What is the primary goal of this skill?

The primary goal is to align actual code behavior with privacy policies, ensuring that trust is maintained through technical enforcement of data protection standards.

Can this skill detect PII leaks?

Yes, it assists developers in identifying where Personally Identifiable Information (PII) might leak into logs or third-party services like Sentry and PostHog.

How does this skill help with GDPR compliance?

It provides specific guidelines and implementation patterns to ensure data is only collected after user consent and that deletion requests propagate through all third-party processors.

How does it handle marketing tags?

The skill enforces a non-negotiable rule that marketing tags and tracking scripts must not load or fire until explicit user consent is recorded.

Does it support specific analytics tools?

While the principles are universal, the skill includes specific configurations and best practices for PostHog, Resend, GTM, and Sentry.

Data Privacy & Compliance

Name: Data Privacy & Compliance
Author: SylphxAI

bySylphxAI

•

Security & Testing

Enforces strict privacy standards and data protection protocols including GDPR, CCPA, and consent-first tracking.

The Data Privacy & Compliance skill for Claude Code provides a comprehensive framework for managing user data responsibly and meeting legal requirements like GDPR and CCPA. It establishes non-negotiable standards for analytics, log sanitization, and third-party integration, ensuring that PII is never leaked into observability tools like Sentry or PostHog. This skill helps developers implement robust consent mechanisms and account deletion flows while ensuring that actual code behavior aligns perfectly with stated privacy policies to build and maintain user trust.

Key Features

01GDPR and CCPA compliance auditing for data handling logic

024 GitHub stars

03PII leak prevention for logs, Sentry, and analytics services

04Idempotent and server-verified conversion tracking patterns

05Third-party data propagation for account deletion requests

06Consent-based execution for PostHog and Google Tag Manager

Use Cases

01Implementing a 'consent-first' tracking strategy for marketing and analytics tags

02Auditing an existing codebase for potential PII leaks to third-party observability tools

03Developing compliant data subject access request (DSAR) and deletion workflows

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sylphxai/flow privacy

For use in Claude.ai and ChatGPT

Download Skill