Support & FAQs
CookieInspector helps teams understand, monitor, and demonstrate cookie compliance through automated scans, public verification, and ongoing monitoring. This page answers common questions about how the platform works and how to interpret results—CookieInspector is a technical tool, not legal advice.
How CookieInspector works
Automated scans gather the signals that power verification badges, AI explanations, and monitoring alerts. Everything runs in a clean browser so you can trust the reported behavior.
01
Scan
We analyze your site in a clean browser environment so we see what visitors do before they interact.
02
Analyze
We detect cookies, tracking behavior, consent signals, and summarize what matters for compliance.
03
Verify
You can display a public badge and verification page that share the latest scan status with visitors.
04
Monitor
We re-scan automatically and alert you when something changes so you catch regressions fast.
What to do next after a scan
Action Plans highlight prioritized remediation steps based on the findings from real-time scans and monitoring. The guides evolve as new runs detect changes so your team can track progress and fix issues with confidence.
Implement a consent banner before loading non-essential cookies
Non-essential cookies (analytics/marketing) are being set but no consent banner is detected that blocks them before consent.
Delay analytics and marketing cookies until consent
Non-essential cookies appear to fire before the visitor has seen and accepted the consent banner.
Add a clear "Reject all" option to the banner
The consent banner seems to be missing a prominent "Reject all" action, which can be considered a dark pattern.
Clarify consent actions and button labels
Button labels or copy are too vague (e.g. "OK", "Continue") and do not clearly state what the user is agreeing to.
Review your marketing and third-party tracking stack
A high number of marketing or third-party cookies were detected. Audit vendors, remove unused tools, and align with your policy.
Classify uncategorized cookies in your CMP
Some cookies are not mapped to any category in your CMP, which makes consent decisions harder to interpret and audit.
Prioritize high-risk findings for legal/compliance review
One or more high-severity findings were detected. They should be documented and reviewed with your compliance/legal team.
Document your setup and schedule periodic reviews
No critical issues were detected, but you should document your stack and schedule recurring scans to prevent regressions.
How scans, verification, and monitoring work
Each run uses a headless browser to collect cookies, trackers, and consent behavior just like a normal visitor. The results populate the verification badge, feed Action Plans, and power AI insights that explain the findings.
- 1We load your page and wait for scripts, tags, and consent banners to appear.
- 2We detect cookies, trackers, and consent banners that are present or activated during that visit.
- 3We calculate a risk score based on cookies found, third-party activity, and banner behavior.
- 4We generate a report that summarizes the findings in a simple, human-readable way.
We do not modify your website, and we never run destructive actions. Scans are read-only.
Frequently Asked Questions
Verification & Badge
What does "Get Verified" mean?
Get Verified means the site owner authorized CookieInspector to run automated compliance scans and display the latest scan status publicly via the badge and verification page.
What happens when someone clicks the verification badge?
They land on the public verification page showing the latest scan status, risk score, and what areas were checked.
Is my verification status public?
Yes. The verification page is public so visitors can confirm the most recent status, and it only shows compliance results—never account or personal information.
How often is verification updated?
Verification updates after every successful scan, so the badge always reflects the freshest status.
Can I remove the badge?
Yes. Removing the badge stops the public verification display, but you can still run scans from your dashboard.
Compliance Monitor
What is Compliance Monitor?
Compliance Monitor automatically re-scans your sites on a schedule and alerts you when something changes—ideal for teams that ship updates frequently.
How often are monitored sites re-scanned?
It depends on your monitoring settings and plan. You choose the scan cadence in Compliance Monitor.
What happens when an issue is detected?
Your dashboard updates the status and you receive an alert according to your notification settings.
Can a site move from compliant to at risk?
Yes. Site changes, third-party scripts, or tag updates can introduce new issues, and monitoring helps catch regressions early.
Can I monitor multiple sites?
Yes. Plans support monitoring multiple sites, with limits depending on your subscription.
AI Analysis
How does CookieInspector use AI?
AI adds explanatory insights on top of scan data to help you understand what changed and what to review next.
What kind of insights does AI provide?
It summarizes key risks, highlights likely causes, and suggests what to check—based on the scan signals we detect.
Does AI replace legal advice?
No. CookieInspector provides technical compliance signals and insights, but it is not legal advice.
Risk score & results
What does the risk score mean?
The risk score is a 0–100 indicator derived from scan findings and signals like pre-consent tracking and consent behavior; lower is better. Each signal carries a published weight, and cookies set by the consent platform itself or by strictly-necessary services are not counted.
See exactly how the score is calculatedWhy can results change over time?
Results change as your site, consent settings, or third-party scripts evolve, so fresh scans provide the newest picture.
Why might my browser show different cookies than the report?
We use a clean, automated browser session; your personal browser may look different because of extensions, cached data, or previous consent decisions.
Limitations & accuracy
Does CookieInspector guarantee legal compliance?
No. CookieInspector provides informational scan results and technical insights; it does not guarantee legal compliance or replace legal advice.
Why couldn't my site be fully analyzed?
The website's firewall, CDN, or bot-protection system blocked some of the scanner's requests, so the report is marked as limited and some results may be incomplete. If you manage the website you can allow the CookieInspector scanner and re-run; if you don't, there is nothing to change on your side — retry later or contact Support. See /support/waf-blocked for details.
Why isn't my accessibility widget, payment provider or CAPTCHA counted as a tracker?
Because a third-party request is not the same as third-party tracking. Services the page needs to work—accessibility widgets such as UserWay or accessiBe, payment processors, CAPTCHAs, fonts and your own consent platform—are listed in the report for transparency but do not lower the score. Analytics, advertising and unknown third parties still count.
What counts as trackingHow accurate are the scans?
Scans aim to mirror a typical visitor, but accuracy depends on what the scanner can reach; the results show what it could access at the time of testing.
Whitelisting the CookieInspector scanner (WAF/CDN)
Whitelisting is only necessary when CookieInspector reports that a scan was blocked or limited by a firewall, CDN, or bot-protection system. Most websites do not require any configuration changes.
When blocking occurs, the website's security layer may return an access-denied page, a challenge, a rate-limit response, or nothing at all instead of the actual content, which prevents CookieInspector from completing some parts of the scan.
If you manage the website
You can configure your WAF, CDN, or bot-protection provider to allow CookieInspector scanner traffic and then run the scan again.
If you do not manage the website
There is nothing you need to change on your side. The restriction is controlled by the website owner or their security provider. You can retry later or contact Support for help reviewing the domain.
CookieInspector identifies its scanner using this User-Agent:
CookieInspectorBot/1.0
A User-Agent is not authentication: any client can send it. Keep the exception as specific as your security configuration allows, and avoid disabling protection globally.
Provider-specific notes, including Cloudflare, are on the dedicated page: WAF blocked or limited scans.
Billing & Invoices
Invoices and receipts are issued manually upon request. Contact billing@cookieinspector.com within 30 days of your payment and include:
- Order or transaction reference
- Full billing details (company name, tax ID / RFC, fiscal address)
- Any additional information required for invoicing in your country
We process billing requests within a few business days.
Still need help?
Our team is happy to answer questions about scans, verification, monitoring setup, or Action Plans. Reach us anytime at support@cookieinspector.com.
Ready to show visitors your compliance story in real time? Get Verified displays the live status for your cookie compliance checker.