---
title: "Answers for Apple App Privacy and Google Play Data safety"
method: GET
path: "/sites/{id}/privacy-answers"
tags: ["Sites"]
---

# Answers for Apple App Privacy and Google Play Data safety

`GET /sites/{id}/privacy-answers`

## Request

- Base URL: `https://api.hypamoon.com/api/v1`
- URL: `https://api.hypamoon.com/api/v1/sites/{id}/privacy-answers`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://app.hypamoon.com/oauth/authorize`, token URL `https://api.hypamoon.com/oauth/token`, scopes: `sites:read`)

Derives the answers for App Privacy (Apple) and Data safety (Google) from what the site and the project actually use on Hypamoon: forms and their fields, the chat widget, the bot check, payments and paid access, push registration, sign-in forms, location and third-party scripts on the site. Each answer has its reason and source. Cautious by design: when in doubt, a data type is declared as collected. Includes a click-by-click list for each console, because only the user can fill in both forms there.

## Path parameters

- `id` string, uuid, required

## Response `200`

The answers per store, with reasons and console steps.

- object
  - `site` object, required
    - `id` string, required
    - `name` string, required
    - `app_url` string, required
  - `sources` string[], required: The rails and scripts the answers come from: forms, chat_widget, bot_check, payments, paid_access, push, sign_in, location, third_party:<name>.
  - `apple` object, required
    - `data_collected` boolean, required
    - `used_for_tracking` boolean, required
    - `data_types` object[], required
      - `category` string, required
      - `type` string, required
      - `linked_to_user` boolean, required
      - `used_for_tracking` boolean, required
      - `purposes` string[], required
      - `reason` string, required
      - `source` string, required
    - `console_steps` string[], required
  - `google_play` object, required
    - `collects_or_shares` boolean, required
    - `encrypted_in_transit` boolean, required
    - `deletion` string, required
    - `data_types` object[], required
      - `category` string, required
      - `type` string, required
      - `collected` true, required
      - `shared` boolean, required
      - `processed_ephemerally` boolean, required
      - `required` boolean, required
      - `purposes` string[], required
      - `reason` string, required
      - `source` string, required
    - `console_steps` string[], required
  - `not_collected` object[], required
    - `what` string, required
    - `reason` string, required
  - `notes` string[], required

## Other responses

- `401`: Unauthorized: unauthorized, missing_api_key, invalid_api_key, api_key_revoked, project_deleted.
- `403`: Forbidden: project_not_enabled, key_mode_mismatch, missing_scope, verification_required.
- `404`: Not Found: not_found.
- `429`: Too Many Requests: rate_limited.
- `500`: Internal Server Error: internal_error.
- `503`: Service Unavailable: service_unavailable.

---

[API](https://skmtc.dev/hypamoon/apis/hypamoon-api.md) · [All operations](https://skmtc.dev/hypamoon/apis/hypamoon-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hypamoon/apis/hypamoon-api/revisions/9f0b90004c06?raw)