The blog

What we keep finding when we scan websites.

What we’ve learned from building a cookie and accessibility tool: how to scan a site, how banners work, and what it takes to run all this across many sites.

Latest posts

FeaturedScanning

How often to rescan your site for new cookies

A monthly scan, plus a rescan after every site change, surfaces the tags, SDK updates and plugin changes that add cookies without anyone noticing.

5 min read · Oct 16, 2026

Read the article →

All Scanning Accessibility Consent UX Reporting Policies AI Review Education Strategy Agencies Growth

Accessibility

An inaccessible consent banner undermines valid consent

If a visitor using a keyboard or screen reader cannot reach your reject button, the consent your banner records is hard to call freely given.

6 min read · Oct 9, 2026

Scanning

Prior blocking: recording a choice versus gating the tags

A banner that records a choice and a banner that gates your tags are built differently. Here’s what the second one requires.

6 min read · Oct 2, 2026

Consent UX

Cookie banner dark patterns are an enforcement problem

Regulators screenshot buried reject buttons and pre-ticked boxes, and the accepts they pressure out of people make your consent data less useful.

5 min read · Sep 25, 2026

Reporting

What a consent record actually has to prove

Article 7(1) asks you to demonstrate that one person consented to one thing at one moment, and an aggregate acceptance rate can’t do that.

6 min read · Sep 18, 2026

Policies

The US state privacy patchwork, mapped for site owners

Nineteen-plus state privacy laws share one blueprint, with one strict outlier. Here’s how to run a single site across all of them.

6 min read · Sep 11, 2026

Policies

Building a Do Not Sell or Share link that works

Sharing covers ordinary ad pixels, so most sites likely owe Californians an opt-out. Here’s where the link goes and what has to happen after someone clicks it.

5 min read · Sep 4, 2026

Policies

CCPA vs GDPR: what each law asks your website to do

CCPA and GDPR ask a website for two different things. CCPA wants an opt-out that works and honors GPC, and GDPR wants permission before anything non-essential loads.

5 min read · Aug 28, 2026

AI Review

Using AI to review cookie categories without losing control

AI review reads verified scan evidence and drafts categories, providers, and purposes with a confidence score. A person approves everything before anything is published.

3 min read · Aug 26, 2026