Privacy stack topics

The tools your marketing team deploys carry privacy risk

Consent platforms, tag managers, and analytics tools are only compliant when configured correctly and validated continuously. Browse the tools your teams use most and learn where the risks live and how Lokker helps.

Validate consent behavior Request a demo

Consent Platforms

Consent platforms that control what data flows

Consent management platforms manage the visitor's choice, but configuration drift, uncategorized scripts, and GPC gaps mean the choice often does not reach the network layer. Each platform page explains where implementations break down and how to validate them.

OneTrust

OneTrust helps organizations manage consent and privacy, but misconfigured categories, outdated vendor lists, and GPC gaps create real exposure.

CookieYes

CookieYes is a popular consent management tool for SMBs and agencies, but automated cookie scanning misses dynamic scripts and tag manager payloads.

TrustArc

TrustArc provides enterprise consent management across global jurisdictions.

Cookiebot

Cookiebot automates cookie scanning and consent for GDPR and CCPA/CPRA.

Ketch

Ketch offers a modern, programmatic approach to consent and data rights.

Sourcepoint

Sourcepoint specializes in publisher and enterprise consent management for GDPR, CCPA/CPRA, and TCF.

Didomi

Didomi provides GDPR and global consent management with a focus on European regulatory requirements.

Usercentrics

Usercentrics provides GDPR, CCPA/CPRA, and TCF consent management for organizations in Europe and globally.

Osano

Osano provides US-focused consent management with CCPA/CPRA, GDPR, and GPC support.

Tag Management

Tag managers that deploy what the consent layer must control

Tag managers deploy scripts without code reviews and often without consent conditions. The network layer reveals what they fire regardless of workspace configuration.

Google Tag Manager

Google Tag Manager is the most widely deployed tag management system.

Adobe Experience Platform Data Collection

Adobe Experience Platform Data Collection (formerly Adobe Launch) manages enterprise tag deployments.

Tealium iQ

Tealium iQ is an enterprise tag management system with built-in consent support.

Segment

Segment powers data collection and routing for thousands of organizations.

Ensighten

Ensighten manages tags and consent on large enterprise sites.

Marketing and Analytics

Marketing and analytics tools that collect the data at stake

Pixels, session replay tools, CRM trackers, and analytics platforms each carry distinct privacy obligations depending on what they collect, when they fire, and which laws apply to your visitors.

HubSpot

HubSpot tracking scripts and forms collect visitor identity and behavioral data.

Microsoft Clarity

Microsoft Clarity records visitor sessions including clicks, scrolls, and form fields.

Hotjar

Hotjar records sessions, heatmaps, and user surveys.

Meta Pixel

The Meta Pixel sends detailed event data to Meta for advertising.

TikTok Pixel

The TikTok Pixel sends behavioral and conversion data to TikTok for advertising.

LinkedIn Insight Tag

The LinkedIn Insight Tag tracks professional visitor data for B2B advertising.

Google Analytics 4

Google Analytics 4 with Consent Mode v2 requires specific configuration to comply with GDPR and CCPA/CPRA.

Optimizely

Optimizely personalizes and tests experiences using visitor behavioral data.

Heap

Heap autocaptures all user interactions by default.

Mixpanel

Mixpanel tracks user behavior and identity for product analytics.

The Trade Desk

The Trade Desk powers programmatic advertising and UID2 identity resolution across the open web.

Criteo

Criteo retargeting tracks visitors across the web and builds purchase-intent profiles for advertising.

Amazon Advertising

Amazon Advertising tracks visitors across non-Amazon sites for ad targeting and purchase-intent modeling.

Comscore

The Comscore Scorecard Research beacon (scorecardresearch.

Quantcast

Quantcast operates both an audience measurement tracker (quantserve.

Outbrain

Outbrain content recommendation widgets track visitor behavior across the publisher network for behavioral targeting and retargeting.

Taboola

Taboola content discovery widgets are deployed across news and media sites and collect behavioral data for targeting and retargeting.

Demandbase

Demandbase identifies companies visiting your site using IP address resolution and individual behavioral data.

Akamai mPulse

Akamai mPulse collects real user monitoring data from visitors, often classified as performance rather than analytics.

Decibel

Decibel captures digital experience and behavioral signals for analysis.

Invoca

Invoca ties web sessions to phone calls for marketing attribution.

FullStory

FullStory records every click, scroll, and form interaction.

LogRocket

LogRocket replays user sessions and captures console logs, network requests, and Redux state.

Intercom

Intercom’s chat widget sets persistent cookies, captures page URLs and user attributes, and connects to Intercom servers before most visitors interact.

Drift

Drift (now part of Salesloft) targets visitors with account-level data and fires tracking immediately on page load.

VWO

VWO modifies page content and assigns users to experiment variants before most consent banners have resolved.

Klaviyo

Klaviyo tracks web activity to power email and SMS personalization, but its onsite tracking often fires before consent is established.

Microsoft Advertising

The Microsoft Advertising Universal Event Tracking (UET) tag is one of the most commonly overlooked pixels on corporate sites.

Explore Lokker

Products that validate and enforce privacy across your stack

No matter which tools your marketing team uses, Lokker operates at the network layer where the compliance question is settled.

Intelligence

Privacy Edge

Scan your sites regularly and uncover privacy risks: risk scores, reason codes, and evidence-grade reports across your portfolio.

Explore Privacy Edge

Validation

Consent Validator

Validate whether your consent management tool works or has gaps across accept, reject, and GPC states.

Explore Consent Validator

Enforcement

Guardian

Client-side firewall that blocks outbound trackers and enforces trust rules before data leaves the browser.

Explore Guardian

Use cases and audiences

Beyond the tool: how Lokker addresses your situation

Tool hubs answer "how does this specific product interact with privacy law." These pages answer what to do about it, by role and scenario.

Consent audit and validation

Test whether your CMP actually blocks data in reject and GPC states.

Learn more

Third-party script governance

Map your full script inventory and block unauthorized outbound requests.

Learn more

For IT and security leaders

The browser-side gap your perimeter tools do not cover.

Learn more

For defense counsel

Forensic scans, rescan after remediation, and ongoing monitoring.

Learn more

Get started

Ready to validate your privacy stack?

Lokker runs automated consent flows and scans the network layer to confirm what your tools actually do, across every consent state, on every page.

Request a demo See Privacy Edge