Privacy Cookie Vendor Risk Extractor

Extract cookie vendors, purposes, retention periods, data-sharing signals, opt-out links, and privacy risk notes from cookie and privacy pages.

Why This Actor Is Useful

This actor turns cookie-policy and privacy-policy text into a vendor-risk inventory. It is built for users who need more than a list of cookies: vendor names, purpose, retention, opt-out links, sharing signals, and privacy risk all need to be visible in one row.

It only extracts vendors and risks visible in the supplied source. If a banner hides details behind JavaScript, paste the visible policy text into the input.

What It Extracts

• websiteName - Website.
• vendorName - Vendor.
• cookieName - Cookie.
• purpose - Purpose.
• dataCategory - Data category.
• retentionPeriod - Retention.
• optOutUrl - Opt-out URL.
• sharingSignal - Sharing signal.
• riskLevel - Risk level.
• sourceUrl - Source URL.
• evidenceText - Evidence.

Practical Workflows

• Build cookie/vendor inventories for client audits.
• Spot ad-tech and analytics sharing risks.
• Compare retention periods and opt-out coverage across websites.
• Prepare privacy review spreadsheets from public policy text.

Input

Paste one or more public cookie policy, privacy policy, consent vendor, tracking disclosure, or cookie table URLs. The actor scans those pages and extracts cookie vendors, cookie names, purpose, retention, sharing signals, opt-out links, and risk indicators.

• startUrls - Add public cookie policy, privacy policy, cookie table, consent vendor, or tracking disclosure pages to analyze.
• sourceText - Optional: paste cookie table rows, privacy-policy sections, vendor lists, or consent text. Best when the cookie page needs JavaScript or is hard to fetch.
• maxResults - Stop after this many useful rows. Most users can leave this at 100.
• requestTimeoutSecs - How long to wait for each URL. Increase only for slow public pages.

Example Input

{
    "sourceText": [
        "ShopVista cookie policy lists Google Analytics cookie _ga for analytics and measurement, retention 2 years. Advertising cookies from Meta may share identifiers with partners. Opt out at https://shopvista.example/privacy-options.",
        "CloudDesk privacy page: HubSpot cookies track visitor sessions for marketing attribution for 6 months. Data may be shared with CRM and advertising partners."
    ],
    "maxResults": 10,
    "requestTimeoutSecs": 20
}

Example Output

{
    "websiteName": "ShopVista",
    "vendorName": "Google Analytics",
    "cookieName": "_ga",
    "purpose": "analytics and measurement",
    "dataCategory": "identifiers",
    "retentionPeriod": "2 years",
    "optOutUrl": "https://shopvista.example/privacy-options",
    "sharingSignal": "share identifiers with partners",
    "riskLevel": "advertising",
    "sourceUrl": "pasted://source-1",
    "evidenceText": "ShopVista cookie policy lists Google Analytics cookie _ga for analytics and measurement, retention 2 years. Advertising cookies from Meta may share identifiers with partners. Opt out at https://shopvista.example/privacy-options."
}

Reliability Notes

The actor is intentionally lightweight and fast. It does not try to bypass captcha systems, private pages, paywalls, or login walls. When a site blocks direct fetching, paste the public visible text into sourceText; the same actor-specific parser will still produce structured rows.

Limitations

• The actor extracts only information present in the supplied source.
• Missing source details remain blank instead of being guessed.
• Highly unusual wording may require pasted text or cleaner source snippets for best results.

Output

Rows are written to the default Apify dataset with actor-specific fields and source evidence. The output is designed for spreadsheets, dashboards, client audits, procurement notes, SEO reports, developer research, and other marketplace buyer workflows.