Question 1

Is this legal advice?

Accepted Answer

No. CIPA Risk Scanner is not a law firm and does not provide legal advice. The scanner provides educational, technical, and risk-modeling information about visible website tracking indicators. It can help you understand what tools may be present and what deserves review, but it does not determine legal compliance. For legal guidance, consult a qualified attorney.

Question 2

Will the scan slow my site?

Accepted Answer

No. The scan does not install anything on your website or change your code. CIPA Risk Scanner makes a lightweight server-side request to review publicly available page signals, such as visible scripts, tag managers, pixels, chat widgets, heatmaps, session replay indicators, and consent banner indicators. It does not crawl your full website or execute website JavaScript in this MVP version.

Question 3

What tools do you check for?

Accepted Answer

CIPA Risk Scanner checks for visible indicators of common third-party website tools, including Meta Pixel, Google Analytics, Google Tag Manager, TikTok Pixel, LinkedIn Insight Tag, Hotjar, FullStory, Microsoft Clarity, Intercom, Drift, Tawk, Crisp, Zendesk, LiveChat, and other common tracking, analytics, chat, heatmap, and session replay scripts. Results are technical indicators, not legal conclusions.

Question 4

Can a cookie banner still allow trackers to load?

Accepted Answer

Yes, it can happen. A cookie banner does not automatically mean every marketing, analytics, chat, heatmap, or session replay script is blocked before a visitor makes a choice. Banner configuration, tag manager rules, and consent settings all matter. CIPA Risk Scanner helps identify visible indicators that deserve closer technical review.

Question 5

What does the $97 Snapshot include?

Accepted Answer

The Website Tracking Risk Snapshot includes a private Snapshot Dashboard with a plain-English risk summary, tracker inventory, consent indicator review, priority fix list, technical evidence notes, and a Print / Save PDF option. It is designed to help business owners see what may be happening on their website and what to ask their developer to review first.

Question 6

What can CIPA Risk Scanner not verify yet?

Accepted Answer

The current scanner does not verify whether a visitor clicked Accept or Reject, whether every script fired before or after consent, whether tracking data was actually transmitted, or whether a website meets legal requirements. The scan provides technical visibility and risk indicators so businesses can decide what to review next.

Question 7

What is the Website Black Box?

Accepted Answer

The Website Black Box is CIPA Risk Scanner's ongoing record of what your website was doing over time, including tracker changes, scan results, screenshots, consent banner status, and risk signals.

Question 8

What happens after I request a snapshot?

Accepted Answer

Your request is received by the CIPA Risk Scanner team. We review your website details and follow up with the next step, typically within one business day.

Your website may be recording visitors before they consent.