Loading report

CertScore.ai report

Loading report

The report is ready; we’re loading its retained findings and evidence.

kling5.art tracking, cookie, consent, and accessibility scan | CertScore.ai

Scanned from EU-IR

Coverage & timing · 19 sec

CMS / generator: Not identified
Declared version: Not available

Coverage

Scan scope: Single page
Pages scanned: 1
Scan region: EU-IR

Timing

Observation window: 19 sec

Started: Sep 18, 2026, 3:23:30 PM UTC
Completed: Sep 18, 2026, 3:23:54 PM UTC

Sep 18, 2026, 3:23:30 PM UTC

kling5.art

https://kling5.art/

Executive overview

Site assessment · Completed

100/ 100

Page score

0 priority issues

1 page scanned

Signal SnapshotStarting page

Consent platformNot identified

Single page assessment

Overall, this scan did not surface a priority issue in the retained evidence. That is encouraging, but it is not a legal conclusion or proof that every site behavior was observed. Captured consent, runtime, policy, and transport signals should still be read alongside the underlying evidence before decisions are made. No checklist items were technically limited in this retained scan.

Services1

Google Sign-in

Hidden links0

Forms1

generic form
1 field · unknown

View forms ↗

Requests81

Cookies & storage0

Embedded frames0

Resource counts & classifications

Each resource is counted once. Services group requests, cookies/storage and frames.

Requests81

Non-essential: 0
Classification review: 1
Unknown purpose: 74
Contextual: 6
Essential: 0

Cookies & storage0

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 0
Essential: 0

Embedded frames0

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 0
Essential: 0

Priority review

Top issues on this page

0 issues

No priority issues were identified in the assessed evidence. Resource purposes may remain unclassified; inventory labels are separate from priority findings.

Page event timeline

Scan start

Public page observation began

3.84s

3P request

3P request first observed

18.58s

Observation end

Retained scan window closed

Supporting evidence

Services & Resources

Resource breakdowns

81 distinct resources = 81 requests. Services group these resources.

Type mix

Requests81

Evidence mix

Classification review1
Unknown purpose74
Contextual6

Purpose mix

Unknown purpose80
Infrastructure1

Site relationship

First party76
Third party5

Services and their member resources
	Type		Priority legend Inventory classifications are separate from priority findings. Unknown purpose means the retained evidence does not establish a purpose. Contextual records an observation; it does not establish necessity or consent exemption.Non-essentialClassification reviewUnknown purposeContextualEssential Shows the highest priority among the service’s resources. Expand the service to inspect individual resources.					Domain	Site relationship		JSON evidence
1		Google Sign-in		Authentication	Policy disclosure · Not found Google Sign-in Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. https://kling5.art/privacy-policy Reviewed 2026-09-18T15:23:54.199Z · Complete retained text Evidence SHA-256: 5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab	Location details Google Sign-in Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. No server IP is available in this inventory entry. Historical evidence may not include a destination summary. For newly assessed requests, a service-worker, failed or incomplete response may not expose an address; check retained connection evidence for the reason. 1 of 1 request events assessed; 1 without a retained server IP. Provider headquarters: US Transfer mechanism: Mechanism not assessed US-controlled vendor; mechanism requires current vendor/legal verification. Registry reference date: 2026-07-23. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Google LLC Google identifies Mountain View, California as its headquarters. This does not identify a customer's regional Google contracting entity or Alphabet's headquarters. Sources checked 2026-09-07 Google company history Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	3.99s	accounts.google.com	Third party	Captured on 1 page https://kling5.art/

Loading origin unresolved (80)

1 distinct services, including child services

Forms & fields

1 form

Forms and fields observed on scanned pages. Expand a form to inspect its fields. CertScore.ai does not fill or submit forms; this inventory does not contain submitted field values.

Field review identifies fields worth checking. These labels are not privacy findings and do not affect the score by themselves.

Declared destination is the configured form action, not evidence that CertScore.ai submitted the form or observed a transfer.

generic form

—

ⓘUnrestricted free text

unknown

Destination not observed

https://kling5.art/

generic form 1

Observation reference: collection_form_0

unassociated controls · Captured 2026-09-18T15:23:40.162Z

Form confidence: 78% · direct
Evidence references: [{"refId":"ref_collection_surface_form_0","eventType":"main_document_dom_form","artifactId":"collection_surface_inventory_pre_consent"}]

Fields in generic form 1
Field	Element	Input type	Category	Field review	Required	Selection	State	Autocomplete	Confidence	Evidence refs
Describe your scene and motion… e.g. A 5s social hook, cinematic push-in tracking a traveler on a cliff edge at golden h	textarea	textarea	free text	ⓘUnrestricted free text	No		Enabled	Not specified	90% · direct	[{"refId":"ref_collection_surface_0_0","eventType":"main_document_dom_control","artifactId":"collection_surface_inventory_pre_consent"}]

Detailed evidence

Evidence RatingsStarting page

29 rows

11positive18contextual

CertScore.ai can make mistakes. Verify all findings.

Consent mechanismNot observed in scan evidence; No operational consent surface was retained in the tested context.Not observed

JSON evidence

complete ConsentControlAssessment v2

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "consent_surface_observed",
  "coverageArea": "Consent mechanism",
  "evidenceState": "not_observed",
  "explanation": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
  "note": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.consent_surface_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.consent_surface_observed"
  },
  "statusBasis": "No operational consent surface was retained in the tested context.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: complete ConsentControlAssessment v2"
    ],
    "consentSurfaceState": "not_observed",
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Retained evidence did not confirm an uncontaminated first-layer GDPR/ePrivacy cookie/CMP consent surface.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "consentControlLifecycleEvidence.surfaceClassification"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

CMP frameworkNot observed in scan evidence; Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.Not observed

JSON evidence

runtime capture completed

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cmp_framework_signal_observed",
  "coverageArea": "CMP framework",
  "evidenceState": "not_observed",
  "explanation": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
  "note": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cmp_framework_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cmp_framework_signal_observed"
  },
  "statusBasis": "Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: runtime capture completed"
    ],
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "cmpFrameworkSignalObserved": false,
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

CMP framework is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Decline consent controlNot observed in scan evidence; No reject control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "reject_all_path_availability",
  "coverageArea": "Decline consent control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "note": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
  },
  "statusBasis": "No reject control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "missingEvidenceNeeded": [],
    "rejectControlObserved": false,
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "rejectPathDepthAndAvailability",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Accept consent controlNot observed in scan evidence; No accept control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "accept_consent_control",
  "coverageArea": "Accept consent control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
  "note": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.accept_consent_control.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.accept_consent_control"
  },
  "statusBasis": "No accept control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "acceptControlObserved": false,
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface accept consent control evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "firstLayerConsentChoices.acceptControl",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Options / settings / preferences controlNot observed in scan evidence; No options control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "options_settings_preferences_control",
  "coverageArea": "Options / settings / preferences control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
  "note": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.options_settings_preferences_control.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.options_settings_preferences_control"
  },
  "statusBasis": "No options control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "optionsControlObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface options/settings/preferences control evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "firstLayerConsentChoices.optionsControl",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Cookie notice / cookie policy availabilityObserved in scan evidence; A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.Observed

JSON evidence

cookie policy or cookie disclosure surface retained

Not confirmed: granular named-cookie inventory

Not confirmed: cookie preference interface

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "observed",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: cookie policy or cookie disclosure surface retained",
      "Not confirmed: granular named-cookie inventory",
      "Not confirmed: cookie preference interface",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "cookiePolicyUrls": [
      "https://kling5.art/privacy-policy"
    ],
    "cookiePolicyPresent": true,
    "cookieNoticeObserved": true,
    "observedPolicyTopics": [
      "cookies",
      "analytics",
      "sale_or_share",
      "do_not_sell_or_share",
      "third_party_disclosures",
      "vendor_list"
    ],
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "preferenceInterfaceConfirmed": false,
    "granularCookieInventoryConfirmed": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Cookie notice / cookie policy availability is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Tracking & embedded content · Starting page

0 checks need review · 4 checks

Pre-consent non-essential trackingNo request met the tracking-classified threshold before a recorded consent action. Broader third-party requests or embedded services, when present, are reported separately and do not by themselves establish tracking.Not observed

JSON evidence

runtime capture completed

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "not_observed",
  "explanation": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
  "note": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
  },
  "statusBasis": "Runtime tracking checks completed for the tested context, and no eligible pre-consent non-essential tracking finding was projected.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: runtime capture completed"
    ],
    "trackerVendorCount": 0,
    "missingEvidenceNeeded": [],
    "trackingRequestTiming": {
      "version": "classified-request-timing.v1",
      "requests": []
    },
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "preconsentTimingEvidence": {
      "cookieOrStorage": {
        "preconsentCookieOrStorageExactTimingRetained": false,
        "preconsentCookieOrStorageTimedObservationCount": 0,
        "preconsentCookieOrStorageUntimedObservationCount": 0,
        "preconsentCookieOrStorageInitialInventoryObserved": false
      },
      "thirdPartyTracking": {
        "trackingRequestTiming": {
          "version": "classified-request-timing.v1",
          "requests": []
        },
        "preconsentThirdPartyTrackingTimedObservationCount": 0
      }
    },
    "selectedEvidenceStrength": "moderate",
    "preconsentTrackingDetected": false,
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence.missing",
    "preconsentCookieOrStorageExactTimingRetained": false,
    "preconsentCookieOrStorageTimedObservationCount": 0,
    "preconsentCookieOrStorageUntimedObservationCount": 0,
    "preconsentCookieOrStorageInitialInventoryObserved": false,
    "preconsentThirdPartyTrackingTimedObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

3rd party iframes before consentNot observed in scan evidence; Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.Not observed

JSON evidence

retained pre-consent iframe inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "third_party_iframe_pre_consent",
  "coverageArea": "3rd party iframes before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
  },
  "statusBasis": "Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent iframe inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 0,
    "iframeObservationCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

3rd party iframes before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Social/media embeds or plugins loaded before consentNo eligible social/media provider request was observed before a recorded consent action; plain outbound social links are not counted for this row.Not observed

JSON evidence

retained pre-consent embedded-content inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "social_media_embed_pre_consent",
  "coverageArea": "Social/media embeds or plugins loaded before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
  },
  "statusBasis": "Retained embedded-content checks did not show a social/media embed, plugin, widget, or pixel provider request before consent. Plain outbound links are not treated as evidence for this row.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "placeholderDetected": false,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "socialMediaEmbedObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Social/media embeds or plugins loaded before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Embedded third-party services before consentNo eligible 3rd party embedded content was observed before a recorded consent action.Not observed

JSON evidence

EmbeddedContentObservationCount: 0

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "embedded_content_pre_consent",
  "coverageArea": "Embedded third-party services before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
  },
  "statusBasis": "Iframe/runtime checks completed for the tested context and did not retain a concrete 3rd party embedded-content iframe before consent.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "embeddedContentObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Embedded third-party services before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Policy and transparency · Starting page

5 observed · 11 checks

Privacy notice link/surface discoveredObserved in policy-surface evidence; Privacy notice evidence was retained in public policy-surface evidence; policy surface: https://kling5.art/privacy-policy; 4073 policy-text characters retained.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

Excerpt: Your Rights. tion where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected]. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service

Policy URL: https://kling5.art/privacy-policy

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: privacy policy surface retained",
      "Excerpt: Your Rights. tion where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected]. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "signalObserved": true,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-09-18T15:23:35.622Z",
      "observedTopics": [
        "cookies",
        "analytics",
        "sale_or_share",
        "do_not_sell_or_share",
        "third_party_disclosures",
        "vendor_list",
        "data_retention",
        "controller_contact",
        "processing_purposes",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "ai_features",
        "contact_privacy"
      ],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [],
      "privacyPolicySize": {
        "url": "https://kling5.art/privacy-policy",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 92573,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 92573
      },
      "privacyPolicyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 10,
      "policySurfaceCount": 2,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 6961,
          "heading": "Introduction",
          "quality": "strong",
          "charStart": 6346,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use Kling 5 at kling5.art — an AI video studio for text-to-video and image-to-video."
        },
        {
          "charEnd": 8948,
          "heading": "Information We Collect",
          "quality": "strong",
          "charStart": 6961,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We collect the following types of information to provide and improve the service: Account Information — Your name, email address, and other details you provide when creating an account or signing in (including via email magic link or supported social providers). Usage Data — Information about how you interact with the studio, including features used (for example text-to-video or image-to-video), generation frequency, plan or credit activity, and basic interaction patterns. Generation Inputs & Outputs — Prompts, optional reference or start images you upload, job metadata (status, duration, resolution, model settings), and generated video assets as needed to run the queue, show history, and deliver downloads. Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance. Cookies & Similar Technologies — Small data files or local storage keys used for session, preferences, locale, and product experience (see Cookies below). Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers."
        },
        {
          "charEnd": 10083,
          "heading": "How We Use Your Information",
          "quality": "strong",
          "charStart": 8948,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations. Send technical notices, security alerts, and support messages. Respond to your questions, feedback, and support requests at [email protected] . Detect, prevent, and address fraud, abuse, and policy violations."
        },
        {
          "charEnd": 10525,
          "heading": "Cookies",
          "quality": "strong",
          "charStart": 10083,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We may use cookies and similar technologies to keep you signed in, remember preferences (such as theme or locale), measure basic product reliability, and improve the site. You can control cookies through your browser settings; some features may not work fully if essential cookies are blocked."
        },
        {
          "charEnd": 11762,
          "heading": "Data Sharing",
          "quality": "strong",
          "charStart": 10525,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms. To comply with legal obligations or respond to lawful requests from public authorities. To protect our rights, property, or safety, or that of our users. Uploaded images, prompts, and generated videos may be processed by third-party AI and infrastructure vendors solely to fulfill your generation request and related product operations."
        },
        {
          "charEnd": 12260,
          "heading": "Data Retention",
          "quality": "strong",
          "charStart": 11762,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies."
        },
        {
          "charEnd": 12648,
          "heading": "Data Security",
          "quality": "partial",
          "charStart": 12260,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information."
        },
        {
          "charEnd": 13123,
          "heading": "Your Rights",
          "quality": "partial",
          "charStart": 12648,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] ."
        },
        {
          "charEnd": 13489,
          "heading": "Changes to This Policy",
          "quality": "partial",
          "charStart": 13123,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service."
        },
        {
          "charEnd": 3080,
          "heading": "retain account data",
          "quality": "partial",
          "charStart": 2919,
          "sourceUrl": "https://kling5.art/privacy-policy",
          "textExcerpt": "Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements."
        }
      ],
      "cookieDisclosurePresent": true,
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [
        "cookies",
        "analytics",
        "sale_or_share",
        "do_not_sell_or_share",
        "third_party_disclosures",
        "vendor_list",
        "data_retention",
        "controller_contact",
        "processing_purposes",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "ai_features",
        "contact_privacy"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://kling5.art/privacy-policy",
          "policyTitle": "Privacy Policy | Kling 5",
          "artifactRefs": [
            "policy_excerpt_5b72ff0e",
            "policy_surface_text_5b72ff0e"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_5b72ff0e",
          "discoveryMethod": "guessed_common_path",
          "documentHeading": "Introduction",
          "lastUpdatedText": null,
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "Kling 5",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": false
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "evidenceText": "Contact Us. If you have questions about this Privacy Policy, contact us at [email protected] .",
          "disclosureType": "controller_contact",
          "evidenceSource": "deterministic",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "supportingContactContext": null,
          "selectedPolicySectionExcerpt": "... Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies. Data Security We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information. Your Rights You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] . Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service. Contact Us If you have questions about this Privacy Policy, contact us at [email protected] .",
          "selectedPolicySectionHeading": "Policy text context"
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "matchedTerm": "named recipient or meaningful recipient category",
          "evidenceText": "Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "recipients_or_vendor_categories",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_recipients_or_vendor_categories",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms.",
          "selectedPolicySectionHeading": "Data Sharing",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "evidenceText": "Your Rights. You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] .",
          "disclosureType": "data_subject_rights",
          "evidenceSource": "deterministic",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "supportingContactContext": null,
          "selectedPolicySectionExcerpt": "... To comply with legal obligations or respond to lawful requests from public authorities. To protect our rights, property, or safety, or that of our users. Uploaded images, prompts, and generated videos may be processed by third-party AI and infrastructure vendors solely to fulfill your generation request and related product operations. Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies. Data Security We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information. Your Rights You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] . Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.",
          "selectedPolicySectionHeading": "Policy text context"
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "matchedTerm": "specific personal-data processing purpose",
          "evidenceText": "How We Use Your Information We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "How We Use Your Information We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations.",
          "selectedPolicySectionHeading": "How We Use Your Information",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.82,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "matchedTerm": "retain account data",
          "evidenceText": "Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "data_retention",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_retention",
            "match_strength_equivalent",
            "variant_requires_privacy_context"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies.",
          "selectedPolicySectionHeading": "Data Retention",
          "sourceCandidateProductionCredit": false
        }
      ],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://kling5.art/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.00024551927326295114,
          "policyTermCount": 12,
          "alphabeticWordRatio": 0.8336079077429983,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 32
        },
        "policyUrlRetained": true,
        "extractedTextLength": 4073,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "dedicatedCookiePolicyPresent": false,
      "policyTextEvidenceProjection": {
        "scanId": "355c9d2d-19e5-4c93-99c5-59c2943242ca",
        "documents": [
          {
            "finalUrl": "https://kling5.art/privacy-policy",
            "artifactId": "policy_surface_text_5b72ff0e",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/auxiliary/policy_surface_text_5b72ff0e.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://kling5.art/privacy-policy",
            "observationId": "policy_surface_5b72ff0e",
            "redirectChain": [
              "https://kling5.art/privacy-policy"
            ],
            "artifactSha256": "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded"
              ],
              "sourceTextChars": 4073,
              "retainedSectionCount": 10,
              "extractedSectionCount": 11,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_5b72ff0e.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 4087,
            "retainedTextChars": 4073,
            "documentFetchState": "fetched",
            "retainedTextSha256": "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Kling 5",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 4073,
              "retainedTextChars": 4073
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 83,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "0a60a8206d07ff9313a7064510fc380067202feea93a8ffb3b530132eeb48ea6",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "9379cde72f7d334e1ece7dc758615b2f98394bcba2c9ff1374ff3cf76ff15ad0",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "4c5da1ec25cc4fb0168de1583cb10be07029fb70fd17aac83516a47c76533a8b",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "f8b3f1bd149eeaabdd0b88f887f807dbbd972580a636da3a62e5619034853298",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-18T15:23:54.199Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/CanonicalEvidenceBundle.json",
          "sha256": "2c663616ff63b5a98952d06ec4f9ccc7f31da117b784872647a95f82234e70b4",
          "sizeBytes": 836759,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_usable",
      "legalFrameworkValidityMatches": [],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements",
        "Data transfers"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://kling5.art/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.00024551927326295114,
          "policyTermCount": 12,
          "alphabeticWordRatio": 0.8336079077429983,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 32
        },
        "policyUrlRetained": true,
        "extractedTextLength": 4073,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "Introduction",
        "Information We Collect",
        "How We Use Your Information",
        "Cookies",
        "Data Sharing",
        "Data Retention",
        "Data Security",
        "Your Rights",
        "Changes to This Policy",
        "retain account data"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://kling5.art/privacy-policy",
        "observationId": "policy_surface_5b72ff0e",
        "traversalDepth": 0,
        "parentSurfaceUrl": null,
        "parentObservationId": null,
        "selectionReasonCodes": []
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://kling5.art/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_5b72ff0e"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "355c9d2d-19e5-4c93-99c5-59c2943242ca",
        "documents": [
          {
            "finalUrl": "https://kling5.art/privacy-policy",
            "artifactId": "policy_surface_text_5b72ff0e",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/auxiliary/policy_surface_text_5b72ff0e.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://kling5.art/privacy-policy",
            "observationId": "policy_surface_5b72ff0e",
            "redirectChain": [
              "https://kling5.art/privacy-policy"
            ],
            "artifactSha256": "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded"
              ],
              "sourceTextChars": 4073,
              "retainedSectionCount": 10,
              "extractedSectionCount": 11,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_5b72ff0e.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 4087,
            "retainedTextChars": 4073,
            "documentFetchState": "fetched",
            "retainedTextSha256": "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Kling 5",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 4073,
              "retainedTextChars": 4073
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 83,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "0a60a8206d07ff9313a7064510fc380067202feea93a8ffb3b530132eeb48ea6",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "9379cde72f7d334e1ece7dc758615b2f98394bcba2c9ff1374ff3cf76ff15ad0",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "4c5da1ec25cc4fb0168de1583cb10be07029fb70fd17aac83516a47c76533a8b",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "dd13cde68d9fbbef1200269daae94b45e3cc65f9d9b59d43891d850b07da24c9",
                "evidenceSectionSha256": "f8b3f1bd149eeaabdd0b88f887f807dbbd972580a636da3a62e5619034853298",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-18T15:23:54.199Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/CanonicalEvidenceBundle.json",
          "sha256": "2c663616ff63b5a98952d06ec4f9ccc7f31da117b784872647a95f82234e70b4",
          "sizeBytes": 836759,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 4073,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [
        "controller_contact",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "processing_purposes",
        "data_retention"
      ],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Data Retention. We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements.",
          "selectedPolicySectionHeading": "Data Retention"
        },
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Your Rights. You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] .",
          "selectedPolicySectionHeading": "Your Rights"
        },
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Contact Us. If you have questions about this Privacy Policy, contact us at [email protected] .",
          "selectedPolicySectionHeading": "Contact Us"
        },
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "controller_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Contact Us. If you have questions about this Privacy Policy, contact us at [email protected] .",
          "selectedPolicySectionHeading": "Contact Us"
        },
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "How We Use Your Information. We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations. Send technical notices, security alerts, and support messages. Respond to your questions, feedback, and support requests at [email protected] . Detect, prevent, and address fraud, abuse, and policy violations.",
          "selectedPolicySectionHeading": "How We Use Your Information"
        },
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Data Sharing. databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms. To comply with legal obligations or respond to lawful requests from public authorities. To protect our rights, property, or safety, or that of our users. Uploaded images, prompts, and generated videos may be processed by third-party AI and infrastructure vendors solely to fulfill your generation request and related product operations.",
          "selectedPolicySectionHeading": "Data Sharing"
        },
        {
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
          "selectedPolicySectionExcerpt": "Data Sharing. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms.",
          "selectedPolicySectionHeading": "Data Sharing"
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "Introduction We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use Kling 5 at kling5.art — an AI video studio for text-to-video and image-to-video. Information We Collect We collect the following types of information to provide and improve the service: Account Information — Your name, email address, and other details you provide when creating an account or signing in (including via email magic link or supported social providers). Usage Data — Information about how you interact with the studio, including features used (for example text-to-video or image-to-video), generation frequency, plan or credit activity, and basic interaction patterns. Generation Inputs & Outputs — Prompts, optional reference or start images you upload, job metadata (status, duration, resolution, model settings), and generated video assets as needed to run the queue, show history, and deliver downloads. Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance. Cookies & Similar Technologies — Small data files or local storage keys used for session, preferences, locale, and product experience (see Cookies below). Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers. How We Use Your Information We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations. Send technical notices, security alerts, and support messages. Respond to your questions, feedback, and support requests at [email protected] . Detect, prevent, and address fraud, abuse, and policy violations. Cookies We may use cookies and similar technologies to keep you signed in, remember preferences (such as theme or locale), measure basic product reliability, and improve the site. You can control cookies through your browser settings; some features may not work fully if essential cookies are blocked. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms. To comply with legal obligations or respond to lawful requests from public authorities. To protect our rights, property, or safety, or that of our users. Uploaded images, prompts, and generated videos may be processed by third-party AI and infrastructure vendors solely to fulfill your generation request and related product operations. Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies. Data Security We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information. Your Rights You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] . Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service. Contact Us If you have questions about this Privacy Policy, contact us at [email protected] .",
      "validatedDisclosureTypesObserved": [
        "controller_contact",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "processing_purposes",
        "data_retention"
      ],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 1,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.7,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "evidenceText": "databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms. To comply with legal obligations or respond to lawful requests from public authorities. To protect our rights, property, or safety, or that of our users.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "legal_basis"
        },
        {
          "source": "deterministic",
          "confidence": 0.9,
          "surfaceUrl": "https://kling5.art/privacy-policy",
          "evidenceText": "data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "data_retention"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 3,
        "candidateDispositions": [
          {
            "topic": "data_retention",
            "confidence": 0.82,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_5b72ff0e"
          },
          {
            "topic": "recipients_or_vendor_categories",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_5b72ff0e"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_5b72ff0e"
          }
        ],
        "acceptedCandidateCount": 3,
        "rejectedCandidateCount": 0,
        "discardedCandidateCount": 0,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 3
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Legal basis disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the legal basis stated for each processing purpose; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00024551927326295114,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.8336079077429983,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 32
      },
      "policyUrlRetained": true,
      "extractedTextLength": 4073,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "legal_basis",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_5b72ff0e"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the legal basis stated for each processing purpose; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Retention disclosurePolicy text included matching disclosure evidence: "Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Data Retention.

Open policy source

Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies.

Matched disclosure snippet: Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for bi…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "Retention disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Retention disclosure",
      "Excerpt: Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies.",
      "Locale: en",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.82,
      "surfaceUrl": "https://kling5.art/privacy-policy",
      "evidenceText": "Data Retention We retain account data while your account is active and for a reasonable period afterward as needed for billing, security, and legal requirements. Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "data_retention",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_data_retention",
        "match_strength_equivalent",
        "variant_requires_privacy_context"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
      "selectedPolicySectionHeading": "Data Retention"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "Data Retention",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_retention",
      "originKey": "gdpr_transparency.article13.data_retention",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_retention",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Controller/contact disclosureNot confirmed by scan evidence; No production-approved topic match was established. A retained candidate was rejected by the canonical projection and remains available for audit; this result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

unprojected controller/contact disclosure candidate

Excerpt: ... Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies. Data Security We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information. Your Rights You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] . Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service. Contact Us If you have questions about this Privacy Policy, contact us at [email protected] .

Policy URL: https://kling5.art/privacy-policy

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. A retained candidate was rejected by the canonical projection and remains available for audit; this result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "evidenceRefs": [
      "Evidence: unprojected controller/contact disclosure candidate",
      "Excerpt: ... Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies. Data Security We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information. Your Rights You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] . Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service. Contact Us If you have questions about this Privacy Policy, contact us at [email protected] .",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "retainedCandidate": {
      "source": "deterministic",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://kling5.art/privacy-policy",
      "evidenceText": "Contact Us. If you have questions about this Privacy Policy, contact us at [email protected].",
      "disclosureType": "controller_contact",
      "evidenceSource": "deterministic",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://kling5.art/privacy-policy",
      "supportingContactContext": null,
      "selectedPolicySectionExcerpt": "... Generation inputs, job records, and media may be retained for a limited time to provide history, debugging, and abuse prevention, then deleted or anonymized according to our operational policies. Data Security We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information. Your Rights You have the right to access, update, export, or delete your personal information where applicable law provides those rights. You can do this through your account settings or by contacting us at [email protected] . Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service. Contact Us If you have questions about this Privacy Policy, contact us at [email protected] .",
      "selectedPolicySectionHeading": "Policy text context"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "retained_candidate_not_production_projectable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00024551927326295114,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.8336079077429983,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 32
      },
      "policyUrlRetained": true,
      "extractedTextLength": 4073,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "controller_contact",
      "status": "observed",
      "sourceUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "reasonCodes": [
        "row_specific_disclosure_observed"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_5b72ff0e"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Processing purposes disclosurePolicy text included matching disclosure evidence: "How We Use Your Information. We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

How We Use Your Information. We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations. Send technical notices, security ale

Matched disclosure snippet: How We Use Your Information. We use the data we collect to: Provide, maintain, and improve the AI video studio (generatio…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Processing purposes disclosure",
      "Excerpt: How We Use Your Information. We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations. Send technical notices, security ale",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.96,
      "surfaceUrl": "https://kling5.art/privacy-policy",
      "evidenceText": "How We Use Your Information. We use the data we collect to: Provide, maintain, and improve the AI video studio (generation, credits, subscriptions, history, and support). Process prompts and uploads through model providers and infrastructure needed to create your clips. Process transactions and send related confirmations. Send technical notices, security ale",
      "matchedLocale": null,
      "disclosureType": "processing_purposes",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "processing-purpose-disclosure",
        "verified_retained_topic_evidence",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://kling5.art/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "processing_purposes",
      "originKey": "gdpr_transparency.article13.processing_purposes",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Recipients/vendor categories disclosedPolicy text included matching disclosure evidence: "Data Sharing. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

Data Sharing. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms.

Matched disclosure snippet: Data Sharing. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Recipients/vendor categories disclosure",
      "Excerpt: Data Sharing. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms.",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.98,
      "surfaceUrl": "https://kling5.art/privacy-policy",
      "evidenceText": "Data Sharing. Data Sharing We do not sell your personal information. We may share data only in these limited cases: With service providers who help us operate the service (hosting, databases, email delivery, payment processors, AI model / inference providers, analytics if enabled), under appropriate confidentiality and data-processing terms.",
      "matchedLocale": null,
      "disclosureType": "recipients_or_vendor_categories",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "named-vendors-or-recipient-categories",
        "verified_retained_topic_evidence",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://kling5.art/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "recipients_or_vendor_categories",
      "originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Data subject rights disclosurePolicy text included matching disclosure evidence: "You have the right to access, update, export, or delete your personal information where applicable law provides those rights."Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

You have the right to access, update, export, or delete your personal information where applicable law provides those rights.

Matched disclosure snippet: You have the right to access, update, export, or delete your personal information where applicable law provides those rig…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "Data subject rights disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Data subject rights disclosure",
      "Excerpt: You have the right to access, update, export, or delete your personal information where applicable law provides those rights.",
      "Policy URL: https://kling5.art/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.97,
      "surfaceUrl": "https://kling5.art/privacy-policy",
      "evidenceText": "You have the right to access, update, export, or delete your personal information where applicable law provides those rights.",
      "matchedLocale": null,
      "disclosureType": "data_subject_rights",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "substantive-rights-signal",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://kling5.art/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_subject_rights",
      "originKey": "gdpr_transparency.article13.data_subject_rights",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_subject_rights",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

International transfer disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00024551927326295114,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.8336079077429983,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 32
      },
      "policyUrlRetained": true,
      "extractedTextLength": 4073,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "international_transfers",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_5b72ff0e"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

DPO contact point (where applicable)Not confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
        "Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00024551927326295114,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.8336079077429983,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 32
      },
      "policyUrlRetained": true,
      "extractedTextLength": 4073,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_5b72ff0e"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.
2Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.
3If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
4Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Supervisory authority complaintNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00024551927326295114,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.8336079077429983,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 32
      },
      "policyUrlRetained": true,
      "extractedTextLength": 4073,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "supervisory_authority",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_5b72ff0e"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Automated decision-making / profiling disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | Kling 5 — https://kling5.art/privacy-policy

Document heading: Introduction

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-18T15:23:40.982Z.

Section: Not retained.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Automated decision-making / profiling disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://kling5.art/privacy-policy",
      "policyTitle": "Privacy Policy | Kling 5",
      "artifactRefs": [
        "policy_excerpt_5b72ff0e",
        "policy_surface_text_5b72ff0e"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Introduction",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-18T15:23:40.982Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Kling 5",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00024551927326295114,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.8336079077429983,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 32
      },
      "policyUrlRetained": true,
      "extractedTextLength": 4073,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://kling5.art/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_5b72ff0e"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "5414df139381e137873ce8f4036d17e71f14db7044c30ef89ab432912dd43eab"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Storage & tracking techniques · Starting page

0 checks need review · 3 checks

Non-essential pre-consent cookies/storageNo eligible cookie or browser-storage write was observed before a recorded consent action.Not observed

JSON evidence

Aggregate pre-consent storage count: 0

Assessment reconciliation: reconciled

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Non-essential pre-consent cookies/storage",
  "evidenceState": "not_observed",
  "explanation": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
  "note": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "The retained pre-consent storage inventory was classified and did not contain eligible non-essential storage. Essential, consent-management, security, and functional storage remains contextual evidence only.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Aggregate pre-consent storage count: 0",
      "Assessment reconciliation: reconciled"
    ],
    "cookiesSeenCount": 0,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "cookiesBeforeConsentCount": 0,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "classified_zero",
      "evidenceRows": [],
      "provenWriteCount": 0,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 0,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 0,
      "aggregateObservedCount": 0,
      "classifiedEssentialCount": 0,
      "classifiedNonEssentialCount": 0,
      "attributedPreConsentRecordCount": 0,
      "excludedFunctionalOrConsentCount": 0
    },
    "preConsentStorageAssessmentStatus": "classified_zero",
    "rowLevelEssentialityEvidenceRetained": false,
    "preConsentStorageClassificationLimitation": false,
    "preconsentCookieOrStorageExactTimingRetained": false,
    "eligibleNonEssentialCookieStorageFindingProjected": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Session replay signalNo eligible session replay or behavioral-recording vendor was observed in retained runtime evidence.Not observed

JSON evidence

retained session replay / fingerprinting coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "session_replay_fingerprinting_review",
  "coverageArea": "Session replay signal",
  "evidenceState": "not_observed",
  "explanation": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "note": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
  },
  "statusBasis": "Runtime vendor/fingerprinting checks completed for the tested context, and no eligible replay or fingerprinting finding was projected.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: retained session replay / fingerprinting coverage summary"
    ],
    "sessionReplayCount": 0,
    "missingEvidenceNeeded": [],
    "sessionReplayObserved": false,
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "sessionReplayRuntimeCoverageRetained": true,
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Device identification / fingerprinting signalNo eligible device-identification or fingerprinting signal was observed in retained runtime evidence.Not observed

JSON evidence

retained fingerprinting/browser API coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "device_identification_fingerprinting_signal_observed",
  "coverageArea": "Device identification / fingerprinting signal",
  "evidenceState": "not_observed",
  "explanation": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "note": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.device_identification_fingerprinting_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.device_identification_fingerprinting_signal_observed"
  },
  "statusBasis": "Runtime fingerprinting/device-identification checks completed for the tested context and did not retain an eligible signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained fingerprinting/browser API coverage summary"
    ],
    "missingEvidenceNeeded": [],
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "runtimeEvidenceRetained": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Device identification / fingerprinting signal is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

GPC observation and comparison · Starting page

Observation complete

Bounded GPC observation completed. GPC was observed on the main-document request and browser property. The CMP's sale/sharing opt-out state was unavailable. No qualifying classified requests were observed in this bounded capture. Paired activity comparison: indeterminate.

Site response: Comparison incomplete. GPC signal delivery or its paired evidence was not fully verified. The baseline lane did not reach the required 250 ms quiet period within the existing capture cap, so no response conclusion was made.

Bounded observation: complete. 81 retained request attempts; 0 blocked before transmission. Scope: main document and retained HTTP requests.

CMP GPC signal: unknown. Visible acknowledgment: not observed in the supported search.

Sec-GPC: 1Main-document navigator.globalPrivacyControl: trueDelivery: limited · Coverage: limited81 retained request proofs

Paired comparison is unverified; missing evidence is not treated as suppressed activity.

Cookie/storage and CMP identity differences are descriptive snapshots. The response uses classified activity within the matched window, not an inferred consent decision.

Typed comparison evidence

{
  "assessment": {
    "contractVersion": "certscore.gpc-response-assessment.v3",
    "generatedAt": "2026-09-18T15:23:54.002Z",
    "status": "indeterminate",
    "findingTitle": "GPC response",
    "scoreEffect": "none",
    "legalInterpretation": "not_assessed",
    "comparison": {
      "comparable": false,
      "protocol": "passive_baseline_with_sec_gpc",
      "baselineArtifact": {
        "lane": "runtime_evidence",
        "sha256": "222cfc64d9d4d4ba38bf4b4bcb1acb11c55e9bc4c06a4a89bc51a99cde83a62c",
        "sizeBytes": 496632,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      },
      "gpcArtifact": {
        "lane": "gpc_observation",
        "sha256": "f319803dfb2e711ae1d24e7656891c99e98e9ab4cb273e5bc43e2b6dbc90d568",
        "sizeBytes": 510690,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/lanes/gpc_observation/CanonicalEvidenceBundle.json"
      },
      "enabledProof": {
        "secGpcHeaderValue": "1",
        "requestsWithSecGpc": 81,
        "requestEventIds": [
          "net_101",
          "net_103",
          "net_105",
          "net_107",
          "net_109",
          "net_11",
          "net_115",
          "net_117",
          "net_13",
          "net_15",
          "net_165",
          "net_167",
          "net_169",
          "net_17",
          "net_174",
          "net_178",
          "net_185",
          "net_187",
          "net_189",
          "net_19",
          "net_191",
          "net_193",
          "net_195",
          "net_197",
          "net_199",
          "net_2",
          "net_201",
          "net_203",
          "net_205",
          "net_207",
          "net_209",
          "net_21",
          "net_211",
          "net_214",
          "net_216",
          "net_23",
          "net_232",
          "net_235",
          "net_237",
          "net_239",
          "net_25",
          "net_27",
          "net_29",
          "net_31",
          "net_33",
          "net_35",
          "net_37",
          "net_39",
          "net_41",
          "net_43",
          "net_45",
          "net_47",
          "net_49",
          "net_5",
          "net_51",
          "net_53",
          "net_55",
          "net_57",
          "net_59",
          "net_61",
          "net_63",
          "net_65",
          "net_67",
          "net_69",
          "net_7",
          "net_71",
          "net_73",
          "net_75",
          "net_77",
          "net_79",
          "net_81",
          "net_83",
          "net_85",
          "net_87",
          "net_89",
          "net_9",
          "net_91",
          "net_93",
          "net_95",
          "net_97",
          "net_99"
        ],
        "navigatorGlobalPrivacyControl": true
      },
      "delivery": {
        "status": "limited",
        "baseline": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": false,
          "documentUrlSha256": "c2b7e4aad20b483228653fc6689ef9efd68ee228da36216671b6a4f1bb869642",
          "contextConfigSha256": "2c01f9f29c0e012648bf492ecade8fa330858be6cd066f749be47e8cad0c572e",
          "capturedAtMs": 4333,
          "documentStartedAtMs": 1610,
          "frameCount": 1,
          "frames": [
            {
              "documentUrlSha256": "c2b7e4aad20b483228653fc6689ef9efd68ee228da36216671b6a4f1bb869642",
              "mainFrame": true,
              "navigatorValue": false
            }
          ],
          "workerCount": 1,
          "limitationKeys": [
            "worker_navigator_delivery_unverified"
          ]
        },
        "gpc": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": true,
          "documentUrlSha256": "c2b7e4aad20b483228653fc6689ef9efd68ee228da36216671b6a4f1bb869642",
          "contextConfigSha256": "2c01f9f29c0e012648bf492ecade8fa330858be6cd066f749be47e8cad0c572e",
          "prototypeCaptureBinding": {
            "captureId": "7111ba40-b106-4516-bd30-591faa7ff13f",
            "documentIdentitySource": "cdp_loader_id",
            "documentToken": "EC3986B6B9E679F5636DF0E9184AE98C"
          },
          "prototypeSessionSha256": "b248906664cbcb310792b78921268d8e72c303b184af10f3af91adff4916a898",
          "capturedAtMs": 6882,
          "documentStartedAtMs": 4419,
          "frameCount": 1,
          "frames": [
            {
              "documentUrlSha256": "c2b7e4aad20b483228653fc6689ef9efd68ee228da36216671b6a4f1bb869642",
              "mainFrame": true,
              "navigatorValue": true
            }
          ],
          "workerCount": 1,
          "limitationKeys": [
            "worker_navigator_delivery_unverified"
          ]
        }
      },
      "coverage": {
        "status": "limited",
        "comparedThroughMs": 2463
      },
      "responseBasis": "insufficient_evidence",
      "deltas": {
        "cookies": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "webStorage": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "trackers": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "advertisingOrMeasurementActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "advertisingOrMarketingActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "consentOrCmpBehavior": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        }
      },
      "evidenceRefs": [
        "net_11",
        "net_13",
        "net_15",
        "net_17",
        "net_19",
        "net_2",
        "net_21",
        "net_23",
        "net_25",
        "net_27",
        "net_29",
        "net_31",
        "net_33",
        "net_35",
        "net_37",
        "net_39",
        "net_41",
        "net_43",
        "net_45",
        "net_47",
        "net_49",
        "net_5",
        "net_51",
        "net_53",
        "net_55",
        "net_57",
        "net_59",
        "net_61",
        "net_7",
        "net_9",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/lanes/gpc_observation/CanonicalEvidenceBundle.json",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      ],
      "limitationKeys": [
        "baseline_signal_readback_unverified",
        "gpc_signal_readback_unverified",
        "baseline_settle_not_completed"
      ]
    },
    "observation": {
      "contractVersion": "certscore.gpc-bounded-observation.v1",
      "scope": "main_document_and_retained_http_requests",
      "status": "complete",
      "sourceSha256": "f319803dfb2e711ae1d24e7656891c99e98e9ab4cb273e5bc43e2b6dbc90d568",
      "sessionSha256": "b248906664cbcb310792b78921268d8e72c303b184af10f3af91adff4916a898",
      "documentUrlSha256": "c2b7e4aad20b483228653fc6689ef9efd68ee228da36216671b6a4f1bb869642",
      "delivery": {
        "httpHeaderRetained": true,
        "mainNavigatorReadbackRetained": true,
        "fullContextVerified": false
      },
      "semanticProbe": "unavailable",
      "registration": {
        "basis": "current_recorded_state",
        "sale": "unknown",
        "sharing": "unknown",
        "cmpGpcSignal": "unknown",
        "causedByGpc": "not_established"
      },
      "acknowledgment": {
        "observed": false,
        "captureComplete": true
      },
      "requests": {
        "count": 81,
        "blockedBeforeTransmissionCount": 0,
        "complete": true,
        "fromMs": 4347,
        "documentCommittedAtMs": 4510,
        "throughMs": 6941,
        "classifiedCount": 0,
        "collectionCount": 0,
        "evidenceIds": [],
        "samplesTruncated": false
      },
      "limitationKeys": [],
      "scoreEffect": "none",
      "legalInterpretation": "not_assessed"
    }
  },
  "californiaPolicy": {
    "deductionPoints": 0,
    "framework": "california"
  },
  "evidenceRefs": [
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/lanes/runtime_evidence/CanonicalEvidenceBundle.json",
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/355c9d2d-19e5-4c93-99c5-59c2943242ca/lanes/gpc_observation/CanonicalEvidenceBundle.json",
    "net_11",
    "net_13",
    "net_15",
    "net_17",
    "net_19",
    "net_2",
    "net_21",
    "net_23",
    "net_25",
    "net_27",
    "net_29",
    "net_31",
    "net_33",
    "net_35",
    "net_37",
    "net_39",
    "net_41",
    "net_43",
    "net_45",
    "net_47",
    "net_49",
    "net_5",
    "net_51",
    "net_53",
    "net_55",
    "net_57",
    "net_59",
    "net_61",
    "net_7",
    "net_9"
  ]
}

Transport security · Starting page

5 positive · 5 checks

HTTPS delivery for scanned pagesObserved in scan evidence; The scanned page was served over HTTPS in the retained transport observation.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_https_delivery",
  "coverageArea": "HTTPS delivery for scanned pages",
  "evidenceState": "observed",
  "explanation": "Whether the retained scanned page was served over HTTPS.",
  "note": "Whether the retained scanned page was served over HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_https_delivery.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_https_delivery"
  },
  "statusBasis": "The scanned page was served over HTTPS in the retained transport observation.",
  "retainedEvidence": {
    "finalUrl": "https://kling5.art/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://kling5.art/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://kling5.art/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://kling5.art/",
      "https://kling5.art/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=kling5.art",
        "validTo": "Dec  9 13:59:34 2026 GMT",
        "inputUrl": "https://kling5.art/",
        "validFrom": "Sep 10 12:59:37 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

HTTPS delivery for scanned pages is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Valid SSL/TLS certificateObserved in scan evidence; Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://kling5.art/ presented CN=kling5.art certificate valid Sep 10–Dec 9, 2026.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_tls_certificate",
  "coverageArea": "Valid SSL/TLS certificate",
  "evidenceState": "observed",
  "explanation": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "note": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_tls_certificate.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_tls_certificate"
  },
  "statusBasis": "Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://kling5.art/ presented CN=kling5.art certificate valid Sep 10–Dec 9, 2026.",
  "retainedEvidence": {
    "finalUrl": "https://kling5.art/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://kling5.art/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://kling5.art/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://kling5.art/",
      "https://kling5.art/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=kling5.art",
        "validTo": "Dec  9 13:59:34 2026 GMT",
        "inputUrl": "https://kling5.art/",
        "validFrom": "Sep 10 12:59:37 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Valid SSL/TLS certificate is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

HTTP redirects to HTTPSObserved in scan evidence; The explicit HTTP-origin probe redirected to HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_http_redirect",
  "coverageArea": "HTTP redirects to HTTPS",
  "evidenceState": "observed",
  "explanation": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "note": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_http_redirect.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_http_redirect"
  },
  "statusBasis": "The explicit HTTP-origin probe redirected to HTTPS.",
  "retainedEvidence": {
    "finalUrl": "https://kling5.art/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://kling5.art/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://kling5.art/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://kling5.art/",
      "https://kling5.art/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=kling5.art",
        "validTo": "Dec  9 13:59:34 2026 GMT",
        "inputUrl": "https://kling5.art/",
        "validFrom": "Sep 10 12:59:37 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

HTTP redirects to HTTPS is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Mixed contentObserved in scan evidence; No mixed-content HTTP subresources were retained for the scanned HTTPS page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_mixed_content",
  "coverageArea": "Mixed content",
  "evidenceState": "observed",
  "explanation": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "note": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_mixed_content.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_mixed_content"
  },
  "statusBasis": "No mixed-content HTTP subresources were retained for the scanned HTTPS page.",
  "retainedEvidence": {
    "finalUrl": "https://kling5.art/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://kling5.art/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://kling5.art/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://kling5.art/",
      "https://kling5.art/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=kling5.art",
        "validTo": "Dec  9 13:59:34 2026 GMT",
        "inputUrl": "https://kling5.art/",
        "validFrom": "Sep 10 12:59:37 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Mixed content is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Observed form transportObserved in scan evidence; No insecure observed form transport was retained for the scanned page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_form_transport",
  "coverageArea": "Observed form transport",
  "evidenceState": "observed",
  "explanation": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "note": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_form_transport.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_form_transport"
  },
  "statusBasis": "No insecure observed form transport was retained for the scanned page.",
  "retainedEvidence": {
    "finalUrl": "https://kling5.art/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://kling5.art/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://kling5.art/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://kling5.art/",
      "https://kling5.art/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=kling5.art",
        "validTo": "Dec  9 13:59:34 2026 GMT",
        "inputUrl": "https://kling5.art/",
        "validFrom": "Sep 10 12:59:37 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Observed form transport is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Loading report

Executive overview

Single page assessment

Top issues on this page

Page event timeline

Services & Resources

Type mix

Evidence mix

Purpose mix

Site relationship

Policy disclosure · Not found

Forms & fields

generic form 1

Detailed evidence

Controls and CMP context

0 checks need review · 4 checks

5 observed · 11 checks

0 checks need review · 3 checks

Observation complete

5 positive · 5 checks