Cookie and Tracking Audit Plan
Inventory trackers and consent behaviour on a website.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Plan an audit of cookies and trackers on my website. Website and platform: [SITE_PLATFORM]. Analytics, advertising and embedded tools: [TOOLS]. Where visitors come from: [VISITOR_REGIONS]. Current consent banner behaviour: [BANNER_BEHAVIOUR]. Write an audit procedure: open the site in a clean browser profile and record cookies and requests before any consent, after rejecting, and after accepting; list each tracker, purpose, duration and provider; compare with the privacy notice; and test that rejecting actually stops non-essential tracking. Provide a results table template and a remediation list. Explain what to ask vendors about data processing. Mark rules about consent, cookies and regional requirements as [VERIFY] for [JURISDICTION] and recommend legal review. Add a retest schedule after any change to the site, a template for documenting vendor responses, and a simple severity ranking for findings such as tracking before consent or undisclosed trackers. Include guidance on tag manager review and on blocking trackers by default until consent is given, to be implemented with the web team. Defensive purposes only. No malware, no credential theft techniques, no instructions for gaining unauthorised access; explain how to detect and prevent instead.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into ChatGPT, Gemini, Claude or another assistant.
See an example result (fictional data)
Procedure: clean browser profile. Record cookies and requests (a) before choosing, (b) after Reject all, (c) after Accept all. Findings table (example) Tracker | Provider | Purpose | Duration | Before consent? | After reject? analytics_id | Analytics A | Statistics | 2 years | Yes (problem) | Yes (problem) ad_pixel | Ads B | Advertising | 90 days | No | No Compare with the privacy notice; undisclosed tracker found. Remediation: block by default until consent; update the notice. Vendor questions: where is data processed? Retention? Retest after every site change. Consent rules by region [VERIFY]; legal review.
Illustrative only, made-up data. Your results will differ and must be reviewed.