DataGrail Privacy Inspector

Audit your site for compliance with privacy frameworks like CPRA or GDPR.

DataGrail Privacy Inspector This is a Chrome extension that detects scripts that are requested from websites and sees if they match trackers that may sell or share your information without your consent. The extension also allows you to send the GPC signal via your browser, acting as an implicit opt-out signal for tracking. The purpose of this extension is to verify if a website is compliant with consent preferences you provide them. Consent preferences are typically provided through a Consent Management Platform installed on the site, also known as the "banner" that pops up and asks you to either accept "All" or "Only essential" cookies (or similar language). If you limit scripts to only essential ones, the site should still function but you are not tracked by any non-essential services, like Facebook pixels or Pardot marketing tools. The extension begins immediately scanning the tab you are on for any trackers that match a known tracker list. If you've not provided consent to tracking, then the resulting list should have a significantly reduced amount of entries, all of which should be essential to the site. 🚀 Features There are a couple features to the Extension that can help you with managing the tracker list to assess if a site is compliant with consent: ▶️ Send the Global Privacy Control Signal The Global Privacy Control (GPC) signal is a a proposed specification designed to allow Internet users to notify businesses of their privacy preferences, such as whether or not they want their personal information to be sold or shared. Importantly, this signal can be set at the browser level and sent to every page you visit, acting as a opt-out mechanism to tracking (the equivalent of accepting "only essential" tracking/cookies). This extension allows you to enable the GPC directly from the UI that appears above the trackers. When enabled, the UI will refresh the trackers detected (as should the webpage). It is required by California law (CPRA) to respect this global opt-out signal. ▶️ Trace Tracker Code All trackers that appear on the list that are associated with a "script" type have an additional action that reveals the location of where the script tag is embedded within the main document (the website html) code. This can be useful to provide some initial support in tracing how that code ended up on the page, either as embedded in the source code or injected via another script. ❓ Troubleshooting This Chrome extension designed for use with DataGrail Consent, and will only be supported by DataGrail for existing Consent customers. If you believe the tracking results are populating incorrectly, simply close the UI and reopen it to see the latest results. Sometimes certain trackers take longer to load on a page, so it is best to "toggle" the UI a couple of times to see a complete list. Remember, not all trackers found are necessarily selling or sharing your information. Some trackers are essential to a website working. A good example is Google Tag Manager, which manages how scripts are loaded onto a page. Google Tag Manager helps developers by providing a single source of truth and control for scripts, making it easier to be compliant with consent preferences sent by users.