ConsentLeak
Free leak check for online stores

Does your store stop tracking when a shopper says no?

Paste your store’s address. Our browser visits like a new shopper, says no to tracking, and shows you which ad pixels keep running anyway. It takes about a minute.

We only open public pages, like any visitor. Nothing on your store changes.

What we found in October 2026

We checked 60 apparel and print shops on Shopify

74%had at least one serious tracking problem
76%had ad pixels that ignored the browser’s “do not sell or share” signal
6 of 13kept tracking after the shopper clicked Reject

Each store was visited three times with a fresh browser from a US location. Results can differ for shoppers in other states.

How the check works

  1. A brand-new shopper

    We open your homepage with a clean browser and touch nothing. Anything that sends data here does it before the shopper has said yes.

  2. A shopper who says no

    We find your cookie banner, click Reject or Decline, and open another page. Anything still sending data is ignoring the shopper’s choice.

  3. A browser that says “do not sell”

    Some browsers send a Global Privacy Control signal. Several states require stores to treat it as an opt-out. We check which pixels respect it.

Why it matters

Demand letters

Law firms send letters to small online stores claiming pixels tracked shoppers without consent, often asking for thousands of dollars to settle.

A banner isn’t proof

The built-in banners on Shopify, Wix and Squarespace, and many consent apps, only control some tracking. Pixels added through your theme, Google Tag Manager or other apps can keep running.

Your ad data

Getting consent right keeps Google and Meta measuring your ads properly instead of guessing.

Questions

Is this legal advice?

No. The report shows what our browser saw on your store from one location at one time. If you’ve received a letter, talk to a lawyer and bring the report with you.

Will the check change anything on my store?

No. We load your public pages the way a shopper does. We don’t log in, add to cart, buy anything or fill in forms.

Does it work with my platform?

Yes. The check watches what your store sends to ad and tracking companies, which works the same on Shopify, WooCommerce, Wix, Squarespace, BigCommerce, NetSuite, DecoNetwork, InkSoft and custom sites. One extra check only applies to Shopify: whether the store’s own Shopify consent record is followed. The report tells you which platform we found.

What happens to my email?

We use it to show your full report and, if you tick the box, to contact you about fixing the problem. We don’t sell it or share it. Privacy details.

Can I check someone else’s store?

Yes. The check only uses public pages, so you can run it on any store, including a client’s or a competitor’s.