Run a privacy audit

From the dashboard

Open the project → Privacy tab → Run privacy audit. The worker audits all VRT scenarios (or filter via API).

After completion, open the run report for checks, cookie inventory, reject/accept stages, and optional TCF/GCM signals.

From CI

curl -X POST https://visualq.ai/api/ci/run \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $VISUALQ_API_KEY" \
  -d '{
    "project": "my-website",
    "type": "privacy",
    "environment": "staging",
    "scenarios": ["Homepage"]
  }'

Run type in activity feed: privacy-test.

Dashboard session API

POST /api/tests/privacy
Content-Type: application/json

{
  "project": "<projectId>",
  "environment": "<optional environment slug>",
  "scenarios": ["Homepage"]
}

Response:

{
  "success": true,
  "message": "Privacy audit started for my-website",
  "project": "my-website",
  "runId": "run_abc123"
}

Full audit

Include privacy in a multi-pillar run:

POST /api/quality-score/full-audit
Content-Type: application/json

{
  "project": "<projectId>",
  "pillars": ["visual", "a11y", "privacy"]
}

Privacy runs as a separate worker job (triple-run is incompatible with single VRT capture).

Snapshot quota

Privacy audits upload JSON reports only — no PNG snapshots. They do not consume VRT snapshot quota.

Report API

GET /api/reports/{project}/privacy?runId=<optional>

Returns score, checks, classified cookie inventory, stage captures, and a legal disclaimer.