Does your site still fire ad pixels when a visitor sends Global Privacy Control?
Many sites show a cookie banner that "detects" GPC while Meta, TikTok or Google Ads tags keep loading. We are building a monitor that loads your pages with GPC switched on — on a schedule — and records which tracking requests still go out, with timestamped evidence.
Why this matters now
- On September 9, 2025, the California Privacy Protection Agency, together with the Attorneys General of California, Colorado and Connecticut, announced a joint investigative sweep of businesses that may not be honoring opt-out requests sent through Global Privacy Control. Source
- On September 30, 2025, the CPPA announced a $1.35 million fine against Tractor Supply Company — its largest to that date. Among the alleged violations: the company's websites did not process opt-out preference signals such as GPC. Source
- GPC is a browser-level signal: participating browsers and extensions send the
Sec-GPC: 1header and exposenavigator.globalPrivacyControl. Specification
What the monitor will check
- Loads each monitored page in a real browser with GPC on (
Sec-GPC: 1header andnavigator.globalPrivacyControl = true). - Records every request to known advertising and analytics endpoints (Meta, TikTok, Google Ads / DoubleClick, Pinterest, Snap, LinkedIn, X, Microsoft, Reddit, Criteo and more).
- Keeps a timestamped request log plus screenshots as evidence for your privacy, legal or client team.
- Runs daily or weekly and alerts you when a release, a new tag or a CMP change starts firing trackers again (regression alerts).
- Agency view: many client sites in one place, per-client evidence exports.
How it differs from what you already have
| Consent banner / CMP | Free one-off checker | Privacy Signal Monitor | |
|---|---|---|---|
| Purpose | Collects and applies consent choices | Point-in-time test of one URL | Independent, repeated verification |
| Tells you if pixels still fire under GPC | Assumes its own configuration works | Once, at the moment you test | Every run, with request log + screenshots |
| Catches regressions after a release or new tag | No | Only if you remember to re-test | Yes — alert on change |
| Many sites / clients | Per-site setup | One URL at a time | Agency plan, up to 50 sites |
One-off checkers are useful — for example DataGrail's free Consent Checker tests a URL on demand. The monitor is for teams that need to know it stays fixed.
Planned pricing
Planned launch pricing, early-access terms. Nothing is charged to join the list.
$29
per site / month
For a brand or store: one site, monitored daily with GPC on, evidence log and regression alerts.
$299
per month, up to 50 sites
For agencies managing client stores: one dashboard, per-client evidence exports, alerts routed per client.
Join early access
Disclaimer. NormHarbor is a software tool, not legal advice. Results show technical observations about tags and network behaviour; whether your business must honor opt-out preference signals, and how, depends on the laws that apply to you — consult qualified counsel. Regulatory facts above link to their public sources.