# Cookie & Tracker Scanner - Cookies + Analytics/Ad Tags (No Key) (`ninhothedev/cookie-tracker-scanner`) Actor $0.5/1K 🔥 Cookie & tracker scanner! Cookies + analytics/ad trackers (GA, Meta Pixel, Hotjar) on any URL. No key. JSON, CSV, Excel or API in seconds. Run privacy & GDPR audits ⚡ - **URL**: https://apify.com/ninhothedev/cookie-tracker-scanner.md - **Developed by:** [ninhothedev](https://apify.com/ninhothedev) (community) - **Categories:** Developer tools, Automation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing from $0.50 / 1,000 results This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are web data automations that power AI and operations. They run on the Apify platform to scrape websites, process data, connect APIs, and automate workflows. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js/docs.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python/docs.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## Cookie & Tracker Scanner 🍪🔎 **Scan any URL for the cookies it sets and the third-party analytics & advertising trackers it loads — in seconds, with no API key.** Built for privacy engineers, GDPR/ePrivacy auditors, adtech researchers and compliance teams who need fast, structured evidence of what a web page is actually doing. Point it at a list of URLs and get back, per page: every cookie parsed from the `Set-Cookie` response headers (name, domain, `Secure`, `HttpOnly`, `SameSite`) plus a list of detected trackers (Google Analytics, Meta Pixel, Hotjar, TikTok Pixel, and 11 more) with the evidence URL that triggered each match. --- ### Why use it - **GDPR / ePrivacy audits** — document cookies and trackers set *before* consent, check `Secure`/`HttpOnly`/`SameSite` hygiene, and build an evidence trail for your cookie policy or DPA. - **Adtech & martech research** — see which analytics and ad platforms a site (or a whole list of competitors) runs. - **Compliance monitoring** — re-run against your own domains on a schedule to catch a rogue pixel someone dropped into a tag manager. - **Competitive intelligence** — map the measurement and advertising stack of any site. ### What it detects **Cookies:** every `Set-Cookie` header, parsed into `{name, domain, secure, httponly, samesite}`. **Trackers (15 signatures):** Google Analytics / gtag, Google Ads, Meta Pixel, Hotjar, Mixpanel, Segment, Amplitude, HubSpot, Intercom, TikTok Pixel, LinkedIn Insight, Cloudflare Insights, Plausible, Matomo, Yandex Metrica. Each detection includes the **evidence** (the script/resource URL or snippet that matched) and is flagged as analytics or advertising, rolled up into `has_analytics` / `has_ads` booleans. ### Input | Field | Type | Description | |-------|------|-------------| | `mode` | select | Operation mode. Currently `scan` (cookies + trackers). | | `urls` | array | Page URLs to scan. Bare domains are auto-prefixed with `https://`. | | `maxItems` | integer | Max URLs to scan per run (1–1000, default 100). | ```json { "mode": "scan", "urls": ["https://www.cnn.com", "https://techcrunch.com"], "maxItems": 100 } ```` ### Output One dataset item per URL: ```json { "url": "https://www.theverge.com", "final_url": "https://www.theverge.com/", "cookie_count": 2, "cookies": [ {"name": "vmidv1", "domain": "www.theverge.com", "secure": true, "httponly": false, "samesite": "Lax"} ], "tracker_count": 2, "trackers": [ {"name": "Google Analytics / gtag", "category": "analytics", "evidence": "https://www.googletagmanager.com/gtag/js?id=G-..."}, {"name": "Google Ads", "category": "ads", "evidence": "https://googleads.g.doubleclick.net/..."} ], "has_analytics": true, "has_ads": true, "source": "cookie-scanner", "scraped_at": "2026-07-24T18:20:00+00:00" } ``` ### Pricing Runs on tiny compute (512 MB) — roughly **$0.5 per 1,000 URLs** scanned, plus Apify platform usage. Pay only for what you scan. ### Notes & limits - Analyzes the **initial server response** (HTML + headers). Trackers injected purely client-side after heavy JS execution may not appear; most tags are present in the initial document or its tag-manager snippet. - This is a passive, read-only auditing tool. It does not accept or reject consent banners on your behalf. ### Related actors - [HTTP Headers Inspector](https://apify.com/ninhothedev/http-headers-inspector) - [Website Tech Stack Detector](https://apify.com/ninhothedev/website-tech-stack-detector) - [Security Headers Checker](https://apify.com/ninhothedev/security-headers-checker) - [SSL Certificate Checker](https://apify.com/ninhothedev/ssl-certificate-checker) # Actor input Schema ## `mode` (type: `string`): Operation mode. 'scan' fetches each URL and returns its cookies plus any detected third-party analytics and advertising trackers. ## `urls` (type: `array`): List of page URLs to scan. Each URL is fetched once; its Set-Cookie response headers and HTML are analysed. Bare domains are auto-prefixed with https://. ## `maxItems` (type: `integer`): Maximum number of URLs to scan in this run. Extra URLs beyond this cap are ignored. Range 1-1000. ## Actor input object example ```json { "mode": "scan", "urls": [ "https://www.cnn.com", "https://techcrunch.com" ], "maxItems": 100 } ``` # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "urls": [ "https://www.cnn.com", "https://techcrunch.com" ] }; // Run the Actor and wait for it to finish const run = await client.actor("ninhothedev/cookie-tracker-scanner").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "urls": [ "https://www.cnn.com", "https://techcrunch.com", ] } # Run the Actor and wait for it to finish run = client.actor("ninhothedev/cookie-tracker-scanner").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "urls": [ "https://www.cnn.com", "https://techcrunch.com" ] }' | apify call ninhothedev/cookie-tracker-scanner --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=ninhothedev/cookie-tracker-scanner", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "Cookie & Tracker Scanner - Cookies + Analytics/Ad Tags (No Key)", "description": "$0.5/1K 🔥 Cookie & tracker scanner! Cookies + analytics/ad trackers (GA, Meta Pixel, Hotjar) on any URL. No key. JSON, CSV, Excel or API in seconds. Run privacy & GDPR audits ⚡", "version": "0.1", "x-build-id": "fPJO8qDzcL5n7Whik" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/ninhothedev~cookie-tracker-scanner/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-ninhothedev-cookie-tracker-scanner", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/ninhothedev~cookie-tracker-scanner/runs": { "post": { "operationId": "runs-sync-ninhothedev-cookie-tracker-scanner", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/ninhothedev~cookie-tracker-scanner/run-sync": { "post": { "operationId": "run-sync-ninhothedev-cookie-tracker-scanner", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "urls" ], "properties": { "mode": { "title": "Mode", "enum": [ "scan" ], "type": "string", "description": "Operation mode. 'scan' fetches each URL and returns its cookies plus any detected third-party analytics and advertising trackers.", "default": "scan" }, "urls": { "title": "URLs", "type": "array", "description": "List of page URLs to scan. Each URL is fetched once; its Set-Cookie response headers and HTML are analysed. Bare domains are auto-prefixed with https://.", "default": [ "https://www.cnn.com", "https://techcrunch.com" ], "items": { "type": "string" } }, "maxItems": { "title": "Max items", "minimum": 1, "maximum": 1000, "type": "integer", "description": "Maximum number of URLs to scan in this run. Extra URLs beyond this cap are ignored. Range 1-1000.", "default": 100 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```