Global Privacy Control Checker - Does Your Site Honor Opt-Out?
Pricing
$5.00 / 1,000 site auditeds
Global Privacy Control Checker - Does Your Site Honor Opt-Out?
California and other US states require sites to honor the Global Privacy Control opt-out signal. This Actor visits a site normally and again with Sec-GPC: 1, compares which ad pixels and cookies still fire, and gives a verdict per site. Two-visit check, not legal advice.
Pricing
$5.00 / 1,000 site auditeds
Rating
0.0
(0)
Developer
mohamed alaya
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
a month ago
Last modified
Categories
Security
Limited permissionsShare
Visits a website normally, then again sending the Global Privacy Control signal (Sec-GPC: 1 plus navigator.globalPrivacyControl), and compares which advertising and analytics trackers fire and which tracking cookies are set. Gives a verdict per site.
For US privacy counsel, compliance teams and agencies checking California (CCPA/CPPA) and other state opt-out rules.
Input examples
{ "urls": ["https://www.example.com/"] }
{ "datasetId": "YOUR_MAPS_DATASET_ID", "websiteField": "website", "maxUrls": 40 }
US view through an Apify US proxy:
{ "urls": ["https://www.example.com/"], "proxyConfiguration": { "useApifyProxy": true, "apifyProxyCountryCode": "US" } }
Input guide
| Field | Meaning |
|---|---|
urls, datasetId, websiteField | Sites to test; dataset website column optional |
settleSeconds | Seconds to record after load, in both visits |
maxUrls, concurrency, locale, proxyConfiguration | Size, speed, language, proxy |
Output (one row per site)
| Field | Meaning |
|---|---|
verdict | HONORED (ad/social trackers fire normally, none with GPC), PARTIAL, NOT_HONORED, NO_ADVERTISING_TRACKERS, NO_TRACKERS |
stillFiringUnderGpc[] | Advertising/social hosts contacted although GPC was on |
disappearedUnderGpc[] | Hosts contacted only in the normal visit |
adCookiesStillSetUnderGpc[] | Advertising-looking cookies still set with GPC |
gpcWellKnown | Result of /.well-known/gpc.json (found, gpc: true, last update) |
pageReadsGpcSignalInJs | Whether a script read navigator.globalPrivacyControl |
normalVisit, gpcVisit | Tracker hosts (operator, country, category) and tracking cookies of each visit |
findings[] | For example TRACKERS_FIRE_WITH_GPC, DECLARES_BUT_DOES_NOT_HONOR |
Sample (shortened):
{ "type": "site", "url": "https://www.espn.com/", "verdict": "HONORED","verdictExplanation": "Advertising/social trackers fired in the normal visit (36) but none fired when GPC was sent.","disappearedUnderGpc": ["securepubads.g.doubleclick.net", "ib.adnxs.com"], "gpcWellKnown": { "found": false } }
Use it with
Google Maps scraper -> this Actor to find non-compliant local businesses; consent-mode-v2-checker and gdpr-risky-embeds-checker for the EU side.
FAQ
Is "NOT_HONORED" proof of a violation? No. It means ad/social trackers loaded despite GPC. A loaded ad script is a signal to review, not proof that data was sold or shared.
Why can two runs differ? Ad tech changes between page loads. Re-run before drawing conclusions.
Honest limits
Two anonymous visits, no banner clicked, from a datacenter IP (US proxy optional). Server-side sharing cannot be seen. The cookie check is name-based and the tracker list covers about 90 well-known services. Public pages only. Not legal advice.
Price
$0.005 per site audited (site-audited). Errors free. Example: 40 sites = $0.20.