Where exactly does
your visitor data end?
Ad exchanges, session recorders, data brokers, pixels wired to someone else's account. Few legal teams have a current inventory of these vendors. We will provide one: every vendor, every cookie, every litigation flag, reviewed by counsel. Free.
Simulated scan output: 42 vendors identified, 24 of them advertising or programmatic, 19 tracking IDs extracted, 137 cookies inventoried with the longest living 400 days, 41 unidentified third-party hosts, 4 litigation flags. Figures from a real August 2026 scan of a national telecom's website, anonymized.
Figures drawn from nine scans of household-name brands conducted in August 2026.
Findings from nine recent scans.
Both firing on its public pages, right next to a full programmatic stack: The Trade Desk, PubMatic, Magnite, Index Exchange. On a bank.
Three separate Meta pixel IDs and three Google Analytics properties running at once. Nobody had the full list.
Third-party servers receiving visitor traffic that no one could match to a vendor contract. Plus Snap, TikTok and Pinterest tags.
50 vendors on the website and 12 more tracker SDKs compiled into its Android app. One exposure surface, not two.
Identifiers on the public booking homepage configured to persist for well over a year.
Its site blocks every automated scanner. We scan with a real browser: the same view a customer gets, and the same view a plaintiff's expert gets.
Findings from scans conducted August 17, 2026. Brands anonymized, as yours would be.
| Advertising | 24 | |
| Analytics | 6 | |
| Customer data platforms | 3 | |
| Tag managers | 2 |
A signed report
on firm letterhead.
The Portfolio Executive Report arrives on North End Law letterhead as a signed PDF, the kind of document you can forward to your GC, your CMO, or your board without translation.
- 1.Vendor register: every technology observed, categorized, with the evidence trail
- 2.Litigation exposure: each vendor screened against U.S. wiretapping, session-replay and pixel case records
- 3.Cookie inventory: names, owners, retention periods, including the 400-day ones
- 4.Tracking IDs: the actual account IDs your pages fire, extracted from live requests
- 5.AI footprint: which vendors run AI on your visitors' data, and how transparent they are about it
What we need from you.
Tell us your domain
The form below. Thirty seconds. That's the entire ask.
We scan like a visitor
A real browser loads your site, accepts the consent banner, and watches what actually fires across multiple pages, plus your Android app if you have one.
Counsel reviews. You read.
Every vendor is matched against our catalog and screened against U.S. privacy litigation records. The signed PDF reaches your inbox within two business days.
How this exposure is typically discovered. On you.
Wiretapping claims under state statutes like California's CIPA, session-replay suits, video-privacy claims over embedded pixels. The current wave of privacy litigation starts exactly here: an expert loads a public website and records which third parties receive visitor data. The same information is available to any party that loads your site.
Request the inventoryRequest the inventory for your website.
Request your free scan
One domain. One counsel-reviewed report. Zero obligation.
What exactly do you scan?
Only your public website, loaded in a real browser exactly as a visitor would see it, including what fires after the consent banner is accepted. We collect network requests, cookies, scripts, pixels and tracking IDs across the homepage and several deeper pages. For brands with an Android app, we also read the app's embedded SDK tracker signatures from public sources. No login, no intrusion, no meaningful load on your infrastructure.
Is it really free?
Yes. The scan and the counsel-reviewed Portfolio Executive Report are free, with no obligation. It is how we show prospective clients what our privacy practice sees on day one.
What do I receive?
A signed PDF report on North End Law letterhead: the full vendor register, category breakdown, cookie inventory with retention periods, extracted tracking IDs, each vendor's U.S. privacy-litigation record, and its AI footprint. Prepared with AI-assisted analysis and reviewed by counsel.
Will this create an attorney-client relationship?
No. The report is informational and is not legal advice; no attorney-client relationship is created unless we are subsequently engaged.
The exposure scan is a service of North End Law Corporation, a California law corporation. It examines publicly available pages as an ordinary visitor's browser would and reports the third-party services those pages load. The report is informational: it is not legal advice, it is not an opinion on any recipient's circumstances, and neither requesting nor receiving it creates an attorney-client relationship. North End Law acts for a client only under a signed engagement letter, following a conflicts check. Figures cited on this page are drawn from scans conducted in August 2026 and the underlying findings are held on file.