US PRIVACY LAW FIRST · NOT TRANSLATED FROM GDPR

Privacy is not a hurdle.
It is your strongest infrastructure.

Consentinel blocks third-party trackers before they run, then sends a real browser to your site to verify it worked. Built for CIPA, CCPA, and CPRA — the wiretapping claims driving demand letters at American small businesses.

https://
Free plan foreverNo credit cardVerify your own site free

Measured on live client sites · Methodology and limits published

0

GA4 measurement beacons pre-consent on our founding site — the loader is fetched, the beacon never fires

5 → 0

PageSense beacons on a live Wix site, in a controlled A/B

56,926

Rows in a single tamper-evident report digest

7

Tracker vendors our own catalog was missing, surfaced by the crawler's unrecognized-domain bucket

Specificity beats a logo wall. We don't have 1.5M businesses. We have numbers that hold up.

Cookie counts are a floor — a browser cannot see HttpOnly cookies or server-side tracking, and counts move with how deep a crawl goes. What we can and cannot block.

§3 — The Problem

Your scanner said you were clean.
It was reading a list.

Most consent tools identify trackers by matching them against a catalog of known vendors. If a tracker isn't on the list, it doesn't exist.

We found this out on our own site. It was running a session recorder — the kind of script that captures what a visitor types and where they move their mouse, and exactly the kind named in CIPA claims. Our plugin's scanner reported nothing wrong.

That gap is why we built a crawler instead of a catalog.

Consentinel provides software and documentation, not legal advice. Nothing here creates an attorney-client relationship or guarantees compliance.

§4 — The Mechanism

Block. Observe. Prove.

§5 — The Honesty Section

Here's exactly what we can and can't block.

Blocking isn't purely a property of a consent tool. It's a property of where the website platform lets that tool's script run — and, on WordPress, of how each plugin chooses to emit its tag. Any vendor who tells you they block everything, everywhere, is describing a product that doesn't exist.

Where the tracker livesExampleConsentinelAnyone else
Custom code / JS-injectedSession recorders, Meta Pixel via custom codeBlockedOnly if they load first
Platform-native marketing tagsWix Marketing Integrations, GA4Consent signals + cookie suppressionNobody. Not Wix, not CookieYes.
Tags another plugin enqueueswp_enqueue_script, id="handle-js"Blocked server-side on WordPress, before the page is sentClient-side tools can't reach these
Tags a plugin prints directlyBeehive's gtag loader, echoed into wp_headBlocked server-side — with output-buffer gating switched onClient-side tools can't reach these
Injected at the CDN edgeCloudflare /cdn-cgi/, Rocket LoaderNot blockable — we detect and report itNobody. It lands after the server finishes.

"We'd rather tell you the ceiling than sell you past it. When something is outside what any client-side tool can stop, we detect it, we tell you, and we document it."

Read the full breakdown →

§6 — The Proof Point

Wix's own cookie banner let a session recorder load. With Marketing and Functional both turned off.

On a live client site we ran a controlled test — same browser, same tab, identical cache clear, Consentinel as the only variable.

Cookie counts are a floor — the browser can't see HttpOnly cookies. Absolute figures taken from devtools, not the page script.

Controlled test · Verified 2026-07-18Live client site
Zoho tracking cookies
40
Session-recording beacons
50
Session-recording script
10
Google Analytics
22

That's the platform ceiling on Wix. No client-side tool can change it. We show you the receipts either way.

§7 — Pricing

Priced for people who run more than one website.

25 client sites

Twenty-five client sites on the middle of the hosted consent market — after the partner discount, not before — runs about $280 a month. Consentinel Agency is $99.

Block-until-consent, GPC, Google Consent Mode v2 and per-tracker overrides are full strength on the free plan. We don't gate the defense. We charge for breadth, depth and workflow.

§8 — For Agencies

One dashboard. Every client site. One invoice.

Twenty-five client sites on the middle of the hosted consent market — after the partner discount, not before — runs about $280 a month. Consentinel Agency is $99.

See plans and overage rates →

§9 — Platforms

WordPressWixShopifySquarespaceWebflowAny site

One script tag works anywhere. On WordPress our plugin also gates server-side, reaching tags no client-side tool can touch.

§10 — What's actually running

What's actually running on your site right now?

Start free on your own site — one domain, unlimited pageviews, no credit card.

https://