terms. See what subscription disclosure law commonly expects and how to spot missing signals.

third party trackers on my site Third-Party Trackers on My Site: Detection

Find third-party trackers on your site before launch. See what LaunchTrust detects, why GDPR and ePrivacy care, and how to handle consent.

viewport zoom disabled accessibility Viewport Zoom Disabled: Accessibility Check

A viewport meta tag that blocks pinch-zoom is a common accessibility gap. See how LaunchTrust detects disabled zoom and how to let users zoom to 200%.

website imprint impressum requirement Website Imprint / Impressum Requirement Check

Spot a missing imprint or contact link before launch. See what LaunchTrust detects on your public page and how to add an EU/German Impressum.

what is hsts header What Is the HSTS Header? A Pre-Launch Check

What is the HSTS header, why it matters for your launch, and how LaunchTrust detects whether your site sends Strict-Transport-Security.