Chase gets an A. Here's what loads before you agree
Checked October 25, 2026 in a US browser, with no choice made on any banner.
chase.com
94/100
- Online since 1995, 31 years
- No consent banner seen
- Built with Next.js
What cost it points
- low
Your browser may guess file types attackers can abuse.
- low
Headings don't outline the page.
- low
No published way to report a security hole.
- low
Full page addresses can leak to third parties.
- low
"Learn more" links don't say where they go.
What loaded before you chose
Third-party trackers that fired before any choice, across 2 visits.
- Ad trackers
- None
- Analytics
- None
- Cookies before a choice
- 1
- Session recording
- None
- Consent banner
- None
- Opt-out link
- Yes
The fine print
- Terms of use
- 15 min read (opens in a new tab) · 3,496 words
- Privacy policy
- 15 min read (opens in a new tab) · 3,527 words
- Forced arbitration
- Not found
- Class-action waiver
- Not found
- AI in the privacy policy
- None
- Accessibility statement
- Yes
Read automatically, so unusual wording can be missed. Not scored.
Security
- HTTPS
- Yes
- HSTS
- Yes
- Content-Security-Policy
- Yes
- Framing blocked
- Yes
- Secret keys in code
- None
- security.txt
- No
Not an audit or legal advice. Run chase.com? Tell us what changed. How we grade
Banking and payments
Get your own site to an A
14-day free trial · card needed to start, cancel before day 14 and you pay nothing