✓DisputeKit

For online shops and websites · updated 26 October 2026

Do your trackers stop when visitors say "don't sell my data"?

Regulators now fine businesses whose "Do Not Sell or Share" link or Global Privacy Control signal doesn't actually stop ad pixels, and California plaintiffs sue over pixels, session recording and chat. We test your site in a real browser with the signal on and off, and show you exactly what still loads.

  • Free scan: opt-out link, GPC file, consent tool, trackers, chat
  • Real-browser test with GPC on and off, dated report, $499
  • Fixes to your consent tool and tag setup, from $499

Free scan

Check your site for trackers and opt-outs

We read the page the way a search engine does. Nothing is changed on your site, and we don't keep the results.

What's happening

  • Fines for opt-outs that don't work: California's privacy agency fined Tractor Supply $1.35 million in September 2025. Its "Do Not Sell" form didn't stop trackers, and it didn't honour Global Privacy Control until July 2024. Honda paid $632,500 and Todd Snyder $345,000 (White & Case).
  • Twelve US states require honouring the GPC signal or similar opt-out signals, and California, Colorado and Connecticut ran a joint sweep for sites that ignore it (Foster Garvey). These laws cover larger businesses: in California, about $26.6 million+ in yearly revenue or data on 100,000+ people.
  • Wiretap claims: California's Invasion of Privacy Act allows $5,000 per violation and has no size limit. Pixels, session recording (Hotjar, Clarity, FullStory) and chat widgets have drawn tens of thousands of claims and demand letters since 2022 (tracker estimate). SB 690 ends private "pen register" claims over pixels from 1 January 2027, but wiretap claims, often over chat recording, stay (K&L Gates).

How the browser test works

The free scan reads your page code. The paid test runs your pages in a real Chrome browser, which is how regulators and plaintiffs check.

  1. Two fresh visits to each page (home, product, cart), with no cookies: one normal, one with Global Privacy Control on.
  2. Everything recorded: every ad, analytics, session-recording and chat service the page contacts, and the tracking cookies set.
  3. The difference: what still loads with the signal on, and whether your "Do Not Sell or Share" link changes anything.
  4. Dated report and fix list: which tags to hold back, consent tool settings, chat disclosure wording, privacy policy lines to add.

Prices

Fixed price, agreed before we start. Prices in US dollars.

Opt-out browser test

$499

One-off · report in 3 business days

  • Up to 5 pages tested with GPC on and off
  • Every tracker, recording and chat tool listed
  • Dated report and fix list

Test + fix

from $999

One-off · quoted after the test

  • Consent tool and tag manager set up so tags respect opt-outs
  • Chat disclosure and privacy policy lines
  • A second test after the changes

Monthly re-test

$49 /month

/month · cancel any time

  • Monthly browser test of the same pages
  • Alert when a new tracker appears
  • Updated report each month

Current status: ordering isn't open yet, so nothing can be charged on this page. Ask for a quote now: we'll confirm the price by email, and you pay only after you've agreed to it, once ordering opens. If we don't deliver on time, you get your money back.

Ask for a quote

Tell us about your site and any deadline. We reply within 1 business day (Monday to Friday). Or email [email protected].

Please don't send a lawsuit, letter or notice itself here. If it has a response date, enter that date so we can plan around it.

Questions

Is my business covered by these privacy laws?

The state privacy laws cover larger businesses (in California, about $26.6 million+ in yearly revenue or data on 100,000+ people). The California wiretap law has no size limit. Your lawyer can tell you which apply; we test what your site actually does.

Does a clean test mean we comply?

No. It shows what one page did at one time in one browser. It's evidence for you and your lawyer, not a legal conclusion.

Do you need access to our site?

Not for the test: we visit your public pages like any visitor. For fixes, we need access to your consent tool and tag manager.

Who does the work?

DisputeKit, run by Shubhankar Sharma in India. We use automated tools and AI to work faster, and every finding and fix is checked before you see it. We're not lawyers and don't give legal advice; your lawyer decides what the law requires for your business.