Prove your consent banner actually works
A consent management platform records a visitor’s choices and can hold back the tags it controls. Tags outside its control, such as hardcoded pixels and piggyback scripts, can still fire. DataTrue audits every cookie on every page it visits and simulates real consent states, opt-in and opt-out, to confirm your tags actually stop when a visitor says no.
The full platform, every feature, free for 30 days.
A cookie audit finds every cookie and tracking tag on your site, including third-party and non-compliant ones. Consent validation goes further: it simulates a visitor accepting or rejecting consent and checks that each tag obeys. DataTrue does both, so you can prove your back-end tags honour the choices your banner shows.
Audit every cookie, including the ones you did not set
Run a full-site coverage scan and get back the cookies and tracking technologies it finds on each page, flagged by type, with third-party ones and any your policy doesn’t allow called out. Validate cookie attributes without writing a line of script.
Set a policy, and let each coverage scan enforce it
Mark each tag and cookie as required, allowed, or not allowed, or set a blanket blocklist or allowlist, and DataTrue applies that policy to each coverage scan and alerts you when something breaches it.
This turns “we have a cookie policy” into “our scans prove the policy is being kept.”
How do you test that tags obey consent?
Test opt-in and opt-out states and check what actually fires in each. DataTrue drives the real consent banner, accepts or rejects, and then confirms whether each tag obeyed. The failure that costs money is a banner that shows the right choices while back-end tags fire anyway. Regulators in California and Europe have fined companies whose tags ignored visitors’ choices. A consent-state test fails the moment a tag fires against the choice the visitor made, so a broken consent setup surfaces as a failed test you can act on, well before it surfaces in an audit. See Enforcement Watch for the cases.
How does DataTrue test GPC?
DataTrue loads your site in a browser that broadcasts a GPC signal and confirms your tracking tags stop. GPC is a recognised opt-out signal in 12 US states: 9 require businesses to honour it directly, and 3 accept it through an authorized-agent rule. Other tools test it too. ObservePoint makes GPC a toggle in its audits and journeys, and Tag Inspector tests GPC as one of four named consent conditions.
DataTrue’s edge is running the same GPC test in staging before you publish, and again once it is live. See GPC & Consent Validation for how it works, and the Privacy Resources for which laws apply.
Catch regressions before they ship
New code can silently re-enable a blocked pixel weeks after launch. Run the same consent tests against an unpublished container before the release goes live. And when a scheduled consent test fails, the alert goes wherever your team works, through a webhook to Slack, Microsoft Teams, Jira, or anything else that takes one. See pre-publish tag testing and continuous monitoring & alerting.
Nothing is installed on your site. DataTrue doesn’t ask you to add any script, tag or code to your pages, so there is nothing to remove if you stop.
Find out whether your tags actually honour consent.
Start a free 30-day trialQuestions
What is a cookie audit?
Identifying every cookie and tracking technology on your site, including third-party and non-compliant ones. DataTrue pairs it with consent validation to check tags actually obey the banner.
Isn’t a consent banner enough for compliance?
No. A banner displays choices. It does not guarantee back-end tags obey them. Consent validation tests that they do.
Can you test opt-out and GPC?
Yes. DataTrue simulates opt-in, opt-out, and GPC states and checks tag behaviour in each.
Does DataTrue manage our consent banner?
No. DataTrue validates that your CMP is working. It works alongside your consent management platform and doesn’t replace it.
Which regulations does this help with?
It gives you evidence of what your tags actually do in each consent state. California’s regulator has ordered a company to scan its site for tracking technologies. For which laws apply to your site, see the Privacy Resources on whether your website tracking is legal.
Related: GPC & consent validation, PII leak detection, pre-publish tag testing, continuous monitoring & alerting. Resources: cookie audit, cookie consent banners, user consent compliance with a CMP, is your website tracking legal. Compare: DataTrue vs OneTrust.
Put your tag and consent testing on a schedule
DataTrue runs coverage scans, journeys and consent checks on your live site, reads what each tag sends, and alerts your team when a result changes. There’s nothing of ours to install on your pages.
- Every page, with coverage scans
- Scheduled runs, with alerts when a result changes
- Full journeys, like checkout and signup, in each consent state
- What each tag sent, field by field
- PII detection with test personas
- iOS and Android app testing
- Pre-publish testing for GTM and Adobe Tags
- REST API, plus Slack and Jira alerts
The full platform, every feature, free for 30 days.
