Website compliance checklists for cookies, CMP, and GPC

Key review areas

Checklist topics mapped to runtime evidence

Cookie banner and CMP review

Verify banner visibility, reject-all mechanics, accept-all gating, consent storage keys, and vendor blocking.

GDPR/EU runtime review

Compare pre-consent tracking, reject-all requests, and accept-all activations in controlled EU browser sessions.

CCPA/CPRA and GPC review

Test whether Global Privacy Control signals and opt-out preferences change advertising requests and third-party cookies.

CIPA tracking signal review

Inventory third-party scripts, pixels, session replay tools, and identifier transmissions for technical and legal review.

Audit scopes

Choose the framework lens for your report

Shopify baseline

Storefront audit for cookies, marketing pixels, CMP banners, and third-party network requests.

GDPR/EU

EU browser scenarios comparing tracking behavior across pre-consent, reject-all, and accept-all states.

CCPA/CPRA + GPC

California browser scenarios comparing regular visits with Global Privacy Control (GPC) opt-out signals.

Select an audit scope

When to run a runtime audit

Before launching a new storefront theme, checkout app, or landing page.
After adding or updating analytics, ad pixels, live chat, or affiliate scripts.
Before deploying updates to your privacy notice, cookie policy, or CMP banner.
When engineering and marketing teams need concrete network traces before fixing tags.

What the FULL report adds

Executive summary and evidence coverage
Scenario matrix for EU, California, and US profiles
CMP action verification with selectors and screenshots
Inventory of cookies, storage keys, requests, scripts, and vendors
Risk register with prioritized remediation steps
Runtime scope, browser limitations, and environment notes

Audit scope & boundary

A checklist plans the review. A runtime audit tests actual behavior.

ConsentProbe records live browser behavior: cookies, localStorage, HTTP requests, script loaders, CMP actions, screenshots, and vendor detections. Reports highlight potential compliance risks and recommended remediation steps for technical review. These checklists and reports are not legal advice and not a compliance certificate.