A Windows desktop privacy X-ray
See what sites really do: trackers, fingerprinting, and GDPR-style audits.
Inspect. Document. Audit.

---

Privacy Monitor is a diagnostic browser built with WPF and WebView2. Use it when you want to inspect, document, or audit what a site is doing behind the scenes — which trackers load, what data is sent, which cookies and identifiers are set — while you keep using your normal browser day to day.

This repo includes the Privacy Monitor app, the browser-update-server (Node) for updates and optional 2FA, and scripts to build and deploy.

---

Features

Area	Description
Browse	Chrome-style tabs, address bar, back/forward/reload. Each tab uses Chromium (WebView2). Downloads go to your Downloads folder.
Privacy score	0-100 score per page with a letter grade (A/B/C/D/F). Fewer trackers and risks = higher score.
Tracker detection	Database of ~220 known services (Google, Meta, Adobe, Hotjar, Segment, etc.). First-party, third-party, and known-tracker classification with confidence.
Protection modes	Monitor Only (log only), Block Known (confirmed trackers), Aggressive (known + heuristic). Per-site.
Anti-fingerprinting	Optional script injection to reduce canvas/WebGL/audio fingerprinting; attempts reported in the sidebar.
Sidebar panels	Dashboard, Network, Storage, Fingerprint, Security (headers audit), Report (HTML/CSV, screenshot), Forensics (identity stitching, data flow, timeline).
Network interceptor	Live request inspection, pause/resume (Burp-style), replay with optional header/body modification, risk scoring, session export.
Reports	Timestamped HTML audit (score, GDPR articles, trackers, cookies, security headers, recommendations). CSV export and screenshot.
Update server	Node server for in-app updates and optional 2FA; deploy to your VPS with the included script.

---

Who it is for

• Privacy-conscious users — See how specific sites track you.
• Developers & QA — Test how your site behaves (requests, cookies, storage, fingerprinting, security headers).
• Privacy & compliance — Repeatable, documented evidence for GDPR-style audits (HTML/CSV reports, timelines).

---

Quick start

git clone https://github.com/NullSec8/PrivacyMonitor.git
cd PrivacyMonitor
.\update-all.ps1
dotnet run --project wpf-browser\PrivacyMonitor.csproj

---

Requirements

• Windows 10/11 (64-bit)
• .NET 9 SDK (for building)
• WebView2 Runtime — Download if not already installed with Windows or Edge

---

Repository structure

.github/
  workflows/ci.yml       # CI: build WPF, extension rules
  ISSUE_TEMPLATE/        # Bug report, feature request
wpf-browser/             # Privacy Monitor (WPF + WebView2)
  PrivacyMonitor.csproj
  MainWindow.xaml(.cs), BrowserTab.cs, PrivacyEngine.cs, ...
  NetworkInterceptor/    # Live interceptor, replay, risk scoring, export
  chrome-extension/      # Optional extension
  website/               # Generated site (deploy via update-vps.ps1)
browser-update-server/   # Node update server (deploy to VPS)
  server/
  builds/
update-all.ps1           # Restore packages & build
update-vps.ps1           # Deploy website/server/builds to VPS
PROJECT_STRUCTURE.md
DEPLOYMENT.md

---

Tech stack

---

Documentation

Document	Description
PROJECT_STRUCTURE.md	Folder layout and organization
DEPLOYMENT.md	GitHub (push) and VPS (update-vps.ps1)
NetworkInterceptor/ARCHITECTURE.md	Interceptor, replay, pause/resume, export
SIGNING.md	Code signing for distribution

---

Deployment

• GitHub: git add -A, git commit -m "...", git push. See DEPLOYMENT.md.
• VPS: Edit update-vps.ps1 (e.g. $DeployWebsite, $DeployServer, $DeployBuilds), then run .\update-vps.ps1. See DEPLOYMENT.md.

---

License

MIT — see LICENSE for details.

---