Privacy Policy

Who we are

TrackScout is a free analysis tool developed by Christian Rosenbech. The service is available at trackscout.rosenbech.dkand lets users analyze a website's tracking scripts and cookie consent solutions.

What we log

When you scan a URL, we store an anonymous summary of the scan result for statistics purposes. It contains:

• The domain name of the scanned site (e.g. example.com)
• Whether a consent solution was found
• Number of tracking scripts detected
• Whether there were consent issues
• Timestamp of the scan

For a regular one-off scan we do not store your IP address, email, name, or other personally identifiable information. No tracking cookies are set on this site.

Feedback

If you send feedback via the feedback button, we store your message and, if you choose to provide it, your email address — solely so we can read and possibly reply to your message. The field is optional.

Headless browser scanning

When we scan a site, we open it in a server-based browser to test consent mechanisms. This happens from our server — we don't send any of your browser data or cookies to the scanned site.

Phishing check

When you check a link or a mail address, our server visits the link and looks up the domain. We only store the domain name, the type of check, the risk score and which warning signs were found. We don't store the full link, because links in scam messages often contain a code that can identify the recipient, and we never store the part of a mail address before the @.

To check whether the address is on a list of dangerous sites, we send it to Google Web Risk. The domain's registration date is looked up with the domain registry (Punktum dk for .dk). The date is only shown to you and is not stored.

With each check we also store the checked site's IP addresses, nameservers and a fingerprint of the page's structure. This is information about the site, not about you, and it's used to recognise the same scammers on new domains.

If you report a site as a scam or genuine, we store your report together with an one-way hash of your IP address that cannot be reversed. It's only used to count each person once, and your IP address itself is not stored.

Third parties

We use the following third-party services:

• Vercel — hosting and serverless functions (US/EU)
• Supabase — database for anonymous scan statistics and feedback (EU)
• Google Web Risk: checking links against Google's list of dangerous sites (phishing check)
• Domain registries (Punktum dk and registries via rdap.org): looking up a domain's registration date (phishing check)

Your rights

For regular one-off scans we store no personal data, so there's nothing to request access to, correct, or delete. If you sent feedback with your email address and would like it deleted, feel free to contact us at cr@cpcsocial.dk.