CookieYes
Privacy & Compliance Software
CookieYes is a Google-certified Consent Management Platform that helps websites and eCommerce businesses manage cookie consent, privacy preferences and tracking…
- To verify
Consent · Audit
Find out exactly what data your store collects and where it goes
I run a technical audit of the cookies, tags and network requests on your WooCommerce store and hand over a list of fixes ranked by risk and effort.
In short
A privacy and tracking audit is a technical check of what a store collects, when it collects it and which vendors receive the data, before and after consent. I analyse cookies, scripts, network requests, plugins and the Google Tag Manager container, including personal data that may leak through URLs or parameters. It is for WooCommerce stores that want an accurate picture before investing in new tools or campaigns.
Why an audit is worth it
-
Nobody is sure what is installed
Plugins, themes and old campaigns have left scripts that are still active and still send data to vendors nobody uses any more.
-
Personal data in the wrong places
Email addresses or names appear in order confirmation URLs and end up in analytics or advertising tools.
-
Decisions made without a diagnosis
The store is about to change CMP, theme or email platform without knowing what the current setup actually does.
How I run the audit
I visit the store as a new visitor, under different consent scenarios, and record every cookie and network request. I then cross-check that against the GTM container, the installed plugins and the CMP configuration to trace each issue back to its source.
- Tests in clean sessions: no choice, accept all and reject all
- The full journey, from the home page to the order confirmation
- Searching URLs, parameters and payloads for personal data
- Each issue traced to its source: theme, plugin, GTM or CMP
What you get
-
Cookie and script inventory
A list of the cookies, scripts and vendors found, with when each one is activated and where it comes from.
-
Data flow map
An overview of what data leaves the store, which vendors receive it and under which consent scenario.
-
Prioritised issue list
Each issue with a description, evidence, risk level and estimated effort to fix.
-
Remediation plan
Concrete steps for each issue, showing what I can handle and what sits with your developer.
-
Walkthrough session
A call to go through the findings with you and whoever looks after the store or legal matters.
Audit phases
-
Access and context
I get read access to GTM, GA4 and the WordPress dashboard, and learn which tools the store uses and which markets it sells into.
-
Collection
I walk through the store under each consent scenario and record cookies, network requests and events.
-
Analysis
I cross-check what I observed against the existing configuration and identify the source and risk of each issue.
-
Report and walkthrough
I deliver the report, present the findings and leave a remediation plan ready to act on.
Tools I use
- Chrome DevTools
- Google Tag Assistant
- Google Tag Manager
- GA4
- Screaming Frog SEO Spider
Is the audit a legal assessment?
No. It is a technical audit showing what the store actually does with cookies, scripts and data. The findings are useful to your lawyer or data protection officer, but they do not replace a legal assessment.
Do I need to give edit access?
Read access to GTM, GA4 and ideally the WordPress dashboard is enough for the audit. Much of the analysis is done from the visitor's side, with no access at all. I only ask for edit access if you decide to go ahead with the fixes.
Who makes the fixes after the audit?
It can be me, your developer or a mix of both. The remediation plan separates what involves GTM and the CMP, which I usually handle, from what involves the theme or server. The decision is yours.
Related tools
-
Usercentrics
Privacy & Compliance Software
Usercentrics is a Consent Management Platform that helps eCommerce brands collect, manage and document user consent while controlling cookies, trackers…
- To verify
Some links are affiliate links: if you sign up, I may earn a commission at no extra cost to you. It never changes my assessment. How this works
Related articles
CCPA vs GDPR: What’s the Difference?
If your store sells to customers in both California and the European Union, you’re likely already navigating two of the most significant…
Best Google Analytics Alternatives for Privacy-Focused WordPress Sites
Data privacy is no longer a peripheral concern for IT departments; it has become a central pillar of digital governance that directly…
What Are the Best SaaS Deals for Black Friday and Cyber Monday?
The standard approach to Black Friday often focuses exclusively on customer-facing promotions, but the real strategic advantage lies in upgrading the underlying…
Want an accurate picture of what your store collects?
Book a discovery call to scope the audit, or request a proposal through the contact form.