Consent & Tag Auditor

Consent & Tag Auditor is a Chrome DevTools panel for anyone who has to prove whether a website actually honours the consent its cookie banner collects. It puts the consent state, the dataLayer, the cookies and the outgoing tracking requests on a single shared timeline — so instead of guessing, you can see exactly what fired, when, and under which consent state. WHAT YOU GET • Overview — detected CMPs and GTM containers, plus a chronological timeline of consent events, dataLayer pushes and tag fires • Capture — a scoped recording of tracking requests with personal identifiers automatically redacted, ready to attach to an audit report • dataLayer — every push, typed and filterable, with the full object one click away • Network — raw tracking requests: URL parameters, request headers, request bodies, status and duration • Cookies — cookies as they are set, including HttpOnly ones, alongside the consent state at that moment • Consent — CMP state per category, Google Consent Mode default and update signals, and IAB TCF data • Server-Side — first-party tagging endpoints, the services proxied through them, and the signals used to identify them CONSENT PLATFORMS The panel reads consent state directly from whichever consent management platform the page is running, rather than guessing from cookies. It has dedicated support for the platforms most common across the EU and Switzerland — Cookiebot, Usercentrics and OneTrust among them — and works with any platform that implements the IAB TCF API. Google Consent Mode v2 signals are read from the dataLayer regardless of which platform sets them. The full list of supported platforms is on the product page: https://www.awaremetrics.ch/consent-tag-auditor BUILT FOR RE-TESTING Auditing a consent flow means running it again and again from a clean state. The panel can clear the inspected site's cookies and reset its origin storage in one click — including cross-domain CMP state, such as Usercentrics Cross-Domain Consent Sharing, which otherwise silently restores consent on reload. YOUR OWN SERVER-SIDE ENDPOINTS Google, Meta and common vendor endpoints are recognised out of the box. Add your own first-party tagging domains in Settings and requests routed through them are captured too. Subdomains are matched automatically. PRIVACY Everything stays on your machine. There is no backend, no account, no analytics and no telemetry. The extension makes no network requests of its own, and nothing it observes is ever uploaded. Personal identifiers in captured requests — email and phone hashes, user IDs, address fields — are redacted automatically. HOW TO START Open DevTools (F12) before loading the page you want to audit, select the "Consent & Tags" tab, then reload the page. The timeline fills in as the page loads. Tip: if a page stops loading and DevTools reports "Paused in debugger", untick Sources > Breakpoints > "Pause on uncaught exceptions". Large sites throw uncaught exceptions during load, and that setting halts the page before the audit can run. Full privacy policy: https://www.awaremetrics.ch/consent-tag-auditor/privacy