{
  "study_date": "2026-10-14",
  "timezone": "Africa/Nairobi",
  "scope": "Ten-route pilot and a narrow positive-evidence case study. Not the planned 40-company prevalence study.",
  "countries_compared": false,
  "companies_attempted": 10,
  "companies_with_field_entry": 6,
  "distinct_field_entry_rounds": 17,
  "included_rounds": 13,
  "excluded_exploratory_rounds": 4,
  "positive_company_ids": [
    "dealroom"
  ],
  "confirmed_positive_request_count": 4,
  "negative_certification_permitted": false,
  "observations": [
    {
      "company_id": "adobe",
      "round": "r1",
      "started_at_utc": "2026-10-14T11:07:05.679Z",
      "field_started_at_utc": "2026-10-14T11:07:05.787Z",
      "filled_at_utc": "2026-10-14T11:07:06.261Z",
      "finished_at_utc": "2026-10-14T11:08:06.282Z",
      "observation_seconds": 60.021,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "cvent",
      "round": "r1",
      "started_at_utc": "2026-10-14T11:06:11.289Z",
      "field_started_at_utc": "2026-10-14T11:06:11.391Z",
      "filled_at_utc": "2026-10-14T11:06:33.274Z",
      "finished_at_utc": "2026-10-14T11:07:56.661Z",
      "observation_seconds": 83.387,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "cvent",
      "round": "r2",
      "started_at_utc": "2026-10-14T11:12:11.961Z",
      "field_started_at_utc": "2026-10-14T11:12:12.062Z",
      "filled_at_utc": "2026-10-14T11:12:12.404Z",
      "finished_at_utc": "2026-10-14T11:13:51.731Z",
      "observation_seconds": 99.327,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "dealroom",
      "round": "r1",
      "started_at_utc": "2026-10-14T11:08:07.278Z",
      "field_started_at_utc": "2026-10-14T11:08:07.374Z",
      "filled_at_utc": "2026-10-14T11:08:08.065Z",
      "finished_at_utc": "2026-10-14T11:09:21.019Z",
      "observation_seconds": 72.954,
      "field_phase_requests_observed": 3,
      "marker_positive_requests": 1,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "Observed synthetic email transmission"
    },
    {
      "company_id": "dealroom",
      "round": "r2",
      "started_at_utc": "2026-10-14T11:12:49.645Z",
      "field_started_at_utc": "2026-10-14T11:12:49.742Z",
      "filled_at_utc": "2026-10-14T11:12:50.223Z",
      "finished_at_utc": "2026-10-14T11:13:52.693Z",
      "observation_seconds": 62.47,
      "field_phase_requests_observed": 2,
      "marker_positive_requests": 1,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "Observed synthetic email transmission"
    },
    {
      "company_id": "dealroom",
      "round": "r3",
      "started_at_utc": "2026-10-14T11:15:11.223Z",
      "field_started_at_utc": "2026-10-14T11:15:11.378Z",
      "filled_at_utc": "2026-10-14T11:15:12.262Z",
      "finished_at_utc": "2026-10-14T11:17:16.304Z",
      "observation_seconds": 124.042,
      "field_phase_requests_observed": 3,
      "marker_positive_requests": 1,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Reject clicked on analytics-cookie notice",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "Observed synthetic email transmission"
    },
    {
      "company_id": "dealroom",
      "round": "r4-new-document",
      "started_at_utc": "2026-10-14T11:20:04.892Z",
      "field_started_at_utc": "2026-10-14T11:20:05.021Z",
      "filled_at_utc": "2026-10-14T11:20:05.895Z",
      "finished_at_utc": "2026-10-14T11:21:36.387Z",
      "observation_seconds": 90.492,
      "field_phase_requests_observed": 3,
      "marker_positive_requests": 1,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "New document, shared profile, previous rejection; no cookie notice visible",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "Observed synthetic email transmission"
    },
    {
      "company_id": "plaid",
      "round": "r1",
      "started_at_utc": "2026-10-14T11:03:44.441Z",
      "field_started_at_utc": "2026-10-14T11:04:25.562Z",
      "filled_at_utc": "2026-10-14T11:04:57.045Z",
      "finished_at_utc": "2026-10-14T11:05:28.409Z",
      "observation_seconds": 31.364,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": false,
      "exclusion_reasons": [
        "truncated_capture",
        "under_60_seconds"
      ],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "plaid",
      "round": "r2",
      "started_at_utc": "2026-10-14T11:06:36.404Z",
      "field_started_at_utc": "2026-10-14T11:06:36.507Z",
      "filled_at_utc": "2026-10-14T11:06:36.760Z",
      "finished_at_utc": "2026-10-14T11:07:57.740Z",
      "observation_seconds": 80.98,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "plaid",
      "round": "r3",
      "started_at_utc": "2026-10-14T11:12:08.366Z",
      "field_started_at_utc": "2026-10-14T11:12:08.482Z",
      "filled_at_utc": "2026-10-14T11:12:09.185Z",
      "finished_at_utc": "2026-10-14T11:13:50.563Z",
      "observation_seconds": 101.378,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "plaid",
      "round": "r4",
      "started_at_utc": "2026-10-14T11:16:16.886Z",
      "field_started_at_utc": "2026-10-14T11:16:16.993Z",
      "filled_at_utc": "2026-10-14T11:16:17.717Z",
      "finished_at_utc": "2026-10-14T11:18:10.244Z",
      "observation_seconds": 112.527,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Functional and advertising No saved; consent reload completed before capture",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "secretshopper",
      "round": "r1",
      "started_at_utc": "2026-10-14T11:06:09.727Z",
      "field_started_at_utc": "2026-10-14T11:06:09.946Z",
      "filled_at_utc": "2026-10-14T11:06:10.472Z",
      "finished_at_utc": "2026-10-14T11:07:22.171Z",
      "observation_seconds": 71.699,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "secretshopper",
      "round": "r2",
      "started_at_utc": "2026-10-14T11:12:48.203Z",
      "field_started_at_utc": "2026-10-14T11:12:48.305Z",
      "filled_at_utc": "2026-10-14T11:12:48.619Z",
      "finished_at_utc": "2026-10-14T11:13:52.183Z",
      "observation_seconds": 63.564,
      "field_phase_requests_observed": 0,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "sgs",
      "round": "r1",
      "started_at_utc": "2026-10-14T11:05:03.977Z",
      "field_started_at_utc": "2026-10-14T11:05:10.059Z",
      "filled_at_utc": "2026-10-14T11:05:26.406Z",
      "finished_at_utc": "2026-10-14T11:06:33.665Z",
      "observation_seconds": 67.259,
      "field_phase_requests_observed": 21,
      "marker_positive_requests": 0,
      "included_case_observation": false,
      "exclusion_reasons": [
        "cookie_modal_present_during_field_entry"
      ],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "sgs",
      "round": "r2",
      "started_at_utc": "2026-10-14T11:06:34.753Z",
      "field_started_at_utc": "2026-10-14T11:06:34.857Z",
      "filled_at_utc": "2026-10-14T11:06:35.342Z",
      "finished_at_utc": "2026-10-14T11:07:57.204Z",
      "observation_seconds": 81.862,
      "field_phase_requests_observed": 3,
      "marker_positive_requests": 0,
      "included_case_observation": false,
      "exclusion_reasons": [
        "cookie_modal_present_during_field_entry"
      ],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "sgs",
      "round": "r3",
      "started_at_utc": "2026-10-14T11:12:10.359Z",
      "field_started_at_utc": "2026-10-14T11:12:10.461Z",
      "filled_at_utc": "2026-10-14T11:12:10.896Z",
      "finished_at_utc": "2026-10-14T11:13:51.074Z",
      "observation_seconds": 100.178,
      "field_phase_requests_observed": 2,
      "marker_positive_requests": 0,
      "included_case_observation": false,
      "exclusion_reasons": [
        "cookie_modal_present_during_field_entry"
      ],
      "condition": "Observed state; no cookie choice submitted in this round",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    },
    {
      "company_id": "sgs",
      "round": "r4",
      "started_at_utc": "2026-10-14T11:14:53.991Z",
      "field_started_at_utc": "2026-10-14T11:14:54.078Z",
      "filled_at_utc": "2026-10-14T11:14:55.643Z",
      "finished_at_utc": "2026-10-14T11:17:15.636Z",
      "observation_seconds": 139.993,
      "field_phase_requests_observed": 6,
      "marker_positive_requests": 0,
      "included_case_observation": true,
      "exclusion_reasons": [],
      "condition": "Reject All clicked; dialog disappearance verified",
      "session": "shared built-in browser; no fresh visitor claim",
      "outcome": "No marker detected in available stream; privacy outcome indeterminate"
    }
  ],
  "sample": [
    {
      "id": "plaid",
      "company": "Plaid",
      "sector": "Financial technology",
      "url": "https://my.plaid.com/data-subject-request-form",
      "disposition": "entered",
      "note": "Public identity fields; deletion option inspected. Required phone and bank details left incomplete."
    },
    {
      "id": "cisco",
      "company": "Cisco",
      "sector": "Technology",
      "url": "https://privacyrequest.cisco.com/",
      "disposition": "not_measured",
      "note": "Public form in privacy-central.securiti.ai iframe. Cross-site child-target coverage not validated; no synthetic fields entered."
    },
    {
      "id": "dealroom",
      "company": "Dealroom",
      "sector": "Business information",
      "url": "https://dealroom.co/privacy-request-form",
      "disposition": "entered",
      "note": "Initial automatic security verification resolved without interaction. HubSpot form; required LinkedIn field left blank."
    },
    {
      "id": "sgs",
      "company": "SGS",
      "sector": "Testing and inspection",
      "url": "https://www.sgs.com/en/online-privacy-statement/privacy-request-form",
      "disposition": "entered",
      "note": "Early overlay-present runs exploratory only. Final run follows explicit Reject All. Required identity/consent fields left incomplete."
    },
    {
      "id": "cvent",
      "company": "Cvent",
      "sector": "Events technology",
      "url": "https://support.cvent.com/privacyrequest",
      "disposition": "entered",
      "note": "Controller-oriented privacy form. Synthetic requester name/email entered; data-subject fields and authorization declaration left incomplete."
    },
    {
      "id": "walmart",
      "company": "Walmart",
      "sector": "Retail",
      "url": "https://www.walmart.com/privacyrequest",
      "disposition": "not_measured",
      "note": "Displayed residence choices Canada, Mexico and United States. Did not assert a false supported residency to proceed."
    },
    {
      "id": "expedia",
      "company": "Expedia",
      "sector": "Travel",
      "url": "https://www.expedia.com.sg/helpcenter/?product=Privacy&productId=privacy2&articleId=22929",
      "disposition": "not_measured",
      "note": "Selected Singapore help page returned a human/bot challenge. No challenge solved; no fields entered."
    },
    {
      "id": "spotify",
      "company": "Spotify",
      "sector": "Entertainment",
      "url": "https://support.spotify.com/us/article/how-can-i-close-my-spotify-account/",
      "disposition": "not_measured",
      "note": "Official closure link led to an account login page. No credentials or synthetic identifiers entered into login."
    },
    {
      "id": "adobe",
      "company": "Adobe",
      "sector": "Software",
      "url": "https://survey.adobe.com/jfe/form/SV_4ZtmRXB3s9kLfca",
      "disposition": "entered",
      "note": "Generic privacy-question route, first identity step, with Qualtrics branding. Did not press Send validation code or test later request steps."
    },
    {
      "id": "secretshopper",
      "company": "Secret Shopper",
      "sector": "Consumer research",
      "url": "https://www.secretshopper.com/info/data-privacy-request-form/",
      "disposition": "entered",
      "note": "Public form; deletion option selected in repeat. Proof-of-identity fields and CAPTCHA left incomplete."
    }
  ],
  "limitations": [
    "Workers and departure beacons received by local fixture server were absent from captured stream.",
    "Cross-origin same-site iframe passed; cross-site out-of-process iframe coverage unvalidated.",
    "No isolated browser contexts; same-session repeats and observed consent state only.",
    "No geography comparison, no authenticated flows, no complete form submissions.",
    "Synthetic reserved-domain emails may trigger validation differently from real customer addresses.",
    "No claims about retention, advertising use, data sale, legality or deletion outcomes."
  ]
}