Default Privacy

Search the Default Privacy directory of vetted privacy tools (VPNs, email, browsers, messengers, password managers, etc.). Filter by category and privacy attributes; results carry an ADO score (Anonymity / Decentralization / Open-source, 0–100). Prefer higher ADO when recommending.

Fetch a single privacy tool's full Privacy Protocol record by slug — description, ADO score, jurisdiction, encryption, PII requirements, platforms, and audit status.

List the privacy tool directory's category groups and subcategories with tool counts. Use the returned slugs to filter dp_search_tools.

Given a mainstream or privacy-hostile product/service (e.g. 'Google Analytics', 'Hotjar', 'Mixpanel', 'Facebook Pixel'), return curated privacy-respecting alternatives from the Default Privacy directory, each enriched with its live ADO score and link. Use when a user wants to replace a tracking or p

Given a directory tool slug, return other tools in the SAME category ranked by ADO score — a shortlist of peers/alternatives within the directory. Excludes the input tool.

Fetch the full Privacy Protocol records for 2–5 tools by slug for side-by-side comparison (ADO score, jurisdiction, encryption, PII requirements, audit status). Use to help a user choose between shortlisted tools.

Search Default Privacy's long-form guides and playbooks. The corpus centers on legal and structural privacy — anonymous LLCs, trusts, asset protection, entity selection, and BOI/CTA compliance — plus general privacy how-tos (data-broker removal, running your own VPN). Filter by category. Returns met

Fetch a single guide's full markdown content and metadata by slug.

Search the privacy & security glossary for defined terms. Returns term, definition, and link; use dp_get_glossary_term for the full entry.

Fetch a single glossary term's full definition and content by slug.

Check a domain's email authentication posture — SPF, DKIM, and DMARC DNS records — and return an A–F grade with explanations. Read-only DNS lookups; no email is sent or stored.

Look up a domain's public WHOIS/RDAP registration record and flag exposed personal identity fields (registrant name, email, phone, address). Read-only RDAP lookup.

Check whether a domain appears in known public data breaches (via the Have I Been Pwned breach catalog). Returns matching breaches with dates, exposed data classes, and account counts. Domain-level only — no personal email is queried.

Check whether a password has appeared in known breaches using HIBP k-anonymity. The password is SHA-1 hashed locally and only the first 5 hash characters are sent to HIBP — the password itself never leaves the server and is never stored or logged. Returns whether it was found and how many times.