Know what is on your site before a plaintiff’s firm does.Free website scanScan Your Site
Log in Sign up Book a demo

Cookie Scanner Results

Patrol scan results

Understand what your website does when privacy choices are tested.

A conventional scanner lists what loads on a page. Patrol runs the page through a sequence of privacy decisions — reject, navigate, accept, and Global Privacy Control — then re-inventories cookies and trackers after each one. The report records what actually happened at every stage, with screenshots and technical evidence attached.

Monitor My Website With PatrolRequest an Expert Review

Report summaryIllustrative data
Scanned domainexample-retailer.com
Capture dateIllustrative
Test regionUS · California
Scan duration4m 12s
Report hashsha256:0000…0000
Automated verdictLikely compliance concern
States potentially affectedCA, CO, CT, VA
HIGH 2MEDIUM 5INFO 9

What the report covers

Six things Patrol checks on every scan.

01Consent bannerWhether a banner appears, what choices it presents, and how prominently reject is offered relative to accept.
02Accept and reject behaviorWhat the site does after each choice — which technologies load, which stop, and which continue regardless.
03GPC and consent signalsWhether a Global Privacy Control signal is detected and whether the configured opt-out behavior follows.
04Cookies and trackers by phaseA separate inventory captured at each stage of the test, so you can see exactly when something appeared.
05Jurisdiction mappingWhich state and regional requirements the observed behavior may be relevant to, based on the test region.
06Screenshots and technical evidenceVisual capture at each stage plus the underlying request data, retained with the report.

Behavioral test sequence

A scanner looks once. Patrol runs the decisions.

Each stage is a real interaction with your site. After every one, the full cookie and tracker inventory is captured again — which is how the report shows whether a rejection was actually honored.

STAGE 01
Before choice
The page is loaded with no interaction at all, establishing what fires before any consent is given.
Cookies and trackers re-inventoried
STAGE 02
Reject
Tracking is declined through the banner, and the page is observed for technologies that continue anyway.
Cookies and trackers re-inventoried
STAGE 03
Navigate and refresh
The session moves to another page and reloads, testing whether the rejection persists.
Cookies and trackers re-inventoried
STAGE 04
Accept
Consent is granted so the full set of technologies can be inventoried and compared against disclosures.
Cookies and trackers re-inventoried
STAGE 05
GPC test
A Global Privacy Control signal is sent and the response is recorded.
Cookies and trackers re-inventoried

Illustrative finding

What a single finding looks like.

High severityIllustrative finding
Observed behaviorAn advertising pixel continued sending requests after tracking was rejected and the page was refreshed.
Technology involvedThird-party advertising pixel
ClassificationAutomated finding · requires review
Evidence availableBefore and after screenshots, request log, cookie inventory for each stage
Legal referenceAdjacent requirement — opt-out and sale or sharing provisions under applicable state privacy laws

// Automated findings describe observed behavior and potential compliance concerns. They are not determinations of legal compliance and warrant review alongside your configuration and counsel.

Evidence package

Every finding ships with its proof.

✓Before-consent screenshot
✓After-rejection screenshot
✓After-acceptance screenshot
✓Cookie and tracker inventory
✓HAR archive of network requests
✓Capture timestamp
✓SHA-256 report hash

Coverage

What this scan covered — and what it did not.

Tested

Public pages in the configured test region
Consent banner presentation and choices
Accept, reject, refresh, and navigation states
Global Privacy Control signal response
Client-side cookies, trackers, and requests

Not tested in this scan

Authenticated or logged-in journeys
Mobile application SDKs
Server-side transmissions not observable in the browser
Regions other than the configured test region
Encrypted payload contents

// Untested conditions are neither passes nor failures. Dynamic sites can behave differently by geography, browser, user journey, and login state, so a single capture reflects one set of conditions.

Keep watching

One scan captures a moment. Patrol watches what changes.

Sites drift. A tag gets added, a vendor updates a script, a configuration is changed during a release. Patrol re-runs the behavioral sequence on a schedule and tells you when the result changes.

Monitor My Website With PatrolRequest an Expert Review