In shortAsk the same questions every time, treat silence as information, and require a quote for every answer.

Sixteen questions find most of the fine print that matters.

Published 1 September 2026 · 8 minute read

A long policy becomes manageable the moment you stop reading it as an essay. Work a fixed checklist instead: record the literal answer, note where the document says it, then ask whether that answer works in your interest.

01

Sells or shares your data for advertising?

Good sign: says it does not sell or share data for targeted advertising.

Warning sign: calls targeted advertising a business purpose or defines sharing narrowly.

02

Tracks you on other sites or apps?

Good sign: limits measurement to its own service.

Warning sign: combines pixels, device identifiers, and partner data across services.

03

Keeps your data after you close your account?

Good sign: names a short deletion period and narrow legal exceptions.

Warning sign: keeps data indefinitely or says only as long as necessary.

04

Hands data to government without a warrant?

Good sign: requires valid legal process and publishes exceptions.

Warning sign: allows voluntary disclosure whenever the company believes it useful.

05

Sends your data to other countries?

Good sign: names safeguards and destinations.

Warning sign: allows transfer anywhere without explaining protection.

06

Lets you download your data?

Good sign: provides a usable export route and format.

Warning sign: offers access only by an undefined request.

07

Lets you delete your data?

Good sign: names the control, email, or request route.

Warning sign: lets you close an account but says nothing about deletion.

08

Tells you when the policy changes?

Good sign: promises direct notice before material changes.

Warning sign: says continued use alone counts as acceptance.

09

Claims rights over things you post?

Good sign: takes a narrow licence only to operate the service.

Warning sign: takes a perpetual, transferable, sublicensable licence.

10

Forces private arbitration and blocks class actions?

Good sign: preserves access to court or a practical opt-out.

Warning sign: forces distant arbitration and waives collective claims.

11

Can close your account without giving a reason?

Good sign: limits closure to stated breaches and gives notice.

Warning sign: allows termination at any time for any reason.

12

Renews automatically?

Good sign: requires active renewal or clear reminders.

Warning sign: renews silently with a difficult cancellation path.

13

Limits what you can claim if things go wrong?

Good sign: keeps limits proportionate and preserves mandatory rights.

Warning sign: caps all claims at a trivial amount.

14

Makes you cover their legal costs?

Good sign: limits responsibility to harm you directly cause.

Warning sign: makes you defend broad claims connected to any use.

15

Names which country’s courts decide disputes?

Good sign: states the governing law and forum clearly.

Warning sign: leaves the forum unstated or reserves a unilateral choice.

16

Can change the terms without telling you?

Good sign: commits to notice before material changes.

Warning sign: can change terms immediately by posting a revision.

Three rules that prevent false confidence

  1. Silence is never favourable. If a policy does not promise deletion, do not infer deletion. Unwritten generosity is not a commitment.
  2. Quote the source. A paraphrase without evidence is only an assertion — including one made by software.
  3. Separate common from harmless. A clause can be in every policy you have ever accepted and still work against you.

Or let Policy Pal ask them for you.

The extension runs this checklist on any policy page and quotes the sentence behind each answer. The first report each month is free.