Provendly
Recorded 10 Aug 2026, 09:14 UTC

+0.36sAd networks knew someone was on the page. The cookie banner hadn’t even been drawn yet.

That trace is a real recording of a real homepage. Every dot is one request that left the browser. Not one of them waited to be asked. Provendly records yours every day and tells you the moment it changes.

Free, no account. About 30 seconds. You get a shareable report link.

theguardian.combanner untouched
01s2s3s4s5s
  • +0.36sGoogle DoubleClick / Display & Video 360www3.doubleclick.net
  • +0.39sAmazon Advertisingc.amazon-adsystem.com
  • +0.39sGoogle Ads Conversion / Remarketingwww.googleadservices.com
  • +0.71sCriteostatic.criteo.net
  • +1.04sThe Trade Deskmatch.adsrvr.org
  • +2.14sLinkedIn Insight Tagpx.ads.linkedin.com
18 requestsreached 5 advertising networks before the banner was even drawn at +1.18s.
sent before any consent choicesent after a choice was recordedno consent choice was ever recorded
Field study · 410 US dental practices367 observed · 11 Aug 2026
64.3%
sent data to a third party before any consent choice
1.63s
median time to the first third-party transmission
6.3%
showed a consent banner at all
94%
would produce at least one finding on the first scan

Every site loaded twice in a real browser - banner untouched, then reject activated. Rates are stated against sites actually observed, never against sites attempted.

It isn’t an accusation. It’s a measurement.

The same instrument, pointed at a site that holds its tags until someone actually chooses. Nothing crosses the line early. This is what you want your own trace to look like.

nature.comreject honoured
02s4s6s8s10s

Reject clicked at +7.31s - everything after it is a tag that was allowed to run.

Three things arrive, on a schedule

A scan you run once tells you about today. The product is the series.

Every day

A dated recording

Six consent states, each in a clean browser. Every request timestamped from page load.

shop.northwind.example · 11 Aug
The day it changes

An email, before your lawyer

Only on genuine change, so it stays worth opening. Improvements are reported too.

critical

Meta Pixel now continues sending after the reject control is activated. It did not do this yesterday.

Whenever you need it

An Evidence Pack

Any date range as one document, with an integrity proof anyone can check without us.

record #42 · 11 Aug 2026
record_hash = 9f4c1e7b3a08…
chain_hash  = 2de1525aa71f…
chain verified · 42 records

One row per site. One glance.

Agencies watch a hundred of these. The trace column is how you know which client to open first, without reading a number.

Open the live demo
Northwind Storecritical
shop.northwind.example
6
before
2
after reject
Meridian Healthhigh
meridianhealth.example
3
before
0
after reject
Calder & Wynn LLP
calderwynn.example
0
before
0
after reject
Palisade Cloudinfo
palisade.example
2
before
0
after reject

Priced per site, not per scan

Full comparison →
Free
$0/mo
  • 1 site, scanned weekly
  • Public shareable report
  • Change alerts by email
Start free
Startercommon
$49/mo
  • 3 sites, scanned daily
  • Evidence Packs for any date range
  • Tamper-evident scan history
Growth
$149/mo
  • 15 sites, scanned twice daily
  • All jurisdiction rulesets
  • Up to 10 pages per site
Agency
$499/mo
  • 100 sites, scanned twice daily
  • Client-ready Evidence Packs
  • 50 team members with per-site access
Letter already arrived?

Get your own record of what your site did - today.

  • Immediate deep scan across every consent state, on up to 25 pages
  • A complete, dated Evidence Pack you can forward to your counsel
  • Backdated scan history where our public index already covered your domain
  • Full tamper-evident integrity record and verification instructions
  • 90 days of daily monitoring included, so you can show the position changed
$899

One-off. Report ready in under an hour.

Start the incident report

No sales call. Includes 90 days of monitoring.