ConsentProbe
Menu
Sample reportHow it worksPricingMethodologyGuidesAudit typesChecklistsFramework finderAboutFeedback & support
Sign inFree audit

For Shopify and DTC stores

Cookie and marketing pixel audits

Submit your store URL to check cookies and tracking requests before consent. Your report includes screenshots, request records, and recommended fixes.

Try the free cookie audit tool

View sample reportEU $49 / California $49 pricing

Free path: one US-baseline visit outside California. EU and California audits are paid one-time products after sign-in.

Enter a storefront URL to validate the free US-baseline scope. Sign in only when you are ready to run the audit and save the report.

Sample finding and evidence
Anonymized store capture, US connection, 2026-10-15

Store J, US connection, 2026-10-15

Before click

  1. before clickstore-j.example/before clickOneTrust groups before the click: C0001:1, C0002:0, C0003:0, C0004:0
  2. before click_ttpbefore click_ttp cookie name observed; value excluded. TikTok anonymous_id equaled this cookie on Reject run 1.

Reject run 1

  1. after Rejectanalytics.tiktok.com/api/v2/shopify_pixelanalytics.tiktok.com 8 requests after Reject All, including 4 POST /api/v2/shopify_pixel

analytics.tiktok.com sent 8 requests after Reject All, including 4 POST /api/v2/shopify_pixel.

US connection, 2026-10-15, Reject run 1·RULE-STORE-J-TIKTOK-01

analytics.tiktok.com sent 8 requests after Reject All

high

After Reject All, analytics.tiktok.com received 8 requests, of which 4 were POST /api/v2/shopify_pixel. The product page sent Pageview and ViewContent. The collection page sent Pageview and collection_viewed. context.user.anonymous_id equaled the _ttp cookie and did not change across the click. external_id equaled shopify_client_id.

Evidence IDs:EV-TT-REJECTEV-TT-ACCEPTEV-TT-IDEV-COOKIE-TTPEV-COOKIE-SCID

Suggested next step: On a later capture, count analytics.tiktok.com requests after Reject All and compare anonymous_id with the _ttp cookie name.

Store J, captured from a US connection on 2026-10-15 and anonymized.

Report contents

Reports document technical findings, detected tracking behavior, potential compliance risk, and recommended fixes.

01

Cookies and requests

Third-party domains, scripts, cookies, and network requests observed across scenarios.

02

Evidence

Every finding links to requests, cookies, CMP actions, and screenshots.

03

Recommended fixes

Technical remediation steps and specific test cases for engineering review.

04

Scope boundaries

Clear technical distinctions between observed browser events and unobserved flows.

Audit process

  1. store-j.example

    STEP 01

    Enter your store URL

    Submit your public HTTPS storefront address. No theme code changes required.

  2. USEU freshEU rejectCA GPC

    STEP 02

    Browser audit

    An automated browser visits your storefront to record network requests, cookies, CMP events, and screenshots.

    The free audit runs the US baseline. EU and California scenarios are paid regional audits.

  3. Evidence IDEV-TT-REJECT

    STEP 03

    Report review

    Open the technical report in your private workspace to inspect findings, requests, and recommended fixes.

Pages opened

Each scenario opens the URL you submit. A same-origin scan may also open a linked product, cart, privacy, or cookie page within the page and time limit. Checkout can stay out of scope when it uses another host or needs a filled cart.

Theme, app embed, and web pixel behavior is recorded from requests the browser can see. This audit is not a Shopify app and does not modify the store. This is a technical record, not legal advice.

Checklists

Storefront checks

Four pages for the next storefront visit: which test to run, which files to keep, whether Reject takes as many clicks as Accept, and a Shopify GPC pair.

Audit pricing

Free US-baseline audits are open. EU ($49), California ($49), and Global 2 ($79) are paid one-time audits after sign-in.

US Baseline

Available now

One clean US-baseline browser session outside California.

$0/ audit
  • Fresh visit without consent actions
  • Cookies, requests, scripts inventory
  • Private report in customer workspace

EU GDPR

Pay as you go

Three EU consent scenarios (Fresh, Reject all, Accept all).

$49/ one-time
  • CMP interaction and verification
  • Consent gating evaluation
  • Evidence closure & retest IDs

California

Pay as you go

California baseline and Global Privacy Control (GPC) comparison.

$49/ one-time
  • Header and DOM GPC verification
  • Sale/share advertising delta
  • Evidence closure & retest IDs
GEO AuditLive

Up to 50 same-origin pages · $9.90 one-time credit

$9.90/ one-time
  • Technical crawl across 50 pages
  • Structured data & hydration checks
  • Technical crawl without search ranking guarantees.

If a paid regional audit fails coverage twice, the order is refunded in full.

View pricing details

Frequently asked questions

Scope, methods, and delivery for storefront audits.

What does the audit record?
Cookies, local storage, network requests, loaded scripts, CMP actions, vendor signals, screenshots, and scenario timestamps.
Does the audit modify my website?
No. The system visits your publicly accessible HTTPS URL as a regular visitor.
What are the regional audit scenarios?
EU fresh, EU reject-all, EU accept-all, California baseline, and California GPC. These belong to paid regional audit tiers.
Is the report a legal opinion or certification?
No. Reports record technical findings, detected tracking behavior, potential compliance risk, and recommended fixes for engineering and operations teams.
Can I review the report format beforehand?
Yes. The public sample report is an anonymized Store J capture from a US connection on 2026-10-15.
What happens after submitting a storefront URL?
You sign in if not already authenticated, verify scope, and the audit job runs in the background. The final report is saved to your account.
Are regional audits available for purchase today?
Yes. After sign-in, Billing sells EU ($49), California ($49), and Global 2 ($79) as one-time audits. The free path remains a US-baseline visit outside California. Reports stay technical findings, not legal certification.
Is ConsentProbe the consentprobe package on npm?
No. ConsentProbe is the web-based Shopify and DTC store audit at consentprobe.com. The open-source command-line tool named consentprobe on npm is a separate project. We didn't build it and we don't maintain it.

Start audit

Run a free US-baseline audit

Submit your storefront URL for one US visit outside California. EU and California scenarios are separate paid products.

Start free US auditView sample report
Cookie and marketing pixel audits | ConsentProbe