Audit Methodology & Epistemic Integrity Charter
How CookieDetox factually measures website compliance, intercepts unauthorized network requests, and prevents false positives or arbitrary score penalization.
01 The Playwright « Double-Tap » Protocol
Unlike superficial scanners that rely solely on HTML static parsing, CookieDetox orchestrates an isolated headless browser instance driven by Playwright Chromium. The audit operates across two discrete phases:
The browser visits the URL with clean browser context (no residual cookies, empty LocalStorage, disabled cache). Zero user interaction or click is simulated. The network interceptor listens for 10 seconds to record all outbound HTTP/HTTPS packets.
In a secondary sandbox session, the engine detects the Consent Management Platform (CMP) and triggers an explicit click on the "Accept All" button.
gcs parameter from G100 to G111).
02 Minimum Signal Rule: Refusing to Penalize the Void
Scientific Integrity Principle:
A reputable compliance platform must never interpret an absence of signal as a regulatory violation. If an e-commerce website is shielded by Web Application Firewalls (Cloudflare Turnstile, DataDome, Akamai Bot Manager) or geo-blocks non-residential IPs, the automated crawler may receive an empty DOM (0 cookies, 0 scripts, no rendered banner).
Where legacy tools would arbitrarily downgrade the score (e.g., assigning 60/100 under the false claim "No CMP detected"), CookieDetox triggers its epistemic safety switch: the audit is classified as « Inconclusive » with score suspended. No infraction is imputed without verified network evidence.
03 CMP-Aware Gating & Zero False Positives
The presence of ad script URLs (e.g., connect.facebook.net or googletagmanager.com) inside HTML source is not an automatic infringement if the script execution is suspended pending user consent.
Our inspection engine checks whether scripts are gated by:
- The
type="text/plain"ortype="text/blocking"MIME attribute disabling execution. - Proprietary consent attributes used by certified CMPs:
data-cookieconsent,data-axeptio,data-didomi,data-usercentrics. - Zero outbound network requests recorded during pre-consent observation.
Any properly gated script is labeled « Conditional » and incurs zero penalty.
Rectification Charter for Data Protection Officers (DPOs)
CookieDetox is built to elevate data protection standards rather than publish stale critiques. Websites evolve constantly; we guarantee priority handling for any verified technical remediation.
Free 48h Re-Scan Procedure:
- Implement technical remediations (conditional script gating, refusal parity on 1st level).
- Email our audit desk at
cookiedetox.tech@gmail.comwith your domain and changelog. - A verified re-scan is executed within 48 business hours. If validated, public scores are updated immediately.