privacy

Audit web app third-party scripts and implement compliant cookie handling.

926|71|Updated Jan 27, 2026
One-click install
npx skills add https://github.com/GoogleChrome/modern-web-guidance-src --skill privacy-googlechrome
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: privacy
Source: https://github.com/GoogleChrome/modern-web-guidance-src/tree/main/skills-src/privacy
Command: npx skills add https://github.com/GoogleChrome/modern-web-guidance-src --skill privacy-googlechrome

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web applications frequently implement poor privacy practices that lead to user data breaches, regulatory non-compliance, and eroded user trust from excessive data collection, unvetted third-party tracking, and legacy cookie reliance.

Core Features & Use Cases

  • Privacy by Design & Data Minimization: Actionable guidance to collect only necessary user data, reduce digital footprint, and provide transparent inline data usage explanations for users.
  • Third-Party & Cookie Mitigations: Steps to audit external scripts, implement CHIPS and Storage Access API for cookie deprecation readiness, and block unauthorized cross-origin requests using fetch metadata headers.
  • Modern Privacy API Integration: Instructions for implementing FedCM for privacy-preserving identity federation, feature detection instead of user-agent sniffing, and granular Permissions API usage to avoid intrusive native prompts.
  • Use Case: A developer building an e-commerce site with third-party payment embeds and user accounts can use this skill to implement compliant cookie handling, replace tracking SDKs with static hyperlinks, and add FedCM sign-in to reduce cross-site user tracking.

Quick Start

Use the privacy skill to audit your web app's third-party scripts and implement compliant cookie and data collection practices.

Frequently Asked Questions about privacy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make my web app compliant with cookie deprecation?

To make your web app compliant with cookie deprecation, implement CHIPS and the Storage Access API to handle partitioned storage and audit external scripts for cross-site tracking.

What is the best way to implement privacy by design in web development?

The best way to implement privacy by design is by enforcing data minimization to collect only necessary user data, reducing your digital footprint, and providing transparent inline data usage explanations.

How does FedCM work for identity federation?

FedCM works as a privacy-preserving identity federation API that allows users to sign into your web app without cross-site tracking, replacing traditional tracking SDKs with secure browser-managed flows.

Can I use fetch metadata headers to block unauthorized cross-origin requests?

Yes, you can use fetch metadata headers to block unauthorized cross-origin requests by auditing and restricting external network calls, mitigating unauthorized third-party script integrations.

How do I avoid intrusive native permission prompts in the browser?

Avoid intrusive native permission prompts by using granular feature detection with the Permissions API to check the current permission state before requesting access to sensitive browser features.

When should I replace third-party tracking SDKs in my web application?

You should replace third-party tracking SDKs when auditing external scripts reveals unauthorized cross-site tracking, substituting them with static hyperlinks to ensure data minimization and regulatory compliance.