Everything Privara does

Website tracker scans

A separate worker runs Chromium with your pages' scripts, the way a visitor's browser does.

• Real browser, every page. Crawls your site from the start address up to your plan's page cap, following robots.txt and identifying itself as PrivaraBot.
• Before and after consent. Recognises common consent banners (OneTrust, Cookiebot, Usercentrics, Didomi, Quantcast, TrustArc, Osano, CookieYes, Shopify and more, plus generic "Accept" buttons), accepts in a fresh browser and visits the pages again.
• Everything recorded. Third-party requests, cookies (name, domain, expiry, first or third party, flags), localStorage and sessionStorage keys, and tracking pixels.
• Safe by design. Every request the browser makes is checked against private and internal network addresses before it goes out.
• Scheduled rescans. Monthly on Starter, weekly on Business and Pro, plus scans you start by hand.

Vendor catalog

• Curated and versioned. About 600 domains from 270+ analytics, advertising, marketing, support, consent, security, payments and platform vendors, with purpose categories and privacy policy links. Each scan records the catalog version it used.
• Unknowns flagged. Anything the catalog doesn't know is marked for review. Classify it once and, if you choose, Privara remembers the mapping for your later scans.

Tracker inventory

• Review every item. Accept the catalog's vendor and category, or reclassify it with your own purpose and note. Bulk-accept identified items when you've checked them.
• Change detection. Each rescan marks what's new, gone, back again or classified differently, and emails your team when something changes.
• Sign-off with a record. When nothing is left to review, sign the inventory off; who and when is kept.
• Exports. The inventory as CSV or PDF, and a cookie table (CSV, Markdown or HTML) ready for your cookie policy.

Data inventory and records of processing

• Systems and processing records. List where personal data lives and what you do with it: purpose, lawful basis, data categories, whose data, recipients, transfers, retention, sub-processors.
• Suggestions from your scans. Privara turns the vendors it found into suggested systems and records, saying what it used and what it inferred. With AI switched on, the wording is drafted from vendor names only. You confirm each one.
• Exports. Records of processing as CSV or PDF, with unconfirmed suggestions marked.

Privacy requests (Business and Pro)

• Hosted request form. Access, deletion, correction and opt-out of sale or sharing, with an email confirmation step (CCPA opt-outs open without one, as the regulations require).
• Deadlines per regime. GDPR and UK GDPR one month, CCPA/CPRA 45 days, opt-outs 15 business days, or your own regime: configurable, with extensions and reminders.
• Tasks per system. Every confirmed system in your data inventory becomes a task, with your instructions for finding or erasing data there.
• Replies you approve. Draft from your templates (optionally tidied by AI), edit, approve, then send. Drafts with unfilled [brackets] can't be approved.
• Audit trail. Every step on a request's timeline: received, confirmed, tasks, extensions, replies, closing.

Team, API and your data

• Team. Invite people on every plan; roles (admin, editor, viewer) on Pro. Only the owner handles billing.
• API (Pro). Read-only REST API for websites, trackers, scans, systems, records and requests (never requester details).
• Export and delete. Download everything as JSON, delete one requester's requests, or delete the workspace.