The blog

We scan other people’s sites. This is what we keep finding.

What we’re learning while building an evidence-first compliance platform — scanning strategy, consent UX, accessibility, and the business of doing this for many sites at once.

Reporting

What a consent record actually has to prove

Article 7(1) asks you to demonstrate that one person consented, to one thing, at one moment. An aggregate acceptance rate cannot do that.

6 min read ·
Policies

The US state privacy patchwork, mapped for site owners

Nineteen-plus state privacy laws, one shared blueprint, and one strict outlier — here is how to run a single site across all of them.

6 min read ·
Policies

Building a Do Not Sell or Share link that works

Sharing covers ordinary ad pixels, so most sites likely owe Californians an opt-out — where the link goes, and what has to happen after the click.

5 min read ·
Policies

CCPA vs GDPR: two different jobs, not two banners

CCPA and GDPR ask a website for two different things: an honest opt-out that honors GPC, or permission before anything non-essential loads.

5 min read ·
Education

Google Consent Mode v2, explained without the hand-waving

Four signals, a March 2024 requirement, and two modes that differ on what leaves the page before anyone clicks anything.

6 min read ·
Policies

Global Privacy Control is the opt-out you cannot ignore

GPC is a browser signal that twelve US states require businesses to honor as an opt-out, and a broken opt-out is what regulators have fined.

5 min read ·
Strategy

Why privacy and accessibility belong in the same platform

Cookie consent and accessibility controls live on the same pages and need the same upkeep. One script means less to install and one place to look.

3 min read ·
Agencies

Compliance workflows for agencies managing dozens of sites

How to run cookie compliance across dozens of client sites: per-site workspaces, organizations and roles, human-approved inventories, and exportable records.

3 min read ·
Policies

What a better cookie policy generator should produce

A cookie policy generator should be evidence-based, readable, versioned, and connected to the approved cookie inventory.

3 min read ·

Page 1 of 2

Start today

Evidence from day one. Refundable for thirty.

Create an account, drop one script on a site, and the first scan verifies your cookies in minutes. Honest consent UX, consent analytics and accessibility controls, from $10 a site. Thirty days to get your money back if it is not right.

Get started → 30-day money-back guarantee · cancel anytime