Support & FAQs

Support & FAQs

CookieInspector helps teams understand, monitor, and demonstrate cookie compliance through automated scans, public verification, and ongoing monitoring. This page answers common questions about how the platform works and how to interpret results—CookieInspector is a technical tool, not legal advice.

How CookieInspector works

Automated scans gather the signals that power verification badges, AI explanations, and monitoring alerts. Everything runs in a clean browser so you can trust the reported behavior.

01

Scan

We analyze your site in a clean browser environment so we see what visitors do before they interact.

02

Analyze

We detect cookies, tracking behavior, consent signals, and summarize what matters for compliance.

03

Verify

You can display a public badge and verification page that share the latest scan status with visitors.

04

Monitor

We re-scan automatically and alert you when something changes so you catch regressions fast.

Action Plans

What to do next after a scan

Action Plans highlight prioritized remediation steps based on the findings from real-time scans and monitoring. The guides evolve as new runs detect changes so your team can track progress and fix issues with confidence.

View all Action Plans →

How scans, verification, and monitoring work

Each run uses a headless browser to collect cookies, trackers, and consent behavior just like a normal visitor. The results populate the verification badge, feed Action Plans, and power AI insights that explain the findings.

  1. 1We load your page and wait for scripts, tags, and consent banners to appear.
  2. 2We detect cookies, trackers, and consent banners that are present or activated during that visit.
  3. 3We calculate a risk score based on cookies found, third-party activity, and banner behavior.
  4. 4We generate a report that summarizes the findings in a simple, human-readable way.

We do not modify your website, and we never run destructive actions. Scans are read-only.

Frequently Asked Questions

Verification & Badge

What does "Get Verified" mean?

Get Verified means the site owner authorized CookieInspector to run automated compliance scans and display the latest scan status publicly via the badge and verification page.

What happens when someone clicks the verification badge?

They land on the public verification page showing the latest scan status, risk score, and what areas were checked.

Is my verification status public?

Yes. The verification page is public so visitors can confirm the most recent status, and it only shows compliance results—never account or personal information.

How often is verification updated?

Verification updates after every successful scan, so the badge always reflects the freshest status.

Can I remove the badge?

Yes. Removing the badge stops the public verification display, but you can still run scans from your dashboard.

Compliance Monitor

What is Compliance Monitor?

Compliance Monitor automatically re-scans your sites on a schedule and alerts you when something changes—ideal for teams that ship updates frequently.

How often are monitored sites re-scanned?

It depends on your monitoring settings and plan. You choose the scan cadence in Compliance Monitor.

What happens when an issue is detected?

Your dashboard updates the status and you receive an alert according to your notification settings.

Can a site move from compliant to at risk?

Yes. Site changes, third-party scripts, or tag updates can introduce new issues, and monitoring helps catch regressions early.

Can I monitor multiple sites?

Yes. Plans support monitoring multiple sites, with limits depending on your subscription.

AI Analysis

How does CookieInspector use AI?

AI adds explanatory insights on top of scan data to help you understand what changed and what to review next.

What kind of insights does AI provide?

It summarizes key risks, highlights likely causes, and suggests what to check—based on the scan signals we detect.

Does AI replace legal advice?

No. CookieInspector provides technical compliance signals and insights, but it is not legal advice.

Risk score & results

What does the risk score mean?

The risk score is a 0–100 indicator derived from scan findings and signals like pre-consent tracking and consent behavior; lower is better. Each signal carries a published weight, and cookies set by the consent platform itself or by strictly-necessary services are not counted.

See exactly how the score is calculated
Why can results change over time?

Results change as your site, consent settings, or third-party scripts evolve, so fresh scans provide the newest picture.

Why might my browser show different cookies than the report?

We use a clean, automated browser session; your personal browser may look different because of extensions, cached data, or previous consent decisions.

Limitations & accuracy

Does CookieInspector guarantee legal compliance?

No. CookieInspector provides informational scan results and technical insights; it does not guarantee legal compliance or replace legal advice.

Why couldn't my site be fully analyzed?

The website's firewall, CDN, or bot-protection system blocked some of the scanner's requests, so the report is marked as limited and some results may be incomplete. If you manage the website you can allow the CookieInspector scanner and re-run; if you don't, there is nothing to change on your side — retry later or contact Support. See /support/waf-blocked for details.

Why isn't my accessibility widget, payment provider or CAPTCHA counted as a tracker?

Because a third-party request is not the same as third-party tracking. Services the page needs to work—accessibility widgets such as UserWay or accessiBe, payment processors, CAPTCHAs, fonts and your own consent platform—are listed in the report for transparency but do not lower the score. Analytics, advertising and unknown third parties still count.

What counts as tracking
How accurate are the scans?

Scans aim to mirror a typical visitor, but accuracy depends on what the scanner can reach; the results show what it could access at the time of testing.

Whitelisting the CookieInspector scanner (WAF/CDN)

Whitelisting is only necessary when CookieInspector reports that a scan was blocked or limited by a firewall, CDN, or bot-protection system. Most websites do not require any configuration changes.

When blocking occurs, the website's security layer may return an access-denied page, a challenge, a rate-limit response, or nothing at all instead of the actual content, which prevents CookieInspector from completing some parts of the scan.

If you manage the website

You can configure your WAF, CDN, or bot-protection provider to allow CookieInspector scanner traffic and then run the scan again.

If you do not manage the website

There is nothing you need to change on your side. The restriction is controlled by the website owner or their security provider. You can retry later or contact Support for help reviewing the domain.

CookieInspector identifies its scanner using this User-Agent:

CookieInspectorBot/1.0

A User-Agent is not authentication: any client can send it. Keep the exception as specific as your security configuration allows, and avoid disabling protection globally.

Provider-specific notes, including Cloudflare, are on the dedicated page: WAF blocked or limited scans.

Billing & Invoices

Invoices and receipts are issued manually upon request. Contact billing@cookieinspector.com within 30 days of your payment and include:

  • Order or transaction reference
  • Full billing details (company name, tax ID / RFC, fiscal address)
  • Any additional information required for invoicing in your country

We process billing requests within a few business days.

Still need help?

Our team is happy to answer questions about scans, verification, monitoring setup, or Action Plans. Reach us anytime at support@cookieinspector.com.

Ready to show visitors your compliance story in real time? Get Verified displays the live status for your cookie compliance checker.