Skip to content

Core concepts

Cookie scanner

How automatic scanning builds and refreshes your cookie inventory.

The scanner crawls your public pages and records the cookies they set. Scanning is only available for a domain you have verified (DNS TXT record, .well-known file, or homepage meta tag).

What it detects

  • Cookies set by your pages, with name, domain, and expiry.
  • With the default HTTP engine, cookies sent in Set-Cookie response headers. An optional headless-browser engine (a server setting) also runs page JavaScript, so it catches cookies that scripts set in the browser.
  • The consent platform already on the page, if any (browser engine), along with the cookies and vendors it declares.

Scheduling

Trigger a scan anytime from the dashboard or via the API. Each site also has a re-scan frequency setting; automatic re-scans run when the server has scheduled scanning enabled.

Categorization

Detected cookies are matched against a built-in list of well-known services and assigned one of the banner's categories — Necessary, Preferences, Analytics or Marketing. Cookies that match nothing are listed as Uncategorized.