See what your website actually shares.
See what your website actually shares — with whom, when, and before anyone touches your consent banner.
Free, no account, about a minute. We check up to five pages before consent, after Reject All, and with a Global Privacy Control signal.
- 11
- Third parties
- 4
- Ad / marketing
- 3
- Before consent
- 14
- Cookies
- Before consent
3 third-party requests occurred before any consent interaction
connect.facebook.net · googleads.g.doubleclick.net · static.hotjar.com
- Session replay
Session replay technology observed on 2 pages
Records mouse movement, scrolling and form interaction.
- GPC
No observable change when Sec-GPC: 1 was sent
Same 11 third parties contacted with and without the signal.
- Cookie lifetime
4 cookies set for longer than 12 months
_ga expires in 730 days.
Tag managers change. Plugins update. Your privacy posture drifts.
Most teams find out what their site shares when someone complains. These are the four questions we answer.
Catch what fires before consent
Most consent problems are not the banner — they are the tags that already ran before anyone clicked it. We record the page in that exact state.
See what Reject All actually does
We load your site three ways: untouched, after Accept All, and after Reject All. Then we show you what changed between them.
Test Global Privacy Control
We send Sec-GPC: 1 and compare the result against a normal visit, so you can see whether anything responds to it.
Get evidence, not adjectives
Every finding links to the request, cookie or screenshot behind it, with a timestamp. Your developers can act on it without re-testing.
How it works
- Step 1
We load your pages in a real browser
Chromium, not a text fetch — so tag managers, scripts and consent tools behave the way they do for an actual visitor.
- Step 2
We record every request, cookie and storage key
Four times over: before any consent interaction, after Accept All, after Reject All, and with a Global Privacy Control signal.
- Step 3
You get a score, findings and the proof
A published scoring rubric, findings ranked by severity and confidence, and the evidence attached to each one.
A privacy scanner should not be another thing collecting data.
Query strings on your site routinely carry your own visitors’ personal information. So we never store them. We keep the host a request went to and a hash of the path — never the full URL.
Same with browser storage: we record which keys exist, never what is inside them. We are inventorying your site, not reading your users’ data.
And this site runs no third-party trackers at all. No advertising pixels, no session replay, no cross-site anything. When the scanner opens, we will publish our own scan of this domain and you can re-run it yourself.
Sasquatch privacy facts
- Account required to scan
- No
- Ads
- No
- Cross-site tracking
- No
- Data sold
- No
- Third-party trackers on this site
- None
- Analytics
- Aggregate only
- Storage values recorded
- No — keys only
- Full URLs stored
- No — host plus a path hash
Pricing
Every price is on this page. There is no “contact sales” gate on anything you could reasonably buy yourself.
Free scan
$0
Check a single site in about a minute. No account.
- 1 domain, up to 5 pages
- Third-party request inventory
- Cookie table
- Basic Global Privacy Control check
- Privacy score and top findings
Full Privacy Audit
$99one time
A complete picture of one site, with the evidence attached.
- Up to 100 pages, discovered from your sitemap
- Before consent, Accept All and Reject All compared
- Global Privacy Control comparison
- Vendor inventory with categories and confidence
- Findings with the hosts behind each one
- The scoring rubric that produced your number
Monitor
$49per month
Know when your site starts sharing something new.
- 1 site, up to 25 pages
- Monthly scan
- Alerts when trackers change
- Change history
Pro
$99per month
Weekly checks and the full consent test, kept over time.
- Larger crawl
- Weekly scans
- Consent and GPC testing
- Full history
- Scheduled reports
- Multiple alert recipients
Agency
$249per month
Run privacy checks across a client portfolio.
- About 10 websites
- Client management
- White-label PDF reports
- Client dashboards
- Exports
Buy a Full Privacy Audit
Up to 100 pages, every consent state compared, Global Privacy Control tested, and the evidence behind each finding. $99, once.
Larger sites, multiple domains, SSO and API access start at $499 per month. Talk to us.
Questions
- Is this legal advice?
- No. We report what your site technically does — which third parties it contacts, when, and under what conditions. Whether that meets a particular legal obligation is a question for your counsel. We deliberately write findings as observations, not verdicts.
- Do I need to install anything?
- No. There is no script to add, no tag to deploy and no code change. We visit your site the same way any visitor does.
- Will scanning slow my site down?
- No. We honour robots.txt crawl-delay, and we never run two scans against the same site at once. A free scan is a handful of page loads.
- Can I scan a site I do not own?
- You can run a basic scan of any publicly reachable homepage. Deep crawls, scheduled monitoring and stored history require you to verify that you control the domain, by DNS record, an HTML file or a meta tag.
- How is the score calculated?
- From a published rubric. Every site starts at 100 and loses weighted points against rules we document openly — third-party requests before consent weigh heaviest, then session replay, then cookie lifetime. A score you cannot reproduce is a score you should not trust.
- Do you publish my results?
- Never, unless you explicitly choose to. We do not publish scans of other companies for search traffic.
Built by Saasquatch Labs
We build useful everyday software that does not need surveillance to pay for itself — photo tools that never upload your photos, a job tracker that does not sell your search, a social platform without an advertising profile. Sasquatch Privacy is the same idea pointed at the web itself.
Sasquatch Privacy provides technical privacy observations and is not legal advice.