Privacy: Cookie Banner Symmetry Check

Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance.

Last updated: 2026-10-27. Agent Harbor LLC, 3850 Kitsap Way, Ste 104 #1087, Bremerton, WA 98312. Questions: brian@agentharbor.agency.

This is the privacy notice for Cookie Banner Symmetry Check. It sits under the Agent Harbor privacy policy, which covers the rest of this site. The check is not open yet; this page describes how it will handle data and applies from the day it opens.

The free web checker (when it is open)

Today the free checker is switched off and this page collects nothing about it. When it is open:

What you send. The page address you type, and a tick that you own the site or are authorized to test it. Your browser also loads Cloudflare Turnstile, a human check, from challenges.cloudflare.com; Cloudflare's privacy policy describes what it receives and sets.
Where it goes. To our Crawler Watch service at watch.agentharbor.agency, which asks Cloudflare to confirm the human check (your network address is sent to Cloudflare for that), applies per-address limits (the free checker allows a few scans per day from one network and a fixed number a day in total), and passes the scan on to a scanner that runs on our own hardware in Bremerton, Washington.
Limit counters. To apply those limits we store a hashed form of your network address (for IPv6, of its /64 block) with a counter. A hash of an address is pseudonymised, not anonymous: it can be matched to an address by anyone who tries every possibility. The counters expire and are deleted by a nightly job. We do not store the plain address for this.
The scan. The scanner loads the page in a browser and records the requests it makes, the cookies it sees (names, domains, lengths and a short hash of each value; never the value itself) and screenshots. By default the report and screenshots are kept for 72 hours and then deleted. A report can contain the full web addresses of the requests the page made, including their query strings; redaction of those is not finished yet.
Who can open a result. A result has a random address. It is not listed anywhere, but anyone who has the address can open it until it is deleted.
Logs. The service writes one log line per accepted scan with the host name of the page (no path or query), and nothing that identifies you. Cloudflare keeps such logs for a few days.
Sharing. Cloudflare (hosting, the human check) and our own scanner. We do not sell this data, use it for advertising, or publish findings about a named site.

The Apify Actor

When the Actor exists it will run in your Apify account: its inputs and results are stored there under your agreement with Apify, and we see only the usage figures Apify shows publishers. You confirm in the input that you own the site or are authorized to test it; without that the Actor fetches nothing.

Your choices

Ask us to delete a result, a waitlist address or anything else we hold about you: write to brian@agentharbor.agency. Because the free checker needs no account, tell us the page address and the time (UTC) you ran it.

The waitlist

If you e-mail us to join a waitlist we keep your address and your message to tell you about this product, and delete them when you ask. We do not add you to anything else.

Changes

We will change this page before anything it describes changes, and update the date above.