Rhinehart StudioCompliance Monitor (US)
Know when your website drifts out of line with US rules.
A site that passed a check last month can fail one today. The Monitor re-scans your homepage every week against the main US checks (ADA and WCAG 2.1 AA accessibility, CCPA and other state privacy laws, Global Privacy Control, FTC advertising rules and CAN-SPAM) and emails you a short report showing what's new, what's fixed and what changed.
Start monitoring · $29/month See a sample weekly report
$29/month for one website · cancel any time before your next billing date · first report within 2 working days · no site access needed
Why sites drift
Most compliance problems aren't there on launch day. They creep in as the site changes:
- New apps and plug-ins. A reviews widget, chat tool or pop-up can add trackers, new form fields or controls without labels.
- Theme and platform updates. An update can change colours, headings or menus, or drop the "Do Not Sell or Share" / "Your Privacy Choices" link from the footer.
- Tracking tags added for a campaign. A new ad pixel added through a tag manager may not respect the Global Privacy Control signal. California's regulations require businesses covered by the CCPA to treat GPC as a valid opt-out of sale and sharing (CPPA regulations; California AG), and several other states have similar rules (IAPP tracker).
- Policy edits. A rewritten privacy policy can lose a section, or stop mentioning tools the site still uses.
A one-off check tells you where you stand on one day. The Monitor tells you when that changes.
What the weekly email contains
- Your red/amber/green rating and counts: high, medium and low findings, items to check by hand, and checks passed
- What changed since last week: new findings, resolved findings and any change in rating
- Each current finding in plain English, with how to fix it
- A one-page weekly summary PDF, plus the full audit PDF listing every finding and the tracking services seen
What we scan each week: automated WCAG 2.1 A and AA rules (axe-core) on your homepage and whether you link an accessibility statement; whether a privacy policy can be found and covers what the CCPA/CPRA and similar state laws ask for; a "Do Not Sell or Share" / "Your Privacy Choices" link; whether ad trackers still load when the browser sends Global Privacy Control; tracking tags and whether the policy mentions them; FTC flags for affiliate links, reviews and "Made in USA" wording (16 CFR 255, 16 CFR 465, FTC); and email sign-up forms, with a CAN-SPAM reminder (FTC).
The DOJ says the ADA applies to the websites of businesses open to the public (ADA.gov); WCAG is the most widely used technical benchmark (W3C).
Sample weekly report Anonymised sample
To test the Monitor we scanned the public homepage of a large US retailer on 25 and 26 October 2026. This is the weekly email the second scan produced, with the retailer's name removed. They are not a customer, and the findings describe their homepage on those dates only.
Subject: Your weekly compliance report: example-retailer.com (Amber)
Your weekly Compliance Monitor scan of example-retailer.com ran on 26 October 2026.
AMBER 0 high, 1 medium, 1 low, 2 to check manually, 6 passed.
Since last scan: 1 resolved, 0 new, 0 changed.
The summary and the full audit are attached as PDFs.
Current findings
| Result | Area | Finding |
|---|---|---|
| MEDIUM | Opt-out and GPC | Ad trackers still load when the browser sends Global Privacy Control: with the GPC signal on, Google Ads, Google DoubleClick and Meta Pixel still loaded. Some setups load tags in a restricted-data mode when GPC is on, so confirm in your tag manager before changing anything. |
| LOW | Accessibility | No accessibility statement linked. Not required by the ADA for private businesses, but it tells disabled visitors how to get help. |
| CHECK | Accessibility | 3 items axe-core couldn't decide automatically (for example colour contrast over images): review with a keyboard and a screen reader. |
| CHECK | Email marketing | Email sign-up found: check marketing emails carry a postal address and a working unsubscribe (CAN-SPAM). |
| PASS | Accessibility | No automated WCAG 2.1 A/AA failures on the homepage |
| PASS | Privacy policy | Privacy policy found; core CCPA/CPRA elements present (keyword check) |
| PASS | Opt-out and GPC | "Do Not Sell or Share" / "Your Privacy Choices" style link found |
| PASS | Tracking | 6 tracking services seen (Google Ads, Google Analytics, Google DoubleClick, Google Tag Manager, Meta Pixel, Microsoft Clarity); the policy mentions cookies and tracking |
| PASS | FTC claims | No affiliate, review or "Made in USA" flags on the homepage (text check only) |
What changed since last scan
Compared with the scan on 25 October 2026. Rating: Amber → Amber.
Resolved: "Ad trackers present but no 'Do Not Sell or Share' / 'Your Privacy Choices' link". The first scan didn't find the opt-out link; the second did.
New: none.
About this sample: both scans are real, but they ran one day apart rather than a week, and we can't tell whether the retailer changed its site or the link simply didn't load on the first scan. A real subscriber's report compares with the previous week's scan, and a change like this is a prompt to look, not proof of an edit.
How it works
- Subscribe through Stripe and enter the website you want monitored at checkout.
- We scan your public homepage as a first-time US visitor, with and without a Global Privacy Control signal.
- Your first report arrives within 2 working days, then once a week, usually early in the week.
- Fix things yourself, order the $99 human-reviewed check, or add the Fix Pack for paste-ready text and settings.
Pricing (US dollars)
Compliance Monitor (US)
$29 / month
- Weekly automated re-scan of one website against the US checks
- Email report showing what changed since last week
- Weekly summary PDF and full audit PDF
- Cancel any time before the next billing date
US Compliance Check
$99 one-off
- Automated scan plus a human-reviewed PDF report
- Red/amber/green summary with plain-English fixes
- Delivered within 2 working days
US Fix Pack
$199 one-off
- Privacy policy sections, opt-out and GPC set-up steps
- Accessibility fixes written out element by element
- One re-scan; no site access needed
Need accessibility fixes done for you? See the $299 accessibility fix.
Charged in US dollars via Stripe. Any tax that applies is shown before you pay. See the terms.
FAQ
How do I cancel?
Any time before your next billing date: email hello@rhinehartstudio.com or reply to any weekly report. You won't be charged again, and reports stop at the end of the period you've paid for.
Is this legal advice?
No. It's an automated technical scan of what's publicly visible on your website. For legal advice, talk to a US-licensed attorney.
Will this stop me getting an ADA demand letter?
No one can promise that. Automated tests catch some accessibility problems but not all, and demand letters and lawsuits depend on many things outside a website scan. The Monitor shows you what it found and when that changes.
Do you need access to my website?
No. We only load the public pages any visitor can see. No logins, plug-ins or code on your site.
How do you know which website to monitor?
You enter it at checkout. If you run more than one site or made a typo, email hello@rhinehartstudio.com and we'll fix it before the first scan. To change it later, just email us.
Does the CCPA apply to my business?
Often not for small businesses: it applies to for-profit businesses that do business in California and meet a threshold, such as annual gross revenue over $26,625,000 (the 2025–26 figure) or buying, selling or sharing the personal information of 100,000 or more California consumers or households (CPPA). Accessibility, CAN-SPAM and FTC checks matter regardless of size.
Can I monitor more than one site?
Yes. Take one subscription per website.
Questions before subscribing?
Email hello@rhinehartstudio.com.