This is the Inth we always wanted.

Inth now checks your codebase, website and every PR, then helps you fix privacy risks before they become blocked deals or expensive problems.

Run a free privacy scan: inth.com

Go break it.

Privacy enforcement this week, from the Inth enforcement library:

36 state attorneys general settled with GM for USD 220 million. They alleged GM sold Smart Driver driving data to brokers who sold it to insurers. GM admits no violation.

The update:
inth.com/blog/enforceme…

California's attorney general announced a USD 1.8M settlement with Lyft over alleged CCPA violations. Its ads ran in the app, but the opt-out sat on a web page behind privacy policy links and a second login.

The settlement requires an in-app opt-out.

Also this week: classes certified in In re Meta Pixel Healthcare, and McKie v. Huel dismissed for lack of standing, even though the court found the opt-out banner created a plausible expectation of privacy.

Every case, with its sources: inth.com/enforcement

The IAB TCF 2.4 web deadline passed on October 23 with no extension.

c15t supports it from 2.3.0 and in every 3.x release, including 3.2.0. You can upgrade without asking users to consent again.

Next up: February 23, 2027 for apps and connected TV.

inth.com/blog/iab-tcf-2…

c15t 3.2 is out, allowed scripts now start before hydration, there's a shadcn registry for the banner, 53 languages and 29 new consent-gated integrations

inth.com/blog/c15t-3-2

Inth has completed its SOC 2 Type 2 audit, covering security, availability and confidentiality, and customers and teams in diligence can request the report under NDA

inth.com/blog/soc-2-typ…

The Inth enforcement library is open.

123 privacy enforcement case records, each with its procedural stage, its source and checks you can run on your own code and site.

Regulatory fines in the library total over $4bn at 20 October 2026 ECB rates.

inth.com/blog/enforceme…

3.1 gives you useEventDispatcher() to send events across your supported, configured analytics integrations, with consent checks built in @c15tdev

inth.com/blog/c15t-3-1

PostHog. Google Analytics. Databuddy, One event call.

@c15tdev 3.1 gives you useEventDispatcher() to send events across your supported, configured analytics integrations, with consent checks built in.

inth.com/blog/c15t-3-1

A customer thought the new c15t.com had two cookie banners.

Apparently our demo was a little too convincing.

So we gave it a badge.

This was a big launch for @c15tdev, We cant wait to hear the feedback!

inth.com/blog/c15t-v3

Introducing c15t v3

The open standard for cookie banners

✦ Set up c15t in my app: c15t.com/SKILL.md

→ Open source
→ 8 frameworks and a script tag
→ Banner in the server HTML
→ 34 policy presets, GPC and GPP built in

The first feedback on the Inth CLI: let me install it without npm. Now you can:

curl -fsSL inth.com/cli/install.sh | sh

And "inth update" keeps it current.

You publish a privacy policy and then hope prod and runtime match it going forward.

but when engineers & marketers change product and the site everyday, they go unnoticed unless it's declared, or found out by an angry user.

Inth's audits now catch every risk before it goes live

This week I shipped a CLI for @Inth. Written in Typescript, compiled with Scriptc by Vercel Labs. It has 0 dependency on the Node runtime making it both smaller and faster than Rust, Go or Node-based CLIs.

Hopefully agents will enjoy the speed!

Are you one privacy mistake away from a $10,000 CIPA demand letter?