Privacy Policy — Consent & Tag Auditor
- Last updated: 23 September 2026
- Publisher: Aware Metrics, Switzerland
- Contact: funstuff@awaremetrics.ch
Summary
Consent & Tag Auditor is a developer tool. It inspects the page you are already looking at in Chrome DevTools and shows you what that page's tracking setup is doing. Everything it observes stays on your own machine. There is no backend, no account, no analytics, and no telemetry. Nothing is uploaded anywhere.
What the extension accesses
To do its job the extension reads the following from the tab you have open in DevTools:
| Data | Why |
|---|---|
window.dataLayer pushes | Show which events a page sends to Google Tag Manager, and when |
| Consent Management Platform state (13 platforms, including Cookiebot, Usercentrics, OneTrust, Didomi, iubenda, IAB TCF and Google Consent Mode) | Show what consent the visitor has given and how it changed over time |
| Cookies set for the inspected site, including their values | Show which cookies were set before and after consent |
| Network requests to known tracking endpoints, including URL parameters, request headers and request bodies | Show which tags actually fired and what data they carried |
| The URL of the inspected tab | Scope cookie reads and clears to that site only |
The extension declares access to all sites (<all_urls>) because auditing is only useful if it works on whichever site you are debugging. It only collects data for a tab while the "Consent & Tags" DevTools panel is open for that tab.
What is stored
- Captured session data is held in memory only. It is discarded when you navigate, close the tab, or close DevTools. It is never written to disk by the extension.
- Your settings — the list of custom server-side GTM domains you enter on the options page — are stored using
chrome.storage.sync. If you are signed in to Chrome, Google syncs this list across your own devices as part of your Chrome profile. It contains only the domain names you type in, and is never sent to us. - Exports are written only when you click "Export JSON" or "Copy capture", and only to the location you choose or to your clipboard.
What is transmitted
Nothing. The extension makes no network requests of its own. It contacts no servers operated by Aware Metrics or by any third party.
Personal data handling
Tracking requests can contain personal identifiers. In the Capture tab the extension automatically replaces the values of known identifier parameters — including em, ph, fn, ln, uid, user_id, external_id, and postal address fields — with [REDACTED] before displaying or exporting them.
The Network tab is a raw debugging view and deliberately shows request URLs and bodies unmodified, so you can verify exactly what a tag sent. Bear this in mind before sharing a screenshot or export of that tab.
We never receive any of this data. We have no ability to access it.
Permissions
| Permission | What it is used for |
|---|---|
cookies | Read cookies set for the inspected site, so the panel can show what was set and when. Also used by the "Clear cookies" button, which is scoped to the inspected site's URL only. |
browsingData | Power the origin-scoped storage reset, so you can re-test a consent flow from a clean state. Restricted to the origins of the site you are inspecting — it never clears data for other sites. |
storage | Save the custom server-side GTM domains you enter in settings. |
tabs | Read the URL of the inspected tab, so cookie and storage operations are scoped to the right site. |
<all_urls> host access | Observe the page you are auditing. The tool cannot know in advance which site you will debug. |
Third parties
There are none. No data is sold, shared, or transferred to anyone, for any purpose, including advertising, creditworthiness, or lending.
Your rights
Because no data ever leaves your machine, there is nothing for us to disclose, correct, or delete on your behalf. To remove everything the extension has stored, uninstall it from chrome://extensions — this removes your saved settings along with it.
Changes
If this policy changes, the updated version will be published at https://www.awaremetrics.ch/consent-tag-auditor/privacy with a new "Last updated" date. Material changes will also be noted in the extension's Chrome Web Store listing.
Contact
Questions about this policy: funstuff@awaremetrics.ch