Skip to content
Cookie & tracker watch

Cookie compliance monitoring: what loads before consent

Monity visits your site like a first-time visitor, records the cookies and trackers that load before anyone answers the banner, and alerts you when a new tracker shows up or the consent platform goes missing.

7-day Business trial, no card. Or scan a site’s cookies now for free.

  • Paid plans and the Business trial
  • Cookie names, never values
  • A first visit, before consent

A first visit, recorded

What a new visitor’s browser gets before they answer your banner.

A consent setup that worked on Monday can be broken by Tuesday’s tag manager publish: a pixel added outside the consent platform, a tag that fires before the banner, a theme update that drops the banner altogether. Nothing visible changes. Monity visits the page like a first-time visitor on every check and records the cookies set and the trackers contacted before anyone clicks anything.

  • Cookies by name, party and vendor; their values are never read or stored
  • Analytics, advertising, session-replay, social and marketing vendors
  • The consent platform, the IAB consent APIs and Google Consent Mode defaults

Alerts on drift

A new tracker, a new cookie, a banner that’s gone: you hear the same day.

After the first three checks learn which tags normally fire, Monity alerts when the page contacts a tracking vendor or sets a tracking cookie it has not seen in the last 30 days, and when the consent platform changes or disappears. A platform missing on one slow load is not “gone”: it has to be missing on two checks in a row.

  • New tracker, new tracking cookie and consent platform changes are on from the start
  • Tracking before consent and a tracker count are there to switch on

Honest about what one visit shows

It tells you what loads. Whether it needs consent is your call.

Whether a tracker needs consent depends on where your visitors are and how your platform is set up, so Monity reports what loads, in plain terms, and leaves the legal reading to you and your advisers. For a full consent audit, run the check as a clean visit: with “Block ads and cookie banners” off and no steps before it, so nothing answers the banner on the visitor’s behalf.

  • “Tracking before consent” is judged only on clean visits
  • Blocked requests are still listed: the page asked for them

Alert rules

Five rules. Three are on from the start.

“New” means not seen on the page in the last 30 days, so tags that come and go with campaigns don’t alert every time they return. These are the defaults a new task starts with.

Cookie & tracker watch

Paid plans
Rule New tasks Default What it catches
New tracker On A vendor not seen in 30 days The page contacts an analytics, advertising, session-replay, social or marketing vendor it has not used in the last 30 days.
New tracking cookie On A cookie not seen in 30 days A tracking cookie appears on a first visit. Compared by name; values are never read or stored.
Consent platform changed or disappeared On Gone on 2 checks in a row The consent platform changed, appeared or is gone. One slow load does not count as gone.
Tracking before consent Off Once, while it lasts A tracker is contacted, or a tracking cookie set, before anyone answers the banner. Judged only on checks that do not block ads or run steps first.
More trackers than Off 10 vendors The number of distinct tracking vendors contacted on a first visit.

Monity does not give legal advice and does not sell a consent platform. It records what a first visit loads and tells you when that changes.

Examples

Ask for it in a sentence. Hear about the tag nobody approved.

Tell the assistant what to watch, or switch the skill on in a task’s settings. Alerts go to the channels you turn on for the task.

  • Tell me if a new tracker shows up on northwind.example
    Slack · #privacy
    New tracker: 1 — TikTok Pixel. Added in the tag manager for a campaign, outside the consent platform.
  • Alert me if the cookie banner on coastalcrm.com disappears
    Email · privacy@coastalcrm.com
    Consent platform changed or disappeared: Consent platform "Cookiebot" → (none). A theme update removed the platform’s script tag.
  • Check fieldnote.com/pricing for tracking before consent
    Microsoft Teams · Legal · Privacy
    Tracking before consent: 2 — Meta Pixel is contacted before consent; Tracking cookie _fbp is set before consent. Judged on a clean visit: no ad blocking, no steps before the check.
  • Keep a log of every new cookie on our shop
    Google Sheets · Cookie register
    New tracking cookie: 1 — _ttp. One row per alert, which keeps a dated record for the cookie policy.

Northwind, Coastal CRM and Fieldnote are example companies.

Free tools

Scan a site now, then watch for drift.

The free scanner shows what one first visit loads. Monitoring repeats that visit on every check and tells you when it changes.

FAQ

Questions about cookie compliance monitoring

What does cookie compliance monitoring check?
On every check, Monity visits the page as a first-time visitor and records the cookies set and the tracking vendors contacted before anyone answers the cookie banner, the consent platform on the page, the IAB consent APIs and Google Consent Mode’s default state. It alerts when a new tracker or tracking cookie appears, or when the consent platform changes or disappears.
Does it tell me whether my site is GDPR compliant?
No. Whether a tracker needs consent depends on where your visitors are, what the tracker does and how your consent platform is set up. Monity reports what loads, in neutral terms, and leaves the legal assessment to you and your advisers.
Does Monity read cookie values?
No. Cookies are recorded and compared by name, domain and attributes. Their values are never read or stored.
Why is “Tracking before consent” off by default?
Because it can only be judged on a clean visit. A task that blocks ads and cookie banners, or runs steps before the check, may answer the banner itself. Switch the rule on for a task with “Block ads and cookie banners” off and no steps, and it alerts once while a tracker or tracking cookie loads before consent.
Which consent platforms does it recognise?
The common ones, including OneTrust, Cookiebot, Didomi, Usercentrics, TrustArc, CookieYes, Complianz, iubenda, Osano, Termly, Axeptio, Sourcepoint, Klaro, Borlabs and Google’s own consent messages. It looks at the platform’s scripts, markup and cookies, so a slow-loading banner is still recognised.
Which plans include it?
The Cookie & tracker watch is on paid plans and the 7-day Business trial.

Know what your site loads before anyone says yes.

Add the Cookie & tracker watch to your key pages and Monity records every first visit, with an alert when a tracker or your consent platform changes.

  • 7-day Business trial, no card
  • Cookie names, never values
  • Every alert channel on every plan
Kamil, Alex and Martyna Median reply under 6 hours

Have a question?

Pricing, security, or scoping - pick a route and you will land in a real person's inbox.