Know what your website loads before visitors say yes.
Observary opens your pages like a first-time visitor and lists the cookies, scripts and fonts that load before they choose. When something new turns up, you get an alert that names it.
Plans from €15 a month, excluding VAT. No pageview limits.
Before consent new visitor, no choice yet
-
connect.facebook.netMeta Pixel, marketing scriptViolation
-
fonts.gstatic.comGoogle Fonts, web fontViolation
-
PHPSESSIDSession cookie, necessaryCompliant
After consent clicked “Accept all”
-
_gaGoogle Analytics, analytics cookieCompliant
-
www.youtube.comYouTube, embedded videoCompliant
-
widget.example.netNo known vendor yetUnclassified
Needs attention: let the banner hold back Meta Pixel until consent, and host the web font on your own server.
Your website changes every week. A one-off audit doesn’t.
Almost every commercial website loads things from other companies that need consent under the GDPR and the ePrivacy rules: analytics, ad pixels, embedded video, chat widgets, web fonts from another company’s servers.
Most teams don’t know the full list, and it keeps moving. What matters most is what fires before the visitor chooses. European regulators have fined companies for trackers that load before consent, and for banners where “Reject” is harder to find than “Accept”.
-
Week 1 A marketer adds a campaign tag It loads googleads.g.doubleclick.net on every page.
-
Week 2 A plugin updates The new version brings its own script and a cookie.
-
Week 4 An agency ships a landing page With a pixel nobody added to the banner.
With drift monitoring, each of these shows up on the next scheduled scan.
Five steps. Two of them are yours.
You add the site and paste one line of code. Observary does the rest, and keeps doing it on a schedule.
-
You
01 Add your website
You enter your domain. Observary reads your sitemaps and groups your pages by type, before you pay anything.
-
Observary
02 Scan
A real browser loads every page twice: once as a new visitor, once after “Accept all”. Cookies, scripts, iframes, fonts and media are recorded, with what loaded them.
-
Observary
03 Understand
Each finding is matched to a vendor and a category and marked compliant, a violation or unclassified. You get a score and the fixes that matter most, in plain words.
-
You
04 Fix with the banner
The banner comes set up from the scan, with Google Consent Mode when Google tags are present. You paste one line into your site and press Verify.
-
Observary
05 Monitor
Scans repeat on a schedule. When a tracker appears, changes or starts firing before consent, you get an alert that names it and the page.
Steps 2 to 5 repeat on their own: weekly on Pro and up, monthly on Starter.
Something new loads before consent. You hear about it by name.
Like uptime monitoring, but for consent. Each page is compared with its own last visit, so a change is a real change.
- Rescans weekly on Pro and up, monthly on Starter.
- High-severity changes go to your Inbox, and by email to anyone who has drift emails on.
- If your banner snippet disappears, that’s an alert too.
New tracker before consent
- Script
- connect.facebook.net
- Page
- /checkout
- Before this scan
- Not loaded
In your Inbox and by email
Three teams, one tool
Marketers run the banner, privacy teams keep the records, and owners keep an eye on every site.
For marketers
A consent banner that keeps your tags working.
Known trackers wait until a visitor agrees, then load as normal. Google tags get the signals they expect, so your reporting keeps working after the banner goes live.
- Google Consent Mode v2, set before any Google tag and updated on every choice.
- “Reject” is as easy to find as “Accept”.
- One choice across www, shop and blog, and a live preview before you publish.
- Install guides for WordPress, Shopify, Google Tag Manager, Webflow and more.
Verify installation
- Snippet belongs to this domain
- Loads first, not delayed by an optimiser plugin
- Banner shows
- Nothing sets cookies before consent
- Accepting releases trackers
- Consent Mode comes before Google’s tags
- No second consent tool running
For privacy teams
Show an auditor what each visitor saw and chose.
Each decision is logged with the choice, how it was made, and the banner and cookie declaration on screen at the time. IP addresses are never stored.
- No user agent either. The visitor ID is stored as a keyed hash.
- Every version of your cookie declaration is kept, with a diff. Download any of them as PDF or CSV.
- Manual classifications need a reason and stay in an append-only history.
- Kept 12 months on Starter, 36 on Pro and up, then deleted automatically.
| Choice | Categories | Banner | Declaration | Language | Page | Country |
|---|---|---|---|---|---|---|
| Rejected all | Necessary | v7 | v12 | de | /de/ | DE |
| Accepted all | All | v7 | v12 | en | /pricing | IE |
| Custom | Necessary, analytics | v7 | v12 | nl | /nl/blog | NL |
| Accepted all | All | v6 | v11 | fr | /fr/ | FR |
Each record points at the declaration version that visitor could see.
For business owners and agencies
All your websites on one screen, for a flat price.
Each site gets a score and its most important fixes in plain words. No plan limits pageviews or consent decisions.
- 3 websites on Pro, 10 on Business, 25 on Agency, with more domains available.
- Owner, manager and read-only member roles for your team.
- A PDF report per domain, plus CSV exports, ready for a client or a DPO.
-
www.example.comCompliant
-
shop.example.com3 violations
-
blog.example.org2 unclassified
-
www.example.netCompliant
See what your website loads
Add your domain and Observary reads your sitemaps before you pay anything. The first scan is included once your plan is active.