How to Audit Any Website for Tracking Scripts (Step-by-Step)

Method 1: PixelPrivate Tracker Scanner (Fastest)

The quickest way to get a complete tracker audit:

• Go to pixelprivate.com/tools/tracker-scanner
• Paste the URL you want to audit
• Click “Scan for Trackers”
• Review the full report: which trackers were found, what data they collect, risk levels, invisible pixels, and third-party domains

PixelPrivate checks for 20+ commercial trackers and returns a 0-100 privacy score in under 15 seconds. Free, no account required.

Method 2: Browser Developer Tools (Most Thorough)

For a deeper look at every network request:

• Open the website in Chrome or Firefox
• Press F12 (or Ctrl+Shift+I on Windows, Cmd+Option+I on Mac) to open Developer Tools
• Click the Network tab
• Reload the page (F5)
• In the filter box, search for common tracker domains: facebook, google-analytics, tiktok, hotjar
• Click any request to see exactly what data is being sent in the request headers and payload

For a summary of all domains contacted, use the Console tab and run:

• performance.getEntriesByType('resource').map(r => new URL(r.name).hostname).filter((v,i,a) => a.indexOf(v)===i)

This returns every unique domain that loaded resources on the page.

Method 3: Browser Extensions (Best for Ongoing Use)

For real-time tracker visibility while you browse normally:

• uBlock Origin: Shows a count of blocked trackers per page in the toolbar icon. Click it to see the full list.
• Privacy Badger (EFF): Learns and blocks trackers automatically. Shows a traffic light breakdown of all third-party requests.
• Ghostery: Categorizes trackers by type (analytics, advertising, social media, etc.) with detailed descriptions of each.

Understanding What You Find

Not all trackers are equally dangerous. Here is how to prioritize:

• Session recorders (Hotjar, FullStory, Microsoft Clarity) — Highest risk. Record every mouse movement, click, and potentially form input as a video replay.
• Cross-site ad trackers (Meta Pixel, Criteo, Amazon) — High risk. Build behavioral profiles across hundreds of websites.
• Analytics (Google Analytics, Mixpanel) — Medium risk. Collect session and behavior data but primarily for the site owner.
• Tag managers (Google Tag Manager) — Wildcard risk. Can inject any number of additional trackers; audit what tags are loaded inside GTM separately.
• Basic CDN / fonts (Google Fonts, Cloudflare) — Low risk. May log requests but typically not used for behavioral profiling.