What is the primary goal of this skill?

The primary goal is to align actual code behavior with privacy policies, ensuring that trust is maintained through technical enforcement of data protection standards.

Can this skill detect PII leaks?

Yes, it assists developers in identifying where Personally Identifiable Information (PII) might leak into logs or third-party services like Sentry and PostHog.

How does this skill help with GDPR compliance?

It provides specific guidelines and implementation patterns to ensure data is only collected after user consent and that deletion requests propagate through all third-party processors.

How does it handle marketing tags?

The skill enforces a non-negotiable rule that marketing tags and tracking scripts must not load or fire until explicit user consent is recorded.

Does it support specific analytics tools?

While the principles are universal, the skill includes specific configurations and best practices for PostHog, Resend, GTM, and Sentry.

Data Privacy & Compliance

Name: Data Privacy & Compliance
Author: SylphxAI

bySylphxAI

•

Security & Testing

Enforces strict privacy standards and data protection protocols including GDPR, CCPA, and consent-first tracking.

About

The Data Privacy & Compliance skill for Claude Code provides a comprehensive framework for managing user data responsibly and meeting legal requirements like GDPR and CCPA. It establishes non-negotiable standards for analytics, log sanitization, and third-party integration, ensuring that PII is never leaked into observability tools like Sentry or PostHog. This skill helps developers implement robust consent mechanisms and account deletion flows while ensuring that actual code behavior aligns perfectly with stated privacy policies to build and maintain user trust.

Key Features

GDPR and CCPA compliance auditing for data handling logic
4 GitHub stars
PII leak prevention for logs, Sentry, and analytics services
Idempotent and server-verified conversion tracking patterns
Third-party data propagation for account deletion requests
Consent-based execution for PostHog and Google Tag Manager

Use Cases

Implementing a 'consent-first' tracking strategy for marketing and analytics tags
Auditing an existing codebase for potential PII leaks to third-party observability tools
Developing compliant data subject access request (DSAR) and deletion workflows

About

Key Features

GDPR and CCPA compliance auditing for data handling logic
4 GitHub stars
PII leak prevention for logs, Sentry, and analytics services
Idempotent and server-verified conversion tracking patterns
Third-party data propagation for account deletion requests
Consent-based execution for PostHog and Google Tag Manager

Use Cases

Implementing a 'consent-first' tracking strategy for marketing and analytics tags
Auditing an existing codebase for potential PII leaks to third-party observability tools
Developing compliant data subject access request (DSAR) and deletion workflows