Cookie & Tracker Exposer
Last updated:
One-click privacy audit for any website. Enumerates every script-readable cookie (HttpOnly and third-party cookies are invisible to JavaScript), localStorage and sessionStorage keys, loaded scripts with third-party flags, 50+ known tracking platforms, fingerprinting indicators, and every third-party domain the page contacted (including XHR, fetch and beacon requests via the Resource Timing API). Generates a privacy score from 0-100 with detailed findings.
Drag to your bookmarks bar:
Expose TrackersRuns on any website — requests come from your browser, not MaxIntel's servers.
Install the bookmarklet above, then use it on any website
Cookie & Tracker Exposer — Website Privacy Audit
Modern websites embed extensive tracking infrastructure: analytics platforms, advertising pixels, session replay tools, and fingerprinting scripts. This tool provides a comprehensive inventory of everything a website deploys to monitor your activity, scored on a privacy risk scale from 0 to 100.
What Gets Scanned
The bookmarklet inventories all script-readable cookies currently set, localStorage and sessionStorage contents, every loaded script (marking third-party sources), known tracking platform patterns across 50+ common trackers, every third-party domain the page connected to (via the Resource Timing API, so XHR/fetch/beacon traffic is included), and browser fingerprinting indicators — evidence of Canvas, WebGL, AudioContext, font, hardware and WebRTC probing in the page's inline scripts.
- Third-Party Scripts
- Scripts loaded from domains other than the site you are visiting. These are the primary mechanism for cross-site tracking.
- Browser Fingerprinting
- Techniques that use browser and device characteristics to create a unique identifier without cookies. Canvas rendering, WebGL parameters, and hardware specs are commonly used signals.
🍪 Cookie & Tracker Exposer — FAQ
Does this detect all trackers?
It detects 50 known tracking platforms by pattern matching against script URLs and page HTML. Custom or obfuscated trackers may not be detected. The third-party domain list provides additional coverage.
Can I use this on any website?
Yes — the bookmarklet runs on any website. It reads cookies, storage, and DOM elements that are accessible in your browser session.
Does it block trackers?
No — this is an audit tool, not a blocker. It identifies what is tracking you. For blocking, use tools like uBlock Origin or Privacy Badger.
Why does the cookie value show as truncated?
Cookie values are truncated to 100 characters in the display for readability and to reduce data transfer size. The full values remain in your browser.
Is localStorage data sensitive?
It can be. Some sites store authentication tokens, user preferences, or tracking identifiers in localStorage. Unlike cookies, localStorage data does not expire automatically and persists until explicitly cleared.
Read the guide: Delete your advertising ID — how ad trackers link your browsing to your phone, and how to reset it.