ConsentProof

Watch your consent banner and trackers. Scheduled scans, change alerts and dated evidence PDFs.

Availability. Not yet open: scanning of live sites is switched off until our safety checks are finished. Nothing is sold and nothing is scanned yet.

Is your cookie banner still doing what it says?

A tag manager update, a new marketing pixel or a changed consent setting can quietly change what a page does after a visitor presses Reject. ConsentProof is built to check on a schedule and tell you when something changes.

The free one-off check: a free check of one page is planned (you confirm you own the site or are authorised to test it). It is switched off for now, for the same reason as above.

What it does

  1. You list the pages you want watched (a handful per site) and confirm you may test them.
  2. A controlled browser loads each page logged out and plays four visitor scenarios: Global Privacy Control on, Reject, Accept, and close the banner.
  3. It records what actually happened: requests to trackers, the names of cookies that were set (never their values), consent signals, screenshots.
  4. It compares with the previous scan. If a check starts showing an observation, you get an email and, on some plans, a signed webhook.
  5. You get a PDF with the evidence ids, screenshot hashes and a SHA-256 of the machine-readable report, so the record can be checked later.

Pricing

Pricing: to be announced. Plans, the number of sites and pages per plan, and prices will be published here when they are set. An optional banner-symmetry check (does Reject cost more clicks than Accept?) is planned as an add-on, and an agency version with your own brand name on the PDF and email (the disclaimer stays).

Sensitive Pages

Planned extra checks for pages where trackers matter more: trackers on patient-portal, appointment and provider-search pages; page details (a search term, an appointment type) appearing in a third party's request address; whether a separate consumer health data privacy policy link is on the homepage (Washington's My Health My Data Act asks for one); trackers on pages you label child-directed; and whether the privacy notice contains a data-retention section (the amended COPPA Rule asks for one in the notice). These are observations about one logged-out visit. Nothing is typed or submitted, nothing behind a sign-in is opened, and the report does not say whether a law applies to you.

What it is not

Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance. It is an evidence tool, not a lawyer, an auditor or a compliance seal. Checks are tested on synthetic pages; a tracker missing from our vendor list shows as “unclassified”, not “clean”.

Responsible scanning

It scans only sites you confirm you may test, identifies itself (user agent tokens AgentHarbor-ComplianceSignals for page scans and AgentHarbor-ConsentProof for plain page fetches; both are honoured in robots.txt), visits a domain at most once every 10 minutes, and stops at bot-protection challenges. It does not try to get past a challenge, a login or a CAPTCHA.

Privacy · Support

How this was made

Built by Agent Harbor LLC. The code and the wording of this page were drafted with AI assistance. Brian Yandell owns and supports ConsentProof.

Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance.