what we look for
What we look for today.
Three things decide what a scan can tell you: the tracker vendors we recognise, the banners we can operate, and the consent-signal rules we evaluate. Each rule cites its public source; the main ones are listed on the methodology page.
Not every banner or vendor is in our catalogue yet. When we meet one we cannot name, the traffic is still recorded, just without a name. When we see a banner but cannot operate it, the report says "could not determine" for that step and leaves it out of the count.
Generated from the engine catalogue on 29 October 2026.
vendors
Tracker vendors we recognise
Traffic from these vendors is named in a report. Traffic from any other host is recorded without a name.
350 listed
- 1rx.io · Marketing
- 33Across · Marketing
- ABlyft · Analytics
- Abovo Media · Analytics
- ABTasty · Analytics
- Active Campaign · Marketing
- Acuity · Marketing
- Adalyser.com · Marketing
- Adcalls · Marketing
- Adform · Marketing
- Adhese · Marketing
- Adition · Marketing
- Adkernel · Marketing
- Admatic · Marketing
- Admixer · Marketing
- Adobe Advertising · Marketing
- Adobe Analytics · Analytics
- Adobe Audience Manager · Marketing
- Adobe ColdFusion · Functional
- adscale.de · Marketing
- Adxcore · Marketing
- Adyen · Functional
- AFAS · Functional
- Ahoy · Analytics
- Akamai · Functional
- Akamai Botmanager · Functional
- Algolia · Analytics
- Alteon · Functional
- Amazon · Marketing
- Amazon Web Services · Functional
- Amplitude · Analytics
- Aniview · Marketing
- ASP.net · Functional
- AT Internet · Analytics
- Atlas · Marketing
- Attentive · Marketing
- Audrte · Marketing
- Auth0 · Functional
- Awin · Marketing
- AWS Cookies Popup · Functional
- Axeptio · Functional
- Azure / Microsoft · Functional
- Baidu · Analytics
- Bazaar Voice · Analytics
- Beamer · Marketing
- Beeswax · Marketing
- Belco · Functional
- Beslist.nl · Analytics
- betweendigital.com · Marketing
- Bidence · Marketing
- bidswitch.net · Marketing
- Bing / Microsoft · Marketing
- Bit.ly · Analytics
- Blue · Marketing
- Blueconic.com · Marketing
- BlueKai · Marketing
- Borlabs · Functional
- Bouncex · Marketing
- Braze · Functional
- Browser-Update.org · Functional
- Bugsnag · Functional
- CakePHP · Functional
- Casale Media · Marketing
- Channel.me · Functional
- Chartbeat · Analytics
- CHEQ AI Technologies · Functional
- Citrix · Functional
- Civic · Functional
- Claritas · Marketing
- CleanTalk · Functional
- Clerk · Necessary
- Cloudflare · Functional
- CodeIgniter · Functional
- Codepen · Functional
- CognitoForms · Analytics
- Command Act · Functional
- Complianz · Functional
- comScore · Marketing
- Consentmanager.net · Functional
- ContentSquare · Analytics
- Convert Insights · Functional
- Cookie First · Functional
- Cookie Law Info · Functional
- Cookie Script · Functional
- Cookiebot · Functional
- CookieConsent.io · Functional
- CookieYes · Functional
- CraftCMS · Security
- Crazy Egg · Analytics
- Crisp · Functional
- csync.loopme.me · Marketing
- Customer.io · Marketing
- Datadome · Functional
- Datatrics · Marketing
- Devise (Ruby on Rails) · Functional
- Didomi · Functional
- Digital Audience · Marketing
- Digital Factory · Functional
- Disqus · Marketing
- Django · Functional
- Dotmetrics · Analytics
- Dotomi · Marketing
- Doubleclick · Advertising
- Drift · Functional
- Drupal CMS · Functional
- Duda · Analytics
- Dynamic Yield · Functional
- Dynatrace · Functional
- E-volution.ai · Marketing
- Easysize.me · Functional
- Emetric · Marketing
- Enzuzo · Functional
- Exponea · Marketing
- Ezoic · Analytics
- f5 BIG-IP · Functional
- Facebook Pixel · Advertising
- Fastclick · Marketing
- Fathom Analytics · Analytics
- Federated Media Publishing · Marketing
- FeedbackCompany · Functional
- Fidelity-media.com · Marketing
- Flowbox · Functional
- FreeWheel · Marketing
- Funda · Marketing
- Gemius · Analytics
- GitHub · Functional
- Google · Marketing
- Google Ads · Marketing
- Google AdSense · Marketing
- Google Analytics · Analytics
- Google Flights · Marketing
- Google Hotel Ads · Marketing
- Google Maps · Marketing
- Google Optimize · Analytics
- Google reCAPTCHA · Functional
- Google Surveys · Marketing
- Google Tag Manager · Tag manager
- Groovinads · Marketing
- GumGum · Marketing
- HAproxy · Functional
- Heap Analytics · Analytics
- Hotjar · Functional
- Hu-manity.co · Functional
- HubSpot · Analytics
- ID5 · Marketing
- Imperva · Functional
- Improve Digital · Marketing
- Indeed · Analytics
- infOnline · Marketing
- Inspectlet · Analytics
- Instagram · Marketing
- Intercom · Analytics
- Intershop · Functional
- Issuu · Marketing
- Iubenda · Functional
- J2EE · Functional
- Jimdo · Functional
- Joomla! · Functional
- Joomla! Engagebox · Functional
- JoomlArt · Functional
- justpremium.com · Marketing
- Kelkoo · Marketing
- Kentico · Analytics
- Ketch Privacy Rights · Privacy rights platform
- Keycloak · Functional
- Kiyoh · Functional
- Klaviyo · Marketing
- Kompare · Analytics
- Laravel · Functional
- Leadfeeder · Marketing
- Leadinfo · Marketing
- Lightbox CDN · Functional
- Lightspeed · Functional
- LinkedIn Insight · Advertising
- Live helper chat · Functional
- Livechat · Functional
- LiveIntent · Marketing
- LiveRamp · Marketing
- LiveZilla GmbH · Functional
- Loggly · Functional
- Lotame · Marketing
- Lucky Orange · Analytics
- Magento · Functional
- Magnite · Marketing
- Mailchimp · Analytics
- MailMunch · Marketing
- Marfeel · Analytics
- Marketo · Analytics
- Matomo · Analytics
- Maxlead · Functional
- Media.net · Marketing
- MediaMath · Marketing
- Mediaplex · Marketing
- Mediarithmics · Marketing
- MediaVine · Marketing
- MercadoLibre · Marketing
- Microsoft · Analytics
- Microsoft Azure App Insights · Functional
- Microsoft Clarity · Analytics
- Microsoft Dynamics · Functional
- Moove · Functional
- Mopinion.com · Analytics
- Nativo · Marketing
- Next · Functional
- Next.js · Functional
- NextAuth.js · Functional
- Nexx360 · Marketing
- NGINX Ingresss · Functional
- Nielsen · Marketing
- nopCommerce · Functional
- OnAudience · Marketing
- OneTrust · Functional
- OneTrust Preferences Center · Privacy rights platform
- openx.net · Marketing
- Optimizely · Marketing
- Optinmonster · Marketing
- Oracle · Functional
- Oribi · Analytics
- Ortec · Marketing
- Osano · Functional
- Outbrain · Marketing
- Pangle · Marketing
- Parse.ly · Functional
- Partnerize · Marketing
- PayPal · Functional
- Perfect Audience · Marketing
- Perl · Functional
- Permutive · Functional
- Personyze · Personalization
- PHP.net · Functional
- phpMyAdmin · Functional
- Piano · Functional
- Picreel · Analytics
- Pinterest · Marketing
- Piwik · Analytics
- Platform161 · Marketing
- Plausible Analytics · Analytics
- Plesk · Functional
- Polylang · Functional
- Postviewscounter · Analytics
- PowerLinks · Marketing
- PowerLinks Media Limited · Marketing
- Prebid · Functional
- PrivacyPillar · Functional
- Processwire · Functional
- PubMatic · Marketing
- Pulsepoint · Marketing
- QookieQloud · Necessary
- Qualaroo · Marketing
- Qualtrics · Analytics
- Quantcast · Marketing
- Rack · Functional
- Rapleaf · Marketing
- RD Station · Marketing
- Reddit · Marketing
- rekmob.com · Marketing
- richAudience · Marketing
- Roku · Marketing
- Ruby on Rails · Necessary
- Rudderstack · Analytics
- Sailthru · Marketing
- Salesforce · Functional
- SAP · Functional
- Seedtag · Marketing
- semasio.net · Marketing
- ShareThis · Functional
- Sharethrough · Marketing
- Sharpspring · Marketing
- Shopify · Functional
- Siteimprove · Analytics
- SiteSpect · Functional
- Sleeknote · Analytics
- Smaato · Marketing
- Smartadserver · Marketing
- Snapchat · Marketing
- SnapEngage · Marketing
- Snapwidget · Functional
- Snowplow · Analytics
- Sonobi · Marketing
- Sooqr · Functional
- SOVRN · Marketing
- Spotify · Functional
- SpotX · Marketing
- Springserve · Marketing
- Squeezely · Marketing
- Stape · Marketing
- Stonly · Security
- StreamTheWorld · Marketing
- Stripe · Functional
- SurveyMonkey · Functional
- Swym · Functional
- Taboola · Functional
- Tailtarget · Marketing
- Tapad · Marketing
- Tappx · Marketing
- Tawk.to · Functional
- Tawk.to Chat · Functional
- Teads · Marketing
- Termly · Functional
- The Ozone Project · Marketing
- The Tradedesk · Marketing
- TikTok · Marketing
- Totvs · Marketing
- Tripadvisor · Analytics
- TripleLift · Marketing
- TrustArc Individual Rights Manager · Privacy rights platform
- Trustpilot · Analytics
- Twiago · Marketing
- Twitch · Functional
- Typeform · Functional
- TYPO3 · Functional
- Umami · Analytics
- Underdog Media · Marketing
- Undertone · Marketing
- Unrulymedia.com · Marketing
- Usabilla · Marketing
- vBulletin · Functional
- Vercel · Functional
- Verve · Marketing
- Viafoura · Functional
- Vidoomy · Marketing
- Vimeo · Analytics
- Visual Website Optimizer · Functional
- Visx.net · Marketing
- vmg.host · Marketing
- Vuble · Marketing
- Weborama · Analytics
- WePublish · Analytics
- WhatsApp · Functional
- Wikimedia · Analytics
- Wisepops · Functional
- Wistia · Functional
- Wix.com · Functional
- WooCommerce · Functional
- WooCommerce / Jetpack · Functional
- Wordpress · Functional
- WP-Glogin · Functional
- WPML · Functional
- Wufoo · Functional
- X · Marketing
- Xandr · Marketing
- Xenforo · Functional
- Yahoo · Marketing
- Yandex.Metrica · Analytics
- Yieldmo · Marketing
- Yithemes.com · Functional
- Youtube · Marketing
- Zendesk · Functional
- Zeotap · Marketing
- ZOHO · Functional
banners
Banners we can operate
For each banner we list whether the scan can find a reject control. Where it cannot, the report says "could not determine" for that step.
20 listed
- appconsent · Accept and reject
- axeptio · Accept and reject
- clym · Accept and reject
- complianz · Accept and reject
- consentmanager · Accept and reject
- cookiebot · Accept and reject
- cookieyes · Accept and reject
- crownpeak · Accept only
- didomi · Accept and reject
- ensighten · Accept and reject
- iubenda · Accept and reject
- ketch · Accept and reject
- onetrust · Accept and reject
- osano · Accept and reject
- quantcast · Accept and reject
- secureprivacy · Accept and reject
- sourcepoint · Accept and reject
- transcend · Accept and reject
- trustarc · Accept and reject
- usercentrics · Accept and reject
rules
Consent-signal rules
Each rule carries its implementation status. A rule marked "specified only" has a written specification and no evaluator that runs on a scan.
58 listed
- GCM-01 · Evaluated
- GCM-02 · Evaluated
- GCM-03 · Evaluated
- GCM-04 · Evaluated
- GCM-05 · Evaluated
- GCM-06 · Evaluated
- GCM-07 · Evaluated
- GCM-08 · Specified only
- GCM-09 · Specified only
- GCM-10 · Evaluated
- GCM-11 · Evaluated
- GCM-12 · Evaluated
- GCM-SC-A · Specified only
- GCM-SC-B · Specified only
- GCM-SC-C · Evaluated
- EU_
PRE_ CONSENT_ 001_ NON_ ESSENTIAL_ COOKIES · Evaluated - EU_
PRE_ CONSENT_ 002_ NON_ COOKIE_ STORAGE · Evaluated - EU_
PRE_ CONSENT_ 002B_ UNCLASSIFIED_ STORAGE · Evaluated - EU_
PRE_ CONSENT_ 003_ TRACKERS_ REQUESTS · Evaluated - EU_
PRE_ CONSENT_ 004_ TRACKING_ PIXELS · Evaluated - EU_
BANNER_ 001_ BANNER_ ABSENT_ WHERE_ EXPECTED · Evaluated - EU_
DARK_ PATTERN_ 001_ NO_ REJECT_ FIRST_ LAYER · Evaluated - EU_
DARK_ PATTERN_ 002_ REJECT_ DEPTH_ GT_ ACCEPT · Evaluated - EU_
DARK_ PATTERN_ 003_ BUTTON_ TYPE_ ASYMMETRY · Evaluated - EU_
DARK_ PATTERN_ 004_ PRESELECTED_ CATEGORIES · Evaluated - EU_
DARK_ PATTERN_ 004B_ UNCLASSIFIED_ PRESELECTED · Evaluated - EU_
DARK_ PATTERN_ 005_ REJECT_ SMALLER_ THAN_ ACCEPT · Evaluated - EU_
DARK_ PATTERN_ 006_ REJECT_ FONT_ SMALLER · Evaluated - EU_
DARK_ PATTERN_ 007_ REJECT_ UNFILLED · Evaluated - EU_
DARK_ PATTERN_ 008_ REJECT_ TEXT_ GREY_ LOW_ CONTRAST · Evaluated - EU_
POST_ REJECT_ 001_ CONSENT_ NOT_ RESPECTED · Evaluated - EU_
POST_ REJECT_ 002_ TRACKING_ AFTER_ REJECT · Evaluated - EU_
TCF_ 001_ PRESENT_ AND_ VERSION · Evaluated - EU_
TCF_ 002_ PURPOSE_ GRANTED_ PRE_ CONSENT · Evaluated - EU_
TCF_ 003_ DISCLOSED_ VENDORS_ ABSENT · Evaluated - EU_
GCM_ 001_ PRESENT_ AND_ VERSION · Evaluated - EU_
GCM_ 002_ WAS_ SET_ LATE · Evaluated - EU_
GCM_ 003_ DEFAULT_ NOT_ DENIED · Evaluated - EU_
GCM_ 007_ GRANTED_ SIGNAL_ PRE_ CONSENT · Evaluated - EU_
GCM_ 004_ V2_ SIGNALS_ NOT_ DECLARED · Evaluated - EU_
GCM_ 005_ WAIT_ FOR_ UPDATE_ BELOW_ RECOMMENDED · Evaluated - EU_
GCM_ 006_ NO_ CONSENT_ UPDATE_ AFTER_ ACCEPT · Evaluated - EU_
GCM_ 010_ MODE_ INDETERMINATE · Evaluated - EU_
GCM_ 012_ CONSENT_ NOT_ PERSISTED · Evaluated - EU_
GCM_ 011_ CMP_ NOT_ GOOGLE_ CERTIFIED · Evaluated - EU_
SESSION_ REPLAY_ 001_ PRE_ CONSENT_ VENDOR_ ACTIVE · Evaluated - EU_
GCM_ 013_ ABSENT_ WHERE_ EXPECTED · Evaluated - EU_
COOKIE_ UNDECLARED_ 001 · Evaluated - US_
GPC_ 001_ BEHAVIORAL_ DIFF_ HONOURED · Evaluated - US_
GPC_ 002_ WELL_ KNOWN_ PRESENT · Evaluated - US_
GPC_ 003_ NON_ COMPLIANT_ PATTERN · Evaluated - US_
DNS_ LINK_ 001_ PRESENT · Evaluated - US_
GPC_ 004_ AD_ TECH_ PRESENT · Evaluated - BR_
REFUSAL_ 001_ NON_ NECESSARY_ COOKIES_ SET · Evaluated - BR_
REFUSAL_ 002_ TRACKING_ VENDOR_ REQUESTS · Evaluated - BR_
DEFAULT_ 001_ NON_ NECESSARY_ COOKIES_ BEFORE_ CHOICE · Evaluated - BR_
BANNER_ 001_ REFUSAL_ BEYOND_ FIRST_ LAYER · Evaluated - BR_
BANNER_ 002_ NON_ NECESSARY_ PRESELECTED · Evaluated