Beyond cookies specifically, most sites also send data to a range of third-party services — analytics platforms, advertising networks, embedded widgets, chat tools — each with its own data handling practices, and most site owners have a far less complete picture of this than they’d expect until it’s actually laid out.
Third-party tracker inventory report
A full inventory of every third party your site quietly sends data to.
- Full backup taken before we start
- If we can’t fix it, you get your money back
- We never ask for your own password
What we need from you
- Access to browse and inspect your site’s network activity
- A list of any third-party services you’re aware of using, as a starting point
- Your preferred report format, if you have one
This or something else?
| You want a full inventory of every third-party service your site sends data to | This fix covers it |
| You specifically want cookies categorised, a narrower related scope | Cookie audit & categorisation report |
| You want the trackers found actually gated behind consent, not just inventoried | Consent-gated script blocking configuration, once you have this report |
| You want IP anonymisation or privacy-focused analytics configuration, a specific fix rather than a broad inventory | IP anonymisation & analytics privacy config |
What we do
- Inspect your site’s actual network activity to identify every third-party service contacted
- Determine what data each service receives and for what apparent purpose
- Cross-reference against your own awareness of what’s installed and why
- Flag anything unexpected, redundant, or with an unclear justification
- Note anything with a notably permissive or concerning data-sharing practice
- Compile findings into a clear, actionable written report
What is included
- A complete inventory of third-party services receiving data from your site
- Purpose and data-type attribution for each, where determinable
- Flags for anything unexpected or worth reconsidering
- A clear, written report
Not included
- Removing or reconfiguring any service identified — quoted separately based on findings
- Ongoing re-scanning as new integrations are added
- Legal interpretation of specific data-sharing agreements or terms
- Cookie-specific categorisation in the same depth as a dedicated cookie audit
Questions about this fix
Why would I not already know everything my site sends data to?
Integrations accumulate over time, often added by different people or agencies across a site's history, and many load additional third-party resources of their own that aren't obvious from the plugin list alone.
What happens if the report finds something concerning?
We flag it clearly and explain what we found and why it's worth attention, though the decision on what to do about it — keep, reconfigure, or remove — is yours to make with that information.
Is this the same as a security audit?
No, this is focused specifically on data flows to third parties for privacy purposes, not a broader security assessment, though the two can sometimes surface related findings.
Will this slow down my site while you're scanning it?
The scanning itself doesn't meaningfully affect site performance for your actual visitors, since it's an inspection process run separately from normal traffic.
How actionable is this report on its own?
It's written to be genuinely useful for decision-making, flagging what's worth a closer look, though acting on specific findings (removing or reconfiguring a service) is typically a separate, follow-up step.
Related fixes
If this is the second time this year
A bad update breaking the site is a symptom of updates not being tested first. Care plans run every update on a staging clone before it reaches your live site, which is the actual fix for this happening again.
Your access, your rules
Create a separate admin account for us and delete it when we are done. For anything else, we get in touch and agree a method — never a form field on this site, never by reply to an email.
We back up first, always
Before anything is touched we take a full backup and keep it for 30 days. If a fix goes wrong, we put the site back exactly as it was.
If it is not what you bought
If the problem turns out smaller than what you ordered, we refund the difference. If it is bigger, we stop and send a quote before doing any extra work.
If we cannot fix it
You get back what we received. Diagnosis is on us — you only pay when the problem is actually solved. The payment processor takes its fee before the money reaches us, so we never hold it and it is not ours to return. That is true here as everywhere else.
If it comes back
Reply within seven days of delivery and we put it back on the bench at no cost. The fix is not finished until it holds.
What we are responsible for
If something goes wrong with a fix, our responsibility is limited to what you paid for it. We take a full backup first so mistakes can be undone, and we tell you before doing anything outside what you bought.