Tag & Cookie Sentinel
After installing the extension, navigate to any website. Tag & Cookie Sentinel begins monitoring immediately from the moment the page starts loading — no setup or configuration is needed.
A high-level snapshot of the current page: all detected tags with their colour-coded vendor dots, a cookie breakdown by purpose (Analytics, Advertising, Authentication, etc.), and a list of any pre-consent activity.
A filterable table of every tag detected on the page. Columns show the tag name, vendor, category, total fire count, number of fires before consent, any PII keys found in the payload, and a sample payload snippet. Use the search box or the category dropdown to narrow the list.
A filterable table of every cookie set by the page. Each row shows the cookie name, domain, classified purpose, vendor attribution, first/third-party status, session vs persistent type, security flags present, missing flags (e.g. Secure, HttpOnly, SameSite), and whether it was set before consent.
A chronological timeline of all events — tag fires, cookie sets, and consent interactions — since the page loaded. Use the Pre-consent only toggle to show only events that occurred before consent was recorded.
Six compliance cards with red / amber / green severity ratings covering: pre-consent tag fires, PII transmission, insecure cookies, pre-consent cookies, third-party cookie exposure, and overall consent status.
webRequest API to observe network requests in real time. Because tags and cookies can be present on any website, the extension needs <all_urls> access to monitor whichever page you are currently viewing. It does not collect or store data from pages you are not actively inspecting.document_start — before any other scripts run. It watches for clicks on known consent management platform (CMP) buttons (OneTrust, CookieBot, Didomi, TrustArc, and others) and monitors writes to localStorage that match consent key patterns. Any tag fire or cookie set that occurs before one of these consent signals is flagged as pre-consent.email, ph, uid) appear in the tag payload. It does not log, store, or display the actual values of those fields, to avoid the extension itself handling personal data.webRequest observer API — it observes requests without intercepting or delaying them. The content script is minimal and runs only to detect script injections and consent interactions. There is no measurable impact on page load performance.If you have a question not covered above, or you have found a bug, please get in touch:
Email us at
support@cchk.infoPlease include the website URL where the issue occurred and a description of what you expected to see vs. what you saw.