How to Build a Privacy Tools with Replit

1// Paste this into Replit Agent to scaffold the privacy tools app
2// Build a GDPR/CCPA privacy compliance toolkit with Express and PostgreSQL using Drizzle ORM.
3//
4// Create these tables:
5// 1. consent_records: id serial primary key, user_id text, session_id text, ip_address text,
6//    consent_type text (enum: analytics/marketing/functional/all), granted boolean not null,
7//    source text (enum: banner/settings/signup), created_at timestamp default now()
8// 2. data_export_requests: id serial primary key, user_id text not null, status text default 'pending'
9//    (enum: pending/processing/ready/expired/failed), file_url text, requested_at timestamp default now(),
10//    completed_at timestamp, expires_at timestamp
11// 3. deletion_requests: id serial primary key, user_id text not null, status text default 'pending'
12//    (enum: pending/confirmed/processing/completed), reason text, confirmation_token text unique,
13//    confirmed_at timestamp, completed_at timestamp, requested_at timestamp default now()
14// 4. privacy_policies: id serial primary key, version text unique not null, content text (markdown),
15//    effective_date date not null, is_current boolean default false, created_at timestamp default now()
16// 5. policy_acceptances: id serial primary key, user_id text not null, policy_version text not null,
17//    accepted_at timestamp default now(), unique(user_id, policy_version)
18//
19// Add Express routes:
20// POST /api/consent, GET /api/consent/:userId
21// POST /api/data-export/request, GET /api/data-export/:id/status, GET /api/data-export/:id/download
22// POST /api/deletion/request, POST /api/deletion/confirm/:token
23// GET /api/privacy-policy, POST /api/privacy-policy/accept
24// GET /api/admin/consent-stats, GET /api/admin/deletion-requests
25//
26// Use Replit Auth for user identity. Bind server to 0.0.0.0 port 3000.

1const express = require('express');
2const { db } = require('../db');
3const { consentRecords } = require('../schema');
4const { eq, desc } = require('drizzle-orm');
5
6const router = express.Router();
7
8// Record a new consent choice
9router.post('/api/consent', express.json(), async (req, res) => {
10  const { consentType, granted, source } = req.body;
11  const userId = req.user?.id || null;
12  const sessionId = req.session?.id || null;
13
14  if (!['analytics', 'marketing', 'functional', 'all'].includes(consentType)) {
15    return res.status(400).json({ error: 'Invalid consent_type' });
16  }
17
18  try {
19    const record = await db.insert(consentRecords).values({
20      userId,
21      sessionId,
22      ipAddress: req.ip,
23      consentType,
24      granted: Boolean(granted),
25      source: source || 'banner',
26    }).returning();
27
28    return res.json({ recorded: true, id: record[0].id });
29  } catch (err) {
30    console.error('[consent] insert error:', err);
31    return res.status(500).json({ error: 'Failed to record consent' });
32  }
33});
34
35// Get current consent status for a user
36router.get('/api/consent/:userId', async (req, res) => {
37  const rows = await db.select()
38    .from(consentRecords)
39    .where(eq(consentRecords.userId, req.params.userId))
40    .orderBy(desc(consentRecords.createdAt))
41    .limit(10);
42
43  // Build a map of most recent consent per type
44  const status = {};
45  for (const row of rows) {
46    if (!status[row.consentType]) {
47      status[row.consentType] = row.granted;
48    }
49  }
50  return res.json({ userId: req.params.userId, consent: status });
51});
52
53module.exports = router;

1// server/routes/dataExport.js — request and download endpoints
2const express = require('express');
3const { db } = require('../db');
4const { dataExportRequests } = require('../schema');
5const { eq } = require('drizzle-orm');
6const { withDbRetry } = require('../lib/retryDb');
7
8const router = express.Router();
9
10router.post('/api/data-export/request', async (req, res) => {
11  if (!req.user) return res.status(401).json({ error: 'Login required' });
12
13  const existing = await db.select().from(dataExportRequests)
14    .where(eq(dataExportRequests.userId, req.user.id))
15    .orderBy(dataExportRequests.requestedAt)
16    .limit(1);
17
18  // Prevent spam — one pending request at a time
19  if (existing[0]?.status === 'pending' || existing[0]?.status === 'processing') {
20    return res.status(429).json({ error: 'Export already in progress', requestId: existing[0].id });
21  }
22
23  const record = await withDbRetry(() =>
24    db.insert(dataExportRequests).values({
25      userId: req.user.id,
26      status: 'pending',
27    }).returning()
28  );
29
30  return res.json({ requestId: record[0].id, message: 'Export queued — ready in ~5 minutes' });
31});
32
33router.get('/api/data-export/:id/status', async (req, res) => {
34  const row = await db.select().from(dataExportRequests)
35    .where(eq(dataExportRequests.id, parseInt(req.params.id)))
36    .limit(1);
37
38  if (!row[0]) return res.status(404).json({ error: 'Not found' });
39  if (row[0].userId !== req.user?.id) return res.status(403).json({ error: 'Forbidden' });
40
41  return res.json({ status: row[0].status, fileUrl: row[0].fileUrl, expiresAt: row[0].expiresAt });
42});
43
44module.exports = router;

1// Ask Agent to add the deletion flow with this prompt:
2// Add two routes to server/routes/deletion.js:
3//
4// POST /api/deletion/request:
5//   1. Require Replit Auth (req.user must exist)
6//   2. Generate a crypto.randomUUID() as confirmation_token
7//   3. Insert into deletion_requests with status='pending' and the token
8//   4. Send an email via SendGrid (API key from process.env.SENDGRID_API_KEY in Secrets)
9//      with subject 'Confirm your account deletion' and a link:
10//      https://${req.get('host')}/api/deletion/confirm/${token}
11//   5. Return { message: 'Confirmation email sent' }
12//
13// POST /api/deletion/confirm/:token:
14//   1. Find the deletion_request by confirmation_token where status='pending'
15//   2. If not found, return 404
16//   3. Update status to 'processing', set confirmed_at = now()
17//   4. Run a PostgreSQL function 'purge_user_data(user_id)' via db.execute()
18//      that deletes from: policy_acceptances, consent_records, data_export_requests,
19//      deletion_requests last (self-reference) — all in order respecting foreign keys
20//   5. Update deletion_request status to 'completed'
21//   6. Return { message: 'Account deleted' }
22//
23// Also create the purge_user_data PostgreSQL function in a migration file.

1// Ask Agent to build the privacy policy system and React frontend with this prompt:
2// Add to the Express app:
3// 1. GET /api/privacy-policy — returns the current policy (is_current=true)
4// 2. POST /api/privacy-policy/accept — inserts into policy_acceptances for the logged-in user
5//    if they haven't already accepted this version (check unique constraint)
6// 3. GET /api/admin/consent-stats — returns aggregate counts: total consent records,
7//    breakdown by consent_type and granted (true/false), grouped using SQL COUNT + GROUP BY
8// 4. GET /api/admin/deletion-requests — lists all deletion_requests with status != 'completed'
9//
10// Build a React frontend with:
11// a) A CookieBanner component (fixed bottom bar) showing 'We use cookies' text,
12//    Accept All, Reject All, and Customize buttons. On choice, POST /api/consent.
13//    Store the choice in localStorage so the banner doesn't show again.
14// b) A PrivacySettings page with toggle switches per consent category
15//    (analytics, marketing, functional), a 'Request My Data' button (POST /api/data-export/request),
16//    and a 'Delete My Account' button (POST /api/deletion/request).
17// c) A PolicyAcceptanceModal that checks GET /api/privacy-policy on login,
18//    compares version to what's stored in localStorage, and shows the modal if not accepted.
19// d) An AdminPrivacy page with consent stats pie chart and deletion requests table.