@consenttheater/playbill 0.2.0 → 0.3.0

package/dist/actors/advertising.json

@@ -1,7 +1,7 @@
 {
     "category": "advertising",
     "description": "Ad targeting, retargeting, DSPs, SSPs, ad exchanges, conversion tracking, programmatic advertising",
-    "stats": { "cookies": 675, "domains": 1737, "companies": 1174 },
+    "stats": { "cookies": 678, "domains": 1737, "companies": 1173 },
     "cookies": {
         "1P_JAR": { "company": "Google", "service": "Google", "category": "advertising", "description": "Gathers site statistics and tracks conversion rates for Google advertising campaigns", "consent_burden": "required_strict", "lifetime": "30 days", "docs_url": "https://policies.google.com/technologies/cookies" },
         "33x_*": { "company": "33Across", "service": "33Across", "category": "advertising", "description": "33Across attention-based advertising identifier for viewability targeting", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.33across.com/privacy-policy/" },
@@ -91,6 +91,7 @@
         "__iasPET": { "company": "IAS", "service": "Integral Ad Science", "category": "advertising", "description": "IAS pre-bid evaluation token for brand safety and viewability verification in programmatic auctions", "consent_burden": "required", "lifetime": "session", "docs_url": "https://integralads.com/privacy-policy/" },
         "__pat_*": { "company": "Pathmatics (Sensor Tower)", "service": "Pathmatics Ad Intelligence", "category": "advertising", "description": "Pathmatics competitive advertising intelligence cookie tracking ad creative and spending across the web", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://sensortower.com/privacy-policy" },
         "__pdst": { "company": "Outbrain", "service": "Outbrain Pixel", "category": "advertising", "description": "Outbrain conversion pixel cookie tracking which sponsored content recommendations led to conversions", "consent_burden": "required", "lifetime": "13 months", "docs_url": "https://www.outbrain.com/privacy/" },
+        "__q_state_*": { "company": "Qualified", "service": "Qualified Conversational Sales", "category": "advertising", "description": "Qualified state cookie — `__q_state_<customer-account-hash>`. Stores conversation/visitor state for B2B real-time visitor identification and conversational sales engagement", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.qualified.com/privacy" },
         "__qca": { "company": "Quantcast", "service": "Quantcast Measure", "category": "advertising", "description": "Quantcast audience measurement cookie for demographic profiling and ad segment creation", "consent_burden": "required_strict", "lifetime": "13 months", "docs_url": "https://www.quantcast.com/privacy/" },
         "__stid": { "company": "ShareThis", "service": "ShareThis", "category": "advertising", "description": "ShareThis unique visitor identifier for social sharing analytics and ad targeting", "consent_burden": "required_strict", "lifetime": "13 months", "docs_url": "https://sharethis.com/privacy/" },
         "__stp": { "company": "ShareThis", "service": "ShareThis", "category": "advertising", "description": "ShareThis persistent tracking cookie enabling cross-site behavioral profiling through social share buttons", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://sharethis.com/privacy/" },
@@ -164,7 +165,7 @@
         "_ts_pid": { "company": "TargetSmart", "service": "TargetSmart Political Data", "category": "advertising", "description": "TargetSmart political targeting cookie — enriches voter files with consumer data and social media activity for hyper-targeted political campaigns", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://targetsmart.com/privacy-policy/" },
         "_tt_enable_cookie": { "company": "TikTok", "service": "TikTok Pixel", "category": "advertising", "description": "TikTok Pixel cookie checking whether cookie-based tracking is enabled by the advertiser", "consent_burden": "contested", "lifetime": "13 months", "docs_url": "https://ads.tiktok.com/help/article?aid=10007540" },
         "_tt_sessionId": { "company": "TikTok", "service": "TikTok Pixel", "category": "advertising", "description": "TikTok Pixel session identifier for grouping conversion events within a single visit", "consent_burden": "required", "lifetime": "session", "docs_url": "https://ads.tiktok.com/help/article?aid=10007540" },
-        "_ttp": { "company": "Kakao", "service": "Kakao Pixel", "category": "advertising", "description": "Kakao tracking pixel cookie for conversion tracking on Kakao ad campaigns", "consent_burden": "required", "lifetime": "13 months", "docs_url": "https://www.kakaocorp.com/page/responsible/detail/privacy" },
+        "_ttp": { "company": "TikTok", "service": "TikTok Pixel", "category": "advertising", "description": "TikTok Pixel primary tracking cookie for visitor identification and conversion attribution across TikTok Ads campaigns", "consent_burden": "required_strict", "lifetime": "13 months", "docs_url": "https://ads.tiktok.com/help/article?aid=10007540" },
         "_twq_*": { "company": "X (Twitter)", "service": "X Pixel", "category": "advertising", "description": "X (Twitter) conversion pixel cookie for ad attribution and audience measurement", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://twitter.com/en/privacy" },
         "_uetsid": { "company": "Microsoft", "service": "Microsoft Ads UET", "category": "advertising", "description": "Microsoft Ads Universal Event Tracking session cookie for conversion and audience tracking", "consent_burden": "required", "lifetime": "session", "docs_url": "https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-privacy-policy" },
         "_uetvid": { "company": "Microsoft", "service": "Microsoft Ads UET", "category": "advertising", "description": "Microsoft Ads UET persistent visitor cookie for cross-session conversion attribution", "consent_burden": "required", "lifetime": "16 days", "docs_url": "https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-privacy-policy" },
@@ -211,7 +212,7 @@
         "annalect_*": { "company": "Omnicom", "service": "Annalect Data Platform", "category": "advertising", "description": "Annalect data and analytics cookie for Omnicom programmatic audience activation", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.annalect.com/privacy/" },
         "anzu_*": { "company": "Anzu", "service": "Anzu In-Game Ads", "category": "advertising", "description": "Anzu in-game advertising platform cookie for blended ad delivery and viewability measurement", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.anzu.io/privacy-policy" },
         "applovin_*": { "company": "AppLovin", "service": "AppLovin MAX", "category": "advertising", "description": "AppLovin app monetization platform cookie for mediation and in-app ad attribution", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.applovin.com/privacy/" },
-        "ar_debug": { "company": "Google", "service": "Google Attribution Reporting", "category": "advertising", "description": "Google Attribution Reporting API debug cookie for Privacy Sandbox conversion measurement testing", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting/" },
+        "ar_debug": { "company": "Pinterest", "service": "Pinterest Conversion Tag (Attribution Reporting debug)", "category": "advertising", "description": "Set per-advertiser by the conversion pixel — typically Pinterest — to enable Chrome Privacy Sandbox Attribution Reporting debug mode. Despite the name, set by the advertiser pixel, not by Google directly", "consent_burden": "required", "lifetime": "session", "docs_url": "https://help.pinterest.com/en/business/article/install-the-pinterest-tag" },
         "armani_web_*": { "company": "Giorgio Armani", "service": "Armani Web Tracking", "category": "advertising", "description": "Armani luxury fashion retargeting cookie for product browsing and purchase intent tracking", "consent_burden": "required", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.armani.com/experience/en/privacy-policy/" },
         "asos_tracking_*": { "company": "ASOS", "service": "ASOS Web Tracking", "category": "advertising", "description": "ASOS online fashion retargeting cookie for product view and cart abandonment ad targeting", "consent_burden": "required", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.asos.com/privacy-policy/" },
         "att": { "company": "X Corp", "service": "X (Twitter) Ads", "category": "advertising", "description": "X/Twitter ad tracking transparency cookie used for conversion measurement and attribution", "consent_burden": "required", "lifetime": "2 years", "docs_url": "https://help.twitter.com/en/rules-and-policies/twitter-cookies" },
@@ -260,7 +261,6 @@
         "celtra_*": { "company": "Celtra", "service": "Celtra Creative Management", "category": "advertising", "description": "Celtra creative management platform cookie for rich media ad rendering and performance tracking", "consent_burden": "required", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.celtra.com/privacy-policy/" },
         "centro_*": { "company": "Basis Technologies", "service": "Basis (Centro) DSP", "category": "advertising", "description": "Basis Technologies (formerly Centro) campaign tracking and frequency capping cookie", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://basis.net/privacy-policy" },
         "cerebral_tracking_*": { "company": "Cerebral", "service": "Cerebral Health Ads", "category": "advertising", "description": "Cerebral mental health tracking cookie — shared ADHD, depression, and anxiety diagnosis data with Facebook, Google, and TikTok. FTC $7M settlement in 2024.", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://cerebral.com/privacy-policy" },
-        "cg_uuid": { "company": "GreenColumnArt", "service": "GreenColumnArt Tracker", "category": "advertising", "description": "Cross-site tracking identifier on greencolumnart.com linked to programmatic advertising ecosystem", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.greencolumnart.com/privacy" },
         "chanel_web_*": { "company": "Chanel", "service": "Chanel Web Tracking", "category": "advertising", "description": "Chanel luxury brand retargeting pixel for boutique engagement and product interest tracking", "consent_burden": "required", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.chanel.com/us/privacy-policy/" },
         "channel4_*": { "company": "Channel 4", "service": "Channel 4 Ads", "category": "advertising", "description": "Channel 4 UK broadcaster advertising cookie for viewer targeting and ad frequency capping", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.channel4.com/privacy" },
         "check24_*": { "company": "Check24", "service": "Check24 Comparison", "category": "advertising", "description": "Check24 German comparison platform cookie for insurance and product comparison tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.check24.de/datenschutz/" },
@@ -303,6 +303,7 @@
         "deepintent_bid_*": { "company": "DeepIntent", "service": "DeepIntent Healthcare DSP", "category": "advertising", "description": "DeepIntent healthcare DSP cookie for pharmaceutical ad bidding and health condition audience matching", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.deepintent.com/privacy-policy" },
         "demdex": { "company": "Adobe", "service": "Adobe Audience Manager", "category": "advertising", "description": "Adobe Audience Manager (Demdex) DMP cookie for cross-site audience segmentation and data sharing", "consent_burden": "required_strict", "lifetime": "6 months", "docs_url": "https://experienceleague.adobe.com/docs/audience-manager/user-guide/reference/demdex-calls.html" },
         "dianomi_*": { "company": "Dianomi", "service": "Dianomi Native Ads", "category": "advertising", "description": "Dianomi financial native advertising cookie for contextual content promotion", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.dianomi.com/privacy-policy.epl" },
+        "dicbo_id": { "company": "Outbrain", "service": "Outbrain Click ID", "category": "advertising", "description": "Outbrain click identifier (`dicbo_id`) — set on landing page after a click on Outbrain-recommended content for conversion attribution", "consent_burden": "required", "lifetime": "30 days", "docs_url": "https://www.outbrain.com/privacy/" },
         "digital_remedy_*": { "company": "Digital Remedy", "service": "Digital Remedy Flip", "category": "advertising", "description": "Digital Remedy performance advertising cookie for CTV and programmatic campaign optimization", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.digitalremedy.com/privacy-policy/" },
         "dior_tracking_*": { "company": "LVMH", "service": "Dior Web Tracking", "category": "advertising", "description": "Dior (LVMH) luxury brand retargeting pixel for product interest and boutique engagement tracking", "consent_burden": "required", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.dior.com/en_us/beauty/fragrance/privacy-policy.html" },
         "directline_tracking_*": { "company": "Direct Line", "service": "Direct Line Insurance Tracking", "category": "advertising", "description": "Direct Line insurance retargeting pixel for quote comparison and purchase funnel attribution", "consent_burden": "required", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.directline.com/privacy-policy" },
@@ -617,6 +618,8 @@
         "ts_c": { "company": "PayPal", "service": "PayPal", "category": "advertising", "description": "PayPal cross-site tracking cookie for payment button conversion measurement and remarketing", "consent_burden": "required", "lifetime": "3 years", "docs_url": "https://www.paypal.com/myaccount/privacy/cookiePrefs" },
         "tsrce": { "company": "PayPal", "service": "PayPal", "category": "advertising", "description": "PayPal traffic source attribution cookie for checkout conversion funnel analytics", "consent_burden": "contested", "lifetime": "3 days", "docs_url": "https://www.paypal.com/myaccount/privacy/cookiePrefs" },
         "tt_*": { "company": "TikTok", "service": "TikTok Pixel", "category": "advertising", "description": "Stores TikTok tracking parameters for cross-site ad attribution and conversion measurement", "consent_burden": "required_strict", "pattern": true, "lifetime": "13 months", "docs_url": "https://ads.tiktok.com/help/article/tiktok-pixel-cookie" },
+        "ttcsid": { "company": "TikTok", "service": "TikTok Pixel", "category": "advertising", "description": "TikTok Conversion Source ID (`ttcsid`) — primary session/click tracking cookie set by TikTok Pixel for conversion attribution", "consent_burden": "required_strict", "lifetime": "13 months", "docs_url": "https://ads.tiktok.com/help/article?aid=10007540" },
+        "ttcsid_*": { "company": "TikTok", "service": "TikTok Pixel", "category": "advertising", "description": "Per-pixel-ID variant of TikTok Conversion Source ID — TikTok prefixes the cookie with the customer's pixel ID", "consent_burden": "required_strict", "pattern": true, "lifetime": "13 months", "docs_url": "https://ads.tiktok.com/help/article?aid=10007540" },
         "tu_*": { "company": "TransUnion", "service": "TransUnion TruAudience", "category": "advertising", "description": "TransUnion TruAudience identity resolution cookie for cross-device consumer matching", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.transunion.com/privacy/truaudience" },
         "tuid": { "company": "USBrowserSpeed", "service": "USBrowserSpeed Tracking", "category": "advertising", "description": "Tracking user identifier on a.usbrowserspeed.com for cross-site behavioral profiling", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.usbrowserspeed.com/privacy" },
         "tune_*": { "company": "Tune/HasOffers", "service": "TUNE HasOffers", "category": "advertising", "description": "TUNE HasOffers performance marketing cookie for affiliate click and conversion tracking", "consent_burden": "required", "pattern": true, "lifetime": "90 days", "docs_url": "https://www.tune.com/resources/data-and-privacy/privacy-policies/" },
@@ -687,7 +690,6 @@
         "a.pub.freestar.com": { "company": "Freestar", "service": "Freestar Ad Tag", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://freestar.com/privacy-policy/" },
         "a.sonobi.com": { "company": "Sonobi", "service": "Sonobi JetStream", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://sonobi.com/privacy-policy/" },
         "a.teads.tv": { "company": "Teads", "service": "Teads", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://www.teads.com/privacy-policy/" },
-        "a.usbrowserspeed.com": { "company": "USBrowserSpeed", "service": "USBrowserSpeed Tracking", "category": "advertising", "consent_burden": "required", "note": "Tracking domain disguised as speed testing service — sets persistent user identifiers for cross-site profiling", "docs_url": "https://www.usbrowserspeed.com/privacy" },
         "aax-eu.amazon.com": { "company": "Amazon", "service": "Amazon AAX Ad Exchange (EU)", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://advertising.amazon.com/legal/privacy-notice" },
         "aax-us-iad.amazon.com": { "company": "Amazon", "service": "Amazon AAX Ad Exchange", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://advertising.amazon.com/legal/privacy-notice" },
         "aax-us-pdx.amazon.com": { "company": "Amazon", "service": "Amazon AAX Ad Exchange", "category": "advertising", "consent_burden": "required_strict", "note": "Amazon Ad Exchange endpoint — serves programmatic ads using Amazon shopper purchase intent data", "docs_url": "https://advertising.amazon.com/legal/privacy-notice" },
@@ -1014,6 +1016,7 @@
         "aidata.io": { "company": "Aidata", "service": "Aidata Audience Platform", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://aidata.io/privacy-policy/" },
         "airbridge.io": { "company": "Airbridge", "service": "Airbridge Attribution", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.airbridge.io/privacy-policy" },
         "airfrance.com": { "company": "Air France", "service": "Air France Booking", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.airfrance.com/FR/en/common/page_flottante/edito/page-cookie.htm" },
+        "alb.reddit.com": { "company": "Reddit", "service": "Reddit Pixel", "category": "advertising", "consent_burden": "required", "note": "Reddit Pixel conversion endpoint. /rp.gif?event=PageVisit and /rp.gif?event=Custom are conversion events. Was previously categorized as 'social' which understates the consent burden — this is an advertising conversion pixel, not a social embed", "docs_url": "https://www.redditinc.com/policies/cookies" },
         "alb.reddit.com/px": { "company": "Reddit", "service": "Reddit Pixel", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.redditinc.com/policies/cookies" },
         "albertsonsmedia.com": { "company": "Albertsons", "service": "Albertsons Media Collective", "category": "advertising", "consent_burden": "required", "note": "Albertsons retail media network — uses grocery loyalty card purchase data for ad targeting across Albertsons, Safeway, Vons, and Jewel-Osco", "docs_url": "https://www.albertsons.com/privacy-policy/" },
         "alchemy-api.com": { "company": "Alchemy (Ad Tech)", "service": "Alchemy Ad Platform", "category": "advertising", "consent_burden": "required", "docs_url": "https://alchemy-api.com/privacy/" },
@@ -1387,6 +1390,7 @@
         "firstpromoter.com": { "company": "FirstPromoter", "service": "FirstPromoter", "category": "advertising", "consent_burden": "contested", "docs_url": "https://firstpromoter.com/privacy-policy/" },
         "flashtalking.com": { "company": "Mediaocean", "service": "Flashtalking Ad Server", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://www.flashtalking.com/privacypolicy" },
         "flexoffers.com": { "company": "FlexOffers", "service": "FlexOffers Affiliate Network", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.flexoffers.com/privacy-policy/" },
+        "fls.doubleclick.net": { "company": "Google", "service": "DoubleClick Floodlight", "category": "advertising", "consent_burden": "required_strict", "note": "Floodlight conversion tracking. Catches per-advertiser subdomains like 14611606.fls.doubleclick.net via subdomain match. Tracks site visits and conversions for Google Marketing Platform / DoubleClick advertisers", "docs_url": "https://support.google.com/displayvideo/answer/2938376" },
         "fluid.ai": { "company": "Fluid", "service": "Fluid AI Advertising", "category": "advertising", "consent_burden": "required", "docs_url": "https://fluid.ai/privacy-policy/" },
         "flysas.com": { "company": "SAS", "service": "SAS Scandinavian Airlines", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.flysas.com/en/legal-info/privacy-policy/" },
         "fomo.com": { "company": "FOMO", "service": "FOMO Social Proof", "category": "advertising", "consent_burden": "contested", "docs_url": "https://fomo.com/privacy" },
@@ -1420,7 +1424,6 @@
         "grapeshot.co.uk": { "company": "Oracle", "service": "Grapeshot (Oracle) Contextual", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.oracle.com/legal/privacy/advertising-privacy-policy.html" },
         "graph.telefonica.de": { "company": "Telefonica", "service": "Telefonica Advertising", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.telefonica.de/dataprivacy" },
         "gravity.tech": { "company": "Alliance Gravity", "service": "Alliance Gravity DMP", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.alliancegravity.com/en/privacy-policy" },
-        "greencolumnart.com": { "company": "GreenColumnArt", "service": "GreenColumnArt Tracker", "category": "advertising", "consent_burden": "required", "note": "Obscure tracking domain associated with programmatic advertising cookie syncing", "docs_url": "" },
         "groundtruth.com": { "company": "GroundTruth", "service": "GroundTruth (XAd) Location", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://www.groundtruth.com/privacy-policy/" },
         "groupon.com": { "company": "Groupon", "service": "Groupon Deals", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.groupon.com/privacy" },
         "gscontxt.net": { "company": "Oracle", "service": "Grapeshot Contextual Intelligence", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.oracle.com/legal/privacy/advertising-privacy-policy.html" },
@@ -1623,6 +1626,7 @@
         "pacvue.com": { "company": "Pacvue", "service": "Pacvue Commerce Advertising", "category": "advertising", "consent_burden": "required", "note": "Retail media management platform — aggregates ad operations across Amazon, Walmart, Instacart, and other retail media networks", "docs_url": "https://www.pacvue.com/privacy-policy" },
         "padsquad.com": { "company": "PadSquad", "service": "PadSquad High-Impact Ads", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.padsquad.com/privacy-policy" },
         "pagead2.googlesyndication.com": { "company": "Google", "service": "Google AdSense", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://business.safety.google/adscookies/" },
+        "pagead2.googlesyndication.com/ccm/collect": { "company": "Google", "service": "Google Customer Match Connect", "category": "advertising", "consent_burden": "required_strict", "note": "Customer Match Connect endpoint hosted on the syndication CDN — Google Ads conversion + audience matching, NOT AdSense (which is publisher monetization). The path-specific entry beats the bare 'AdSense' attribution", "docs_url": "https://support.google.com/google-ads/answer/6379332" },
         "pagefair.com": { "company": "PageFair", "service": "PageFair Anti-Adblock", "category": "advertising", "consent_burden": "required", "note": "Anti-adblock measurement and recovery — detects ad blockers and serves alternative ads that bypass blocking", "docs_url": "https://pagefair.com/privacy/" },
         "pagefair.net": { "company": "PageFair", "service": "PageFair Adblock Analytics", "category": "advertising", "consent_burden": "required", "docs_url": "https://pagefair.com/privacy/" },
         "partnerstack.com": { "company": "PartnerStack", "service": "PartnerStack", "category": "advertising", "consent_burden": "contested", "docs_url": "https://www.partnerstack.com/privacy-policy" },
@@ -1895,7 +1899,7 @@
         "pubads.g.doubleclick.net": { "company": "Google", "service": "Google Ad Manager", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://business.safety.google/adscookies/" },
         "publicissapient.com": { "company": "Publicis Sapient", "service": "Publicis Sapient Digital", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.publicissapient.com/privacy-policy" },
         "pulpomedia.com": { "company": "Pulpo Media", "service": "Pulpo Media Hispanic DSP", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.pulpomedia.com/privacy-policy/" },
-        "px.ads.linkedin.com": { "company": "Roku (DataXu)", "service": "DataXu (Roku OneView)", "category": "advertising", "consent_burden": "required", "note": "DataXu was acquired by Roku in 2019 and rebranded as Roku OneView", "docs_url": "https://www.roku.com/en-us/about/privacy" },
+        "px.ads.linkedin.com": { "company": "LinkedIn (Microsoft)", "service": "LinkedIn Insight Tag", "category": "advertising", "consent_burden": "required", "note": "LinkedIn Insight Tag conversion + retargeting endpoint. Previously misattributed to Roku/DataXu in some trackers — DataXu's real domains are w55c.net and dxlive.com", "docs_url": "https://www.linkedin.com/help/lms/answer/a418880" },
         "px.getintent.com": { "company": "GetIntent", "service": "GetIntent Pixel", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://getintent.com/privacy-policy/" },
         "px.moatads.com": { "company": "Oracle MOAT", "service": "MOAT Analytics", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.oracle.com/legal/privacy/advertising-privacy-policy.html" },
         "px.samba.tv": { "company": "Samba TV", "service": "Samba TV Pixel", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://www.samba.tv/privacy-policy" },
@@ -1971,7 +1975,6 @@
         "sdk.postscript.io": { "company": "Postscript", "service": "Postscript SDK", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.postscript.io/privacy" },
         "sdk.underdogmedia.com": { "company": "Underdog Media", "service": "Underdog Media Ad Network", "category": "advertising", "consent_burden": "required", "docs_url": "https://underdogmedia.com/privacy-policy/" },
         "search.spotxchange.com": { "company": "Magnite (SpotX)", "service": "SpotX Ad Exchange", "category": "advertising", "consent_burden": "required_strict", "docs_url": "https://www.magnite.com/legal/advertising-technology-privacy-policy/" },
-        "secure.adnxs.com": { "company": "Microsoft (Xandr)", "service": "Xandr (AppNexus) Secure Pixel", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.xandr.com/privacy/" },
         "secure.quantserve.com": { "company": "Quantcast", "service": "Quantcast Secure Pixel", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.quantcast.com/privacy/" },
         "securepubads.g.doubleclick.net": { "company": "Google", "service": "Google Publisher Tag (GPT)", "category": "advertising", "consent_burden": "required_strict", "note": "Google Publisher Tag ad serving endpoint — loads and renders ads from Google Ad Manager on publisher sites", "docs_url": "https://developers.google.com/publisher-tag/guides/get-started" },
         "seedingalliance.de": { "company": "Seeding Alliance", "service": "Seeding Alliance Native Ads", "category": "advertising", "consent_burden": "required", "docs_url": "https://www.seedingalliance.de/datenschutz/" },

package/dist/actors/analytics.json

@@ -1,7 +1,7 @@
 {
     "category": "analytics",
     "description": "Usage measurement, audience insights, A/B testing, monitoring, CDP, attribution",
-    "stats": { "cookies": 730, "domains": 1922, "companies": 1339 },
+    "stats": { "cookies": 731, "domains": 1922, "companies": 1338 },
     "cookies": {
         "888_analytics_*": { "company": "888 Holdings", "service": "888 Analytics", "category": "analytics", "description": "888 Holdings gambling analytics for casino and sports betting player behavior measurement", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.888.com/security-and-privacy/privacy-policy/" },
         "ABTasty": { "company": "AB Tasty", "service": "AB Tasty", "category": "analytics", "description": "AB Tasty main visitor cookie storing A/B test assignments and personalization segment data", "consent_burden": "required", "lifetime": "13 months", "docs_url": "https://www.abtasty.com/privacy-policy/" },
@@ -24,6 +24,7 @@
         "Hm_lpvt_*": { "company": "Baidu", "service": "Baidu Tongji (Analytics)", "category": "analytics", "description": "Baidu Tongji analytics cookie recording last pageview timestamp", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://tongji.baidu.com/web/help/article?id=330&type=0" },
         "Hm_lvt_*": { "company": "Baidu", "service": "Baidu Tongji (Analytics)", "category": "analytics", "description": "Baidu Tongji analytics cookie recording last visit timestamp for visitor tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://tongji.baidu.com/web/help/article?id=330&type=0" },
         "IMRID": { "company": "Nielsen", "service": "Nielsen Digital Ad Ratings", "category": "analytics", "description": "Nielsen unique browser identifier for digital ad ratings and audience measurement panels", "consent_burden": "required", "lifetime": "2 years", "docs_url": "https://www.nielsen.com/legal/privacy-principles/digital-measurement/" },
+        "Indr*": { "company": "Unify", "service": "Unify Visitor Intelligence", "category": "analytics", "description": "Base64-encoded variant of Unify cookies — workspace key prefix 'wk_<id>_unify_session_id' / 'wk_<id>_unify_visitor_id' base64-encoded as cookie name (Indr* = base64 of \"wk_). Same data as unify_session_id/unify_visitor_id, namespaced per Unify customer workspace", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.unifygtm.com/privacy" },
         "LogRocket_*": { "company": "LogRocket", "service": "LogRocket", "category": "analytics", "description": "LogRocket session recording and replay cookie for user session identification", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://logrocket.com/privacy/" },
         "MC0": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "analytics", "description": "Tracks whether cookies are supported in the browser for Microsoft analytics services", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
         "MC1": { "company": "Microsoft", "service": "Microsoft", "category": "analytics", "description": "Microsoft analytics cookie determining if the browser accepts cookies", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
@@ -93,6 +94,7 @@
         "_dcq_*": { "company": "Decentriq", "service": "Decentriq Confidential Clean Room", "category": "analytics", "description": "Decentriq confidential computing clean room identifier for encrypted data collaboration", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.decentriq.com/privacy-policy" },
         "_dd_id": { "company": "Dreamdata.io", "service": "Dreamdata B2B Attribution", "category": "analytics", "description": "Dreamdata visitor tracking cookie for B2B revenue attribution across the entire buying journey", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://dreamdata.io/privacy-policy" },
         "_dd_rum_*": { "company": "Datadog", "service": "Datadog RUM", "category": "analytics", "description": "Datadog Real User Monitoring cookie for frontend performance tracking and error monitoring", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://docs.datadoghq.com/real_user_monitoring/browser/" },
+        "_dd_s": { "company": "Datadog", "service": "Datadog Browser SDK", "category": "analytics", "description": "Datadog Browser SDK session cookie — primary identifier for RUM session correlation across page loads. Previously misattributed to DataDome (different vendor: bot protection) — DataDome's persistent cookie is 'datadome' and its test cookies use '_dd_cookie_test_*'", "consent_burden": "required", "lifetime": "15 minutes", "docs_url": "https://docs.datadoghq.com/real_user_monitoring/browser/" },
         "_dy*": { "company": "Mastercard/Dynamic Yield", "service": "Dynamic Yield Personalization", "category": "analytics", "description": "Dynamic Yield personalization cookie for real-time content optimization and experiment variation tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.dynamicyield.com/privacy-policy/" },
         "_dy_*": { "company": "Dynamic Yield", "service": "Dynamic Yield", "category": "analytics", "description": "Dynamic Yield visitor identifier and personalization context for recommendation engine", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://dy.com/legal/privacy-policy/" },
         "_eps_uid": { "company": "Epsilon (Publicis)", "service": "Epsilon PeopleCloud", "category": "analytics", "description": "Epsilon identity resolution cookie connecting online identifiers to offline purchase and demographic data on 250M+ Americans", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.epsilon.com/us/privacy-policy" },
@@ -111,8 +113,6 @@
         "_gat": { "company": "Google", "service": "Google Analytics", "category": "analytics", "description": "Throttles request rate to Google Analytics to limit data collection on high-traffic sites", "consent_burden": "contested", "lifetime": "1 minute", "docs_url": "https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage" },
         "_gat_*": { "company": "Google", "service": "Google Analytics", "category": "analytics", "description": "Throttles request rate for a specific GA property tracker", "consent_burden": "contested", "pattern": true, "lifetime": "1 minute", "docs_url": "https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage" },
         "_gat_gtag_*": { "company": "Google", "service": "Google Analytics (gtag)", "category": "analytics", "description": "Throttles request rate for gtag.js Google Analytics implementations", "consent_burden": "contested", "pattern": true, "lifetime": "1 minute", "docs_url": "https://developers.google.com/analytics/devguides/collection/gtagjs/cookie-usage" },
-        "_gd_session": { "company": "Google", "service": "Google Analytics Debug", "category": "analytics", "description": "Google Analytics debug mode session cookie for Tag Assistant validation", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://developers.google.com/analytics/devguides/collection/analyticsjs/debugging" },
-        "_gd_svisitor": { "company": "Google", "service": "Google Analytics Debug", "category": "analytics", "description": "Google Analytics debug visitor cookie for session validation in Tag Assistant", "consent_burden": "minimal", "lifetime": "2 years", "docs_url": "https://developers.google.com/analytics/devguides/collection/analyticsjs/debugging" },
         "_ghost-admin_session": { "company": "Ghost", "service": "Ghost CMS", "category": "analytics", "description": "Ghost CMS admin session cookie for content management dashboard authentication", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://ghost.org/privacy/" },
         "_gid": { "company": "Google", "service": "Google Analytics", "category": "analytics", "description": "Stores and updates a unique value for each page visited within a 24-hour window", "consent_burden": "required", "lifetime": "24 hours", "docs_url": "https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage" },
         "_hjCookieTest": { "company": "Hotjar", "service": "Hotjar", "category": "analytics", "description": "Hotjar test cookie checking if the visitor browser supports cookies before activation", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
@@ -183,6 +183,7 @@
         "_ym_isad": { "company": "Yandex", "service": "Yandex Metrica", "category": "analytics", "description": "Yandex Metrica ad blocker detection cookie checking whether the visitor uses ad blocking", "consent_burden": "contested", "lifetime": "2 days", "docs_url": "https://yandex.com/legal/metrica_termsofuse/" },
         "_ym_uid": { "company": "Yandex", "service": "Yandex Metrica", "category": "analytics", "description": "Yandex Metrica unique visitor identifier for cross-session analytics tracking", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://yandex.com/legal/metrica_termsofuse/" },
         "_ym_visorc": { "company": "Yandex", "service": "Yandex Metrica WebVisor", "category": "analytics", "description": "Yandex WebVisor session recording activation cookie determining recording sampling", "consent_burden": "required", "lifetime": "30 minutes", "docs_url": "https://yandex.com/legal/metrica_termsofuse/" },
+        "_zitok": { "company": "ZoomInfo", "service": "ZoomInfo WebSights", "category": "analytics", "description": "ZoomInfo WebSights first-party visitor token used for B2B visitor identification and reverse-IP company resolution", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.zoominfo.com/about/privacy-policy" },
         "ab.storage.deviceId.*": { "company": "Braze", "service": "Braze Analytics", "category": "analytics", "description": "Braze SDK device ID localStorage key for persistent device-level tracking. Also stored in localStorage", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.braze.com/company/legal/cookies" },
         "ab.storage.sessionId.*": { "company": "Braze", "service": "Braze Analytics", "category": "analytics", "description": "Braze SDK session ID localStorage key for session-level engagement tracking. Also stored in localStorage", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.braze.com/company/legal/cookies" },
         "ab.storage.userId.*": { "company": "Braze", "service": "Braze Analytics", "category": "analytics", "description": "Braze SDK user ID localStorage key for cross-session user identification in engagement analytics. Also stored in localStorage", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.braze.com/company/legal/cookies" },
@@ -265,7 +266,6 @@
         "carto_*": { "company": "Carto", "service": "Carto Location Intelligence", "category": "analytics", "description": "Carto spatial analytics platform cookie for embedded map view tracking and geospatial interaction analytics", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://carto.com/privacy/" },
         "carvertical_*": { "company": "carVertical", "service": "carVertical VIN Check", "category": "analytics", "description": "carVertical vehicle history reporting cookie for VIN check and user analytics", "consent_burden": "contested", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.carvertical.com/privacy-policy" },
         "casumo_*": { "company": "Casumo", "service": "Casumo Analytics", "category": "analytics", "description": "Casumo online casino analytics cookie for player session and game engagement tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.casumo.com/en-gb/privacy-policy/" },
-        "cb_*": { "company": "Cxense", "service": "Cxense Content Recommendations", "category": "analytics", "description": "Cxense (Piano DMP) content recommendation and audience data management cookie", "consent_burden": "required", "pattern": true, "lifetime": "13 months", "docs_url": "https://piano.io/privacy-policy/" },
         "cb_analytics_*": { "company": "Coinbase", "service": "Coinbase Analytics", "category": "analytics", "description": "Coinbase cryptocurrency exchange analytics cookie for trading funnel and wallet usage tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.coinbase.com/legal/privacy" },
         "chewy_analytics_*": { "company": "Chewy", "service": "Chewy Analytics", "category": "analytics", "description": "Chewy pet supplies analytics for autoship subscription and pet product interest tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.chewy.com/app/content/privacy" },
         "ckns_*": { "company": "BBC", "service": "BBC Analytics", "category": "analytics", "description": "BBC audience analytics cookie for content performance measurement and editorial insight", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.bbc.com/usingthebbc/cookies/" },
@@ -302,6 +302,7 @@
         "datadog_*": { "company": "Datadog", "service": "Datadog RUM", "category": "analytics", "description": "Datadog Real User Monitoring cookie for browser performance analytics and error tracking", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
         "dazn_*": { "company": "DAZN", "service": "DAZN Streaming", "category": "analytics", "description": "DAZN sports streaming platform cookie for viewer analytics and content recommendation", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.dazn.com/en-US/help/articles/privacy-policy" },
         "db_tracking_*": { "company": "Deutsche Bank", "service": "Deutsche Bank Web Analytics", "category": "analytics", "description": "Deutsche Bank website analytics cookie for banking service and investment product tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.db.com/legal-resources/privacy-notice" },
+        "dd_anonymous_id": { "company": "Datadog", "service": "Datadog Browser SDK", "category": "analytics", "description": "Datadog Browser SDK anonymous user identifier — companion to _dd_s for cross-session user tracking in RUM", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://docs.datadoghq.com/real_user_monitoring/browser/" },
         "decathlon_analytics_*": { "company": "Decathlon", "service": "Decathlon Analytics", "category": "analytics", "description": "Decathlon sports equipment analytics for product category browsing and sports interest tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.decathlon.com/pages/privacy-policy" },
         "decathlon_tracking_*": { "company": "Decathlon", "service": "Decathlon Web Analytics", "category": "analytics", "description": "Decathlon sports retail analytics for product browsing and store locator tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.decathlon.com/pages/privacy-policy" },
         "deepintent_*": { "company": "DeepIntent", "service": "DeepIntent Healthcare DSP", "category": "analytics", "description": "DeepIntent healthcare advertising cookie for pharmaceutical audience targeting using health condition inference", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.deepintent.com/privacy-policy" },
@@ -440,7 +441,7 @@
         "ktUId": { "company": "Kantar", "service": "Kantar Audience Measurement", "category": "analytics", "description": "Kantar persistent user cookie for cross-session audience panel measurement and media consumption tracking", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.kantar.com/cookies-policies" },
         "kucoin_analytics_*": { "company": "KuCoin", "service": "KuCoin Analytics", "category": "analytics", "description": "KuCoin exchange analytics for trading funnel measurement and token listing engagement tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.kucoin.com/privacy-policy" },
         "kuula_*": { "company": "Kuula", "service": "Kuula Virtual Tours", "category": "analytics", "description": "Kuula 360 virtual tour platform cookie for panoramic tour embed analytics", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://kuula.co/privacy" },
-        "laboratory-anonymous-id": { "company": "Various", "service": "Lab/Testing Tools", "category": "analytics", "description": "Anonymous visitor identifier commonly used by experimental and testing frameworks for user bucketing", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "" },
+        "laboratory-anonymous-id": { "company": "HubSpot", "service": "HubSpot Laboratory", "category": "analytics", "description": "HubSpot internal A/B testing framework (Laboratory) — anonymous visitor cookie for experiment bucketing", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://legal.hubspot.com/privacy-policy" },
         "lavanguardia_analytics_*": { "company": "Grupo Godó", "service": "La Vanguardia Analytics", "category": "analytics", "description": "La Vanguardia newspaper analytics for Catalan and Spanish reader engagement tracking", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.lavanguardia.com/politica-de-privacidad" },
         "lc-main": { "company": "Amazon", "service": "Amazon Locale", "category": "analytics", "description": "Amazon locale cookie storing country and language preferences for analytics segmentation", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.amazon.com/gp/help/customer/display.html?nodeId=201890250" },
         "ld_*": { "company": "LaunchDarkly", "service": "LaunchDarkly Feature Flags", "category": "analytics", "description": "LaunchDarkly feature flag evaluation cookie storing user targeting context and flag state", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://launchdarkly.com/policies/privacy/" },
@@ -743,7 +744,6 @@
         "3.basecamp.com": { "company": "Basecamp", "service": "Basecamp Project Management", "category": "analytics", "consent_burden": "contested", "docs_url": "https://basecamp.com/about/policies/privacy" },
         "888.com": { "company": "888 Holdings", "service": "888 Casino/Sport", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.888.com/security-and-privacy/privacy-policy/" },
         "8fit.com": { "company": "8fit", "service": "8fit Fitness App", "category": "analytics", "consent_burden": "contested", "docs_url": "https://8fit.com/privacy-policy/" },
-        "a.usbrowserspeed.com": { "company": "New Relic", "service": "New Relic Browser Speed Test", "category": "analytics", "consent_burden": "contested", "note": "Browser speed measurement endpoint operated by New Relic for RUM data collection", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/" },
         "a1.net": { "company": "A1 Telekom Austria", "service": "A1 Austria", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.a1.net/datenschutz" },
         "abcnews.go.com": { "company": "Disney/ABC", "service": "ABC News", "category": "analytics", "consent_burden": "required", "docs_url": "https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/" },
         "actioniq.com": { "company": "ActionIQ", "service": "ActionIQ CDP", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.actioniq.com/privacy-policy/" },
@@ -1866,7 +1866,6 @@
         "faro-collector-prod-us-central-0.grafana.net": { "company": "Grafana Labs", "service": "Grafana Faro RUM", "category": "analytics", "consent_burden": "contested", "docs_url": "https://grafana.com/docs/grafana-cloud/monitor-applications/frontend-observability/" },
         "fast.appcues.com": { "company": "Appcues", "service": "Appcues", "category": "analytics", "consent_burden": "contested", "docs_url": "https://www.appcues.com/privacy" },
         "fast.chameleon.io": { "company": "Chameleon", "service": "Chameleon Product Tours", "category": "analytics", "consent_burden": "contested", "docs_url": "https://www.chameleon.io/privacy" },
-        "fast.wistia.com": { "company": "Wistia", "service": "Wistia", "category": "analytics", "consent_burden": "required", "docs_url": "https://wistia.com/privacy/" },
         "fast.wistia.net": { "company": "Wistia", "service": "Wistia", "category": "analytics", "consent_burden": "required", "docs_url": "https://wistia.com/privacy/" },
         "fastweb.it": { "company": "Fastweb", "service": "Fastweb Italy", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.fastweb.it/corporate/privacy/" },
         "faz.net": { "company": "Frankfurter Allgemeine", "service": "FAZ", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.faz.net/datenschutz/" },
@@ -1986,7 +1985,7 @@
         "jasper.ai": { "company": "Jasper", "service": "Jasper AI", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.jasper.ai/privacy" },
         "jd.com": { "company": "JD.com", "service": "JD.com Marketplace", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.jd.com/privacy.aspx" },
         "jobs.lever.co": { "company": "Lever", "service": "Lever Job Board", "category": "analytics", "consent_burden": "contested", "docs_url": "https://www.lever.co/privacy/" },
-        "js-agent.newrelic.com": { "company": "New Relic", "service": "New Relic Browser", "category": "analytics", "consent_burden": "contested", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/getting-started/introduction-browser-monitoring/" },
+        "js-agent.newrelic.com": { "company": "New Relic", "service": "New Relic Browser Agent", "category": "analytics", "consent_burden": "required", "note": "Default New Relic browser agent is RUM (page-load timing, errors, custom events). Session replay is a separately-licensed feature using `/replay/` or `/sr-` paths", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/getting-started/introduction-browser-monitoring/" },
         "js-agent.newrelic.com/nr-spa": { "company": "New Relic", "service": "New Relic SPA Agent", "category": "analytics", "consent_burden": "required", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
         "js-cdn.dynatrace.com": { "company": "Dynatrace", "service": "Dynatrace OneAgent JS", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.dynatrace.com/company/trust-center/privacy/" },
         "js.chargebee.com": { "company": "Chargebee", "service": "Chargebee Subscription JS", "category": "analytics", "consent_burden": "contested", "note": "Subscription management platform — tracks subscription events, trial conversions, and revenue analytics for SaaS and media companies", "docs_url": "https://www.chargebee.com/privacy/" },
@@ -2289,6 +2288,9 @@
         "service-public.fr": { "company": "French Government", "service": "Service-Public.fr", "category": "analytics", "consent_burden": "contested", "docs_url": "https://www.service-public.fr/P10100" },
         "service.gov.uk": { "company": "UK Government", "service": "GOV.UK Services", "category": "analytics", "consent_burden": "minimal", "docs_url": "https://www.gov.uk/help/privacy-notice" },
         "sfr.fr": { "company": "Altice/SFR", "service": "SFR", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.sfr.fr/politique-de-confidentialite.html" },
+        "sgtm-amer.hubspot.com": { "company": "HubSpot", "service": "HubSpot Server-Side GTM (Americas)", "category": "analytics", "consent_burden": "required_strict", "note": "HubSpot's hosted server-side Google Tag Manager proxy. Tunnels GA4 hits through HubSpot's first-party domain to bypass consent-mode and tracker blockers. Identified by `richsstsse`, `sst.etld`, `sst.gcsub=region1` URL params", "docs_url": "https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser" },
+        "sgtm-apac.hubspot.com": { "company": "HubSpot", "service": "HubSpot Server-Side GTM (APAC)", "category": "analytics", "consent_burden": "required_strict", "note": "HubSpot server-side GTM proxy for APAC customers", "docs_url": "https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser" },
+        "sgtm-emea.hubspot.com": { "company": "HubSpot", "service": "HubSpot Server-Side GTM (EMEA)", "category": "analytics", "consent_burden": "required_strict", "note": "HubSpot server-side GTM proxy for European customers. Same consent-evasion class as sgtm-amer", "docs_url": "https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser" },
         "shadow.tech": { "company": "Shadow", "service": "Shadow Cloud PC", "category": "analytics", "consent_burden": "required", "docs_url": "https://shadow.tech/privacy-policy" },
         "share.transistor.fm": { "company": "Transistor", "service": "Transistor Player", "category": "analytics", "consent_burden": "contested", "docs_url": "https://transistor.fm/privacy/" },
         "shopee.com": { "company": "Sea Limited/Shopee", "service": "Shopee Marketplace", "category": "analytics", "consent_burden": "required", "docs_url": "https://shopee.com/docs/3606" },
@@ -2541,7 +2543,6 @@
         "uptime.betterstack.com": { "company": "Better Stack", "service": "Better Stack Uptime", "category": "analytics", "consent_burden": "contested", "docs_url": "https://betterstack.com/privacy" },
         "us.i.posthog.com": { "company": "PostHog", "service": "PostHog", "category": "analytics", "consent_burden": "required", "docs_url": "https://posthog.com/docs/privacy" },
         "usage.elementor.com": { "company": "Elementor", "service": "Elementor Usage Analytics", "category": "analytics", "consent_burden": "contested", "docs_url": "https://elementor.com/about/privacy/" },
-        "usbrowserspeed.com": { "company": "New Relic", "service": "New Relic Browser Speed Test", "category": "analytics", "consent_burden": "contested", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/" },
         "userguiding.com": { "company": "UserGuiding", "service": "UserGuiding Extended", "category": "analytics", "consent_burden": "required", "docs_url": "https://userguiding.com/privacy-policy/" },
         "userlane.com": { "company": "Userlane", "service": "Userlane Digital Adoption", "category": "analytics", "consent_burden": "required", "docs_url": "https://www.userlane.com/privacy-policy/" },
         "uwv.nl": { "company": "Dutch Employee Insurance Agency", "service": "UWV", "category": "analytics", "consent_burden": "contested", "docs_url": "https://www.uwv.nl/particulieren/overuwv/privacy" },

package/dist/actors/consent.json

@@ -1,7 +1,7 @@
 {
     "category": "consent",
     "description": "Consent Management Platforms (CMPs) — cookie banners, consent storage, preference management",
-    "stats": { "cookies": 43, "domains": 46, "companies": 43 },
+    "stats": { "cookies": 44, "domains": 46, "companies": 43 },
     "cookies": {
         "CookieConsent": { "company": "Cookiebot", "service": "Cookiebot CMP", "category": "consent", "description": "Cookiebot consent cookie storing user consent state per category (necessary/preferences/statistics/marketing)", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.cookiebot.com/en/privacy-policy/" },
         "CookieLawInfoConsent": { "company": "Cookie Law Info", "service": "Cookie Law Info (WP)", "category": "consent", "description": "Cookie Law Info consent state cookie recording yes/no acceptance for each cookie category", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://developer.wordpress.org/plugins/privacy/" },
@@ -40,6 +40,7 @@
         "securiti_*": { "company": "Securiti.ai", "service": "Securiti Consent Manager", "category": "consent", "description": "Securiti.ai consent management platform cookie storing user privacy preferences", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://securiti.ai/privacy-policy/" },
         "sp_consent_*": { "company": "Sourcepoint", "service": "Sourcepoint CMP", "category": "consent", "description": "Sourcepoint consent management cookie storing TCF and custom vendor consent decisions", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.sourcepoint.com/privacy-policy" },
         "tarteaucitron": { "company": "CNIL/Tarteaucitron", "service": "Tarteaucitron CMP", "category": "consent", "description": "French open-source consent management platform storing user cookie preferences per service", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://tarteaucitron.io/en/" },
+        "tcm": { "company": "Transcend", "service": "Transcend Consent Manager", "category": "consent", "description": "Transcend Consent Manager (TCM) state cookie storing per-category consent choices", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://transcend.io/privacy" },
         "termly_gtm_*": { "company": "Termly", "service": "Termly CMP", "category": "consent", "description": "Termly consent management cookie for Google Tag Manager consent mode integration", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://help.termly.io/support/solutions" },
         "transcend_*": { "company": "Transcend", "service": "Transcend Consent Manager", "category": "consent", "description": "Transcend consent management cookie recording user opt-in/opt-out preferences", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://transcend.io/privacy" },
         "uc_settings": { "company": "Usercentrics", "service": "Usercentrics CMP", "category": "consent", "description": "Usercentrics consent settings cookie storing user privacy preferences per service", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://docs.usercentrics.com/" },

package/dist/actors/data_leak.json

@@ -1,7 +1,7 @@
 {
     "category": "data_leak",
     "description": "Third-party resources that expose visitor IP addresses — fonts, embeds, CDNs, maps",
-    "stats": { "cookies": 0, "domains": 821, "companies": 568 },
+    "stats": { "cookies": 0, "domains": 826, "companies": 568 },
     "cookies": {},
     "domains": {
         "*.b-cdn.net": { "company": "BunnyCDN", "service": "BunnyCDN CDN", "category": "data_leak", "consent_burden": "contested", "pattern": true, "docs_url": "https://bunny.net/privacy" },
@@ -798,6 +798,11 @@
         "www.figma.com": { "company": "Figma", "service": "Figma Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.figma.com/privacy/" },
         "www.gofundme.com/f": { "company": "GoFundMe", "service": "GoFundMe Campaign Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.gofundme.com/privacy" },
         "www.google.com": { "company": "Google", "service": "Google Cross-Site Endpoint", "category": "data_leak", "consent_burden": "contested", "note": "Cross-origin requests to www.google.com on a non-Google site are almost always reCAPTCHA (/recaptcha/api.js), Google Fonts CSS, OAuth/Login, or Maps — all leak visitor IP to Google regardless of consent", "docs_url": "https://policies.google.com/privacy" },
+        "www.google.com/ccm/collect": { "company": "Google", "service": "Google Customer Match Connect", "category": "data_leak", "consent_burden": "required_strict", "note": "Google Customer Match Connect — first-party data ingest endpoint. Sends hashed PII (emails, phone numbers) plus event metadata to Google Ads for audience matching. Used by consent-mode-aware deployments to bypass third-party cookie restrictions", "docs_url": "https://support.google.com/google-ads/answer/6379332" },
+        "www.google.com/gmp/conversion": { "company": "Google", "service": "Google Marketing Platform Enhanced Conversions", "category": "data_leak", "consent_burden": "required_strict", "note": "Google Marketing Platform Enhanced Conversions — sends hashed PII (typically email + name) as URL parameters for cross-device conversion attribution", "docs_url": "https://support.google.com/google-ads/answer/13258081" },
+        "www.google.com/pagead/1p-conversion": { "company": "Google", "service": "Google Ads First-Party Conversion", "category": "data_leak", "consent_burden": "required_strict", "note": "Google Ads First-Party Conversion endpoint — server-side-style conversion reporting through the visitor's browser. Consent-mode workaround that bypasses third-party-cookie restrictions", "docs_url": "https://support.google.com/google-ads/answer/14778942" },
+        "www.google.com/pagead/1p-user-list": { "company": "Google", "service": "Google Ads First-Party Audience List", "category": "data_leak", "consent_burden": "required_strict", "note": "Google Ads First-Party Audience List — the '1p' is literal. Successor to third-party-cookie-based audience targeting after Chrome's Privacy Sandbox transition. Sends visitor data to Google Ads to maintain audience membership", "docs_url": "https://support.google.com/google-ads/answer/12224748" },
+        "www.google.com/rmkt/collect": { "company": "Google", "service": "Google Ads Remarketing Collect", "category": "data_leak", "consent_burden": "required_strict", "note": "Google Ads Remarketing collect endpoint — fires for retargeting audience membership. Equivalent to a remarketing pixel via the gtag library", "docs_url": "https://support.google.com/google-ads/answer/2453998" },
         "www.gov.uk": { "company": "UK Government", "service": "GOV.UK", "category": "data_leak", "consent_burden": "contested", "note": "UK government services portal — browsing patterns reveal benefit claims, visa applications, tax filings, and health needs", "docs_url": "https://www.gov.uk/help/privacy-notice" },
         "www.gov.uk/dwp": { "company": "DWP (UK)", "service": "UK Department for Work and Pensions", "category": "data_leak", "consent_burden": "required", "note": "UK benefits and social security portal — browsing reveals claimant status and benefit types", "docs_url": "https://www.gov.uk/government/organisations/department-for-work-pensions/about/personal-information-charter" },
         "www.gstatic.com": { "company": "Google", "service": "Google Static Content", "category": "data_leak", "consent_burden": "minimal", "note": "Google static asset CDN — leaks visitor IP to Google on every page load", "docs_url": "https://policies.google.com/technologies/cookies" },

package/dist/actors/fingerprinting.json

@@ -1,7 +1,7 @@
 {
     "category": "fingerprinting",
     "description": "Browser fingerprinting, device identification, cross-device tracking",
-    "stats": { "cookies": 60, "domains": 145, "companies": 90 },
+    "stats": { "cookies": 61, "domains": 148, "companies": 92 },
     "cookies": {
         "TDID_v2": { "company": "The Trade Desk", "service": "The Trade Desk Unified ID 2.0", "category": "fingerprinting", "description": "The Trade Desk UID2 cookie for cookieless identity resolution using hashed email addresses", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.thetradedesk.com/general/privacy" },
         "_1p_uid": { "company": "1plusX (Triton Digital)", "service": "1plusX First-Party ID", "category": "fingerprinting", "description": "1plusX first-party data platform cookie for predictive audience identity resolution without cookies", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.1plusx.com/privacy-policy/" },
@@ -29,6 +29,7 @@
         "bn_device_id": { "company": "Binance", "service": "Binance Device Fingerprint", "category": "fingerprinting", "description": "Binance device fingerprint cookie for exchange security and anti-fraud device recognition", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.binance.com/en/privacy" },
         "browsing-topics": { "company": "Google", "service": "Topics API (Privacy Sandbox)", "category": "fingerprinting", "description": "Chrome Topics API header — exposes visitor interest categories derived from recent browsing history to sites and ad tech vendors via the Sec-Browsing-Topics header", "consent_burden": "required_strict", "lifetime": "3 weeks", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/topics/" },
         "cb_device_id": { "company": "Coinbase", "service": "Coinbase Device Fingerprint", "category": "fingerprinting", "description": "Coinbase device identifier cookie for fraud prevention and cross-device account security fingerprinting", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.coinbase.com/legal/privacy" },
+        "cg_uuid": { "company": "CHEQ AI Technologies", "service": "CHEQ Click-Fraud / Bot Detection (cheq4ppc)", "category": "fingerprinting", "description": "CHEQ visitor identifier set by /tracker/tc_imp.gif endpoint with 'ch=cheq4ppc' marker. Hosted on rotating cloak domains (greencolumnart.com, etc.) — CHEQ provisions per-tenant first-party-looking domains specifically to evade tracker blocklists. Payload includes WebGL, GPU, fonts, plugins, screen, timezone, ~80 capability flags", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://chq.ai/privacy" },
         "connectId": { "company": "Yahoo/Verizon", "service": "Yahoo ConnectID", "category": "fingerprinting", "description": "Yahoo ConnectID persistent identifier for cross-site identity matching using hashed email addresses", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://legal.yahoo.com/xw/en/yahoo/privacy/" },
         "criteo_fpc": { "company": "Criteo", "service": "Criteo First-Party Identity", "category": "fingerprinting", "description": "Criteo first-party cookie enabling persistent identity for retargeting when third-party cookies are blocked", "consent_burden": "required_strict", "lifetime": "13 months", "docs_url": "https://www.criteo.com/privacy/" },
         "euid": { "company": "The Trade Desk", "service": "European Unified ID", "category": "fingerprinting", "description": "The Trade Desk EUID cookie — European version of UID2 for GDPR-compliant deterministic identity using hashed email", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.thetradedesk.com/general/privacy" },
@@ -66,6 +67,7 @@
     },
     "domains": {
         "1plusx.com": { "company": "1plusX (Triton Digital)", "service": "1plusX Platform", "category": "fingerprinting", "consent_burden": "required_strict", "docs_url": "https://www.1plusx.com/privacy-policy/" },
+        "a.usbrowserspeed.com": { "company": "Experian (Tapad)", "service": "Tapad Cross-Device Identity", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Cookie-sync endpoint disguised as 'browser speed' service. URL params expose 'purpose=Retargeting + ID Resolution' and partner identifiers. Tapad was acquired by Experian in 2020 — same cross-device identity-graph product, rebranded. NOT New Relic (separate vendor with different cookie/domain naming)", "docs_url": "https://www.experian.com/privacy/marketing-services-privacy-policy" },
         "accessibe.com/fingerprint": { "company": "accessiBe", "service": "accessiBe Device Fingerprinting", "category": "fingerprinting", "consent_burden": "required_strict", "note": "accessiBe accessibility overlay fingerprinting — collects device and browser characteristics under the guise of accessibility adaptation, creating persistent device fingerprints. Disability rights advocates have widely criticized this practice.", "docs_url": "https://accessibe.com/privacy-policy" },
         "acr.lgads.tv": { "company": "LG Electronics", "service": "LG ACR (Automatic Content Recognition)", "category": "fingerprinting", "consent_burden": "required_strict", "note": "LG Smart TV automatic content recognition — monitors and fingerprints content displayed on LG webOS TVs for viewer profiling and cross-device ad targeting", "docs_url": "https://www.lgads.tv/privacy-policy/" },
         "acr.samsungads.com": { "company": "Samsung", "service": "Samsung ACR (Automatic Content Recognition)", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Samsung Smart TV automatic content recognition — fingerprints TV content for viewer profiling and ad targeting across Samsung's 50M+ connected TVs", "docs_url": "https://www.samsung.com/us/account/privacy-policy/" },
@@ -164,6 +166,7 @@
         "fencedframes.googleapis.com": { "company": "Google", "service": "Fenced Frames (Privacy Sandbox)", "category": "fingerprinting", "consent_burden": "required", "note": "Fenced Frames — isolated rendering context for ads that prevents the embedding site from accessing the ad's network data, but still enables cross-site ad serving", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/fenced-frame/" },
         "fingerprint.com": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "consent_burden": "required_strict", "docs_url": "https://fingerprint.com/privacy-policy/" },
         "fpjs.io": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "consent_burden": "required_strict", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "greencolumnart.com": { "company": "CHEQ AI Technologies", "service": "CHEQ Click-Fraud / Bot Detection (cheq4ppc)", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Cloak domain operated by CHEQ. CHEQ provisions per-tenant first-party-looking domains (greencolumnart.com, oddstudious.com, etc.) specifically to evade tracker blocklists. Path signatures: /ct, /mon, /tracker/tc_imp.gif, /i/<hex>.js. Cookie: cg_uuid. URL marker: 'ch=cheq4ppc'", "docs_url": "https://chq.ai/privacy" },
         "id.rlcdn.com": { "company": "LiveRamp", "service": "LiveRamp ATS Identity", "category": "fingerprinting", "consent_burden": "required_strict", "docs_url": "https://liveramp.com/privacy/" },
         "id.roku.com": { "company": "Roku", "service": "Roku Identity Graph", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Roku identity resolution — links Roku device IDs to household identity for cross-screen ad targeting using ACR data from 80M+ active accounts", "docs_url": "https://www.roku.com/en-us/legal/privacy-policy" },
         "id5-sync.com": { "company": "ID5", "service": "ID5 Cookie Sync", "category": "fingerprinting", "consent_burden": "required_strict", "docs_url": "https://id5.io/privacy" },
@@ -206,6 +209,7 @@
         "topics.googleapis.com": { "company": "Google", "service": "Topics API (Privacy Sandbox)", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Topics API — replaces FLoC by categorizing users into interest-based topics from browsing history. Sites can query browsing-topics header to learn visitor interests without cookies.", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/topics/" },
         "track.adform.net": { "company": "Adform", "service": "Adform Tracking", "category": "fingerprinting", "consent_burden": "required_strict", "docs_url": "https://site.adform.com/privacy-center/" },
         "tracking.1plusx.com": { "company": "1plusX (Triton Digital)", "service": "1plusX Predictive Audiences", "category": "fingerprinting", "consent_burden": "required_strict", "note": "1plusX first-party data platform using predictive modeling for audience ID resolution", "docs_url": "https://www.1plusx.com/privacy-policy/" },
+        "usbrowserspeed.com": { "company": "Experian (Tapad)", "service": "Tapad Cross-Device Identity", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Cookie-sync domain disguised as a 'browser speed' service. Real product: Tapad cross-device identity graph (acquired by Experian, 2020). Catches a.usbrowserspeed.com and other subdomains via subdomain match. NOT New Relic", "docs_url": "https://www.experian.com/privacy/marketing-services-privacy-policy" },
         "userpilot.com": { "company": "Userpilot", "service": "Userpilot", "category": "fingerprinting", "consent_burden": "contested", "note": "Product adoption platform that fingerprints users for cross-session identification", "docs_url": "https://userpilot.com/privacy-policy" },
         "utiq.com": { "company": "Utiq", "service": "Utiq Telco Consent ID", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Utiq (European telco consortium) authenticated consent signal using network-level identity", "docs_url": "https://utiq.com/privacy/" },
         "wurfl.io": { "company": "ScientiaMobile", "service": "WURFL Device Detection", "category": "fingerprinting", "consent_burden": "required_strict", "note": "Wireless Universal Resource FiLe — industry-standard device fingerprinting database. Identifies 60,000+ device types from HTTP headers for content optimization and ad targeting.", "docs_url": "https://www.scientiamobile.com/privacy/" },

package/dist/actors/functional.json

@@ -1,7 +1,7 @@
 {
     "category": "functional",
     "description": "Chat widgets, forms, payments, CMS features, support tools, loyalty programs, accessibility",
-    "stats": { "cookies": 419, "domains": 678, "companies": 523 },
+    "stats": { "cookies": 434, "domains": 678, "companies": 526 },
     "cookies": {
         ".AspNetCore.Antiforgery.*": { "company": "Microsoft", "service": "ASP.NET Core", "category": "functional", "description": "ASP.NET Core anti-forgery system cookie for cross-site request forgery prevention", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://learn.microsoft.com/en-us/aspnet/core/security/anti-request-forgery" },
         ".AspNetCore.Identity.Application": { "company": "Microsoft", "service": "ASP.NET Core Identity", "category": "functional", "description": "ASP.NET Core Identity authentication cookie for maintaining user login state", "consent_burden": "minimal", "lifetime": "14 days", "docs_url": "https://learn.microsoft.com/en-us/aspnet/core/security/authentication/identity" },
@@ -70,6 +70,7 @@
         "_17track_*": { "company": "17track", "service": "17track Shipment Tracking", "category": "functional", "description": "17track universal package tracking widget cookie for multi-carrier shipment status queries", "consent_burden": "contested", "pattern": true, "lifetime": "30 days", "docs_url": "https://www.17track.net/en/privacy-policy" },
         "_Brevo_*": { "company": "Brevo (Sendinblue)", "service": "Brevo Chat", "category": "functional", "description": "Brevo (Sendinblue) chat widget cookie for live chat functionality and visitor identification", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.brevo.com/legal/cookies/" },
         "__Host-next-auth.csrf-token": { "company": "NextAuth.js", "service": "NextAuth.js", "category": "functional", "description": "NextAuth.js CSRF protection token for Next.js authentication sessions", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://next-auth.js.org/configuration/options" },
+        "__Host-psifi.*": { "company": "Atlassian", "service": "Atlassian Internal Analytics (psifi)", "category": "functional", "description": "Atlassian's internal experimentation/analytics framework cookies (codename 'psifi'). __Host- prefix enforces strict origin binding. Set on Atlassian-owned properties (atlassian.com, loom.com, trello.com, etc.)", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
         "__Host-session": { "company": "Various", "service": "Secure Session Cookie", "category": "functional", "description": "Host-bound secure session cookie using __Host- prefix for CSRF-resistant session management", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#cookie_prefixes" },
         "__RequestVerificationToken": { "company": "Microsoft", "service": "ASP.NET", "category": "functional", "description": "ASP.NET anti-forgery token cookie for CSRF protection on form submissions", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://learn.microsoft.com/en-us/aspnet/core/security/anti-request-forgery" },
         "__Secure-1PAPISID": { "company": "Google", "service": "Google Accounts", "category": "functional", "description": "Secure API session identifier for Google account services in first-party context", "consent_burden": "required", "lifetime": "2 years", "docs_url": "https://policies.google.com/technologies/cookies" },
@@ -106,6 +107,7 @@
         "_launchnotes_*": { "company": "LaunchNotes", "service": "LaunchNotes Release Notes", "category": "functional", "description": "LaunchNotes release communication platform cookie for subscriber notification state tracking", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.launchnotes.com/privacy-policy" },
         "_legacy_auth0.*": { "company": "Auth0 (Okta)", "service": "Auth0", "category": "functional", "description": "Auth0 legacy compatibility authentication cookie for older browsers without SameSite support", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://auth0.com/privacy" },
         "_nolt_*": { "company": "Nolt", "service": "Nolt Feature Voting", "category": "functional", "description": "Nolt feature request and voting board cookie for user session and vote tracking", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://nolt.io/privacy" },
+        "_otPreferencesSynced": { "company": "OneTrust", "service": "OneTrust CMP", "category": "functional", "description": "OneTrust internal flag indicating whether the visitor's consent preferences have been synced to OneTrust's server", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://www.onetrust.com/products/cookie-consent/" },
         "_pb_uid": { "company": "Productboard", "service": "Productboard Feedback", "category": "functional", "description": "Productboard product management platform cookie for user feedback portal identification", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.productboard.com/privacy-policy/" },
         "_rails_session": { "company": "Ruby on Rails", "service": "Rails Framework", "category": "functional", "description": "Ruby on Rails framework session cookie for server-side session management", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://guides.rubyonrails.org/security.html#sessions" },
         "_route_*": { "company": "Route", "service": "Route Package Protection", "category": "functional", "description": "Route package tracking and shipping protection cookie for order tracking and claim management", "consent_burden": "contested", "pattern": true, "lifetime": "30 days", "docs_url": "https://route.com/privacy-policy" },
@@ -129,13 +131,17 @@
         "age_verified": { "company": "Various", "service": "Age Verification", "category": "functional", "description": "Age gate verification cookie preventing repeated age verification prompts on restricted content sites", "consent_burden": "minimal", "lifetime": "session", "docs_url": "" },
         "alma_*": { "company": "Alma", "service": "Alma BNPL", "category": "functional", "description": "Alma European BNPL cookie for installment payment checkout flow and merchant integration", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://almapay.com/legal/privacy" },
         "amadeus_*": { "company": "Amadeus", "service": "Amadeus Booking Widget", "category": "functional", "description": "Amadeus travel booking engine widget cookie for session and itinerary state management", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://amadeus.com/en/policies/privacy-policy" },
+        "atlCohort": { "company": "Atlassian", "service": "Atlassian Cross-Product Cohort", "category": "functional", "description": "Atlassian's cross-product visitor cohort cookie — shared across .atlassian.com and acquired properties (Loom, Trello). Used for cross-product experimentation and A/B testing", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
+        "atlUserHash": { "company": "Atlassian", "service": "Atlassian Cross-Product Tracking", "category": "functional", "description": "Atlassian hashed user identifier shared across acquired properties", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
+        "atl_session": { "company": "Atlassian", "service": "Atlassian Session", "category": "functional", "description": "Atlassian session cookie — first-party session ID for Atlassian-owned site visits", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
+        "atl_xid.current": { "company": "Atlassian", "service": "Atlassian Cross-Product Tracking", "category": "functional", "description": "Atlassian cross-product visitor identifier (xid). Shared across acquired properties (Loom, Trello, etc.)", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
+        "atl_xid.ts": { "company": "Atlassian", "service": "Atlassian Cross-Product Tracking", "category": "functional", "description": "Atlassian xid timestamp companion cookie", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
         "audioeye_*": { "company": "AudioEye", "service": "AudioEye", "category": "functional", "description": "AudioEye digital accessibility platform cookie for assistive technology settings and session tracking", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.audioeye.com/privacy-policy/" },
         "auth0_*": { "company": "Auth0", "service": "Auth0 (Okta)", "category": "functional", "description": "Auth0 identity platform session cookie for authentication state and single sign-on", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://auth0.com/privacy" },
         "axeptio_authorized_vendors": { "company": "Axeptio", "service": "Axeptio CMP", "category": "functional", "description": "Records which vendors the user has authorized through Axeptio consent banner", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.axeptio.eu/en/privacy-policy" },
         "axeptio_cookies": { "company": "Axeptio", "service": "Axeptio CMP", "category": "functional", "description": "Stores user cookie consent preferences for the Axeptio consent management platform", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.axeptio.eu/en/privacy-policy" },
         "bamboohr_*": { "company": "BambooHR", "service": "BambooHR Recruiting", "category": "functional", "description": "BambooHR HR platform cookie for applicant tracking and career page session management", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.bamboohr.com/privacy-policy/" },
         "batch_*": { "company": "Batch", "service": "Batch Push Notifications", "category": "functional", "description": "Batch mobile-first push notification platform cookie for subscriber device identification", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://batch.com/privacy-policy" },
-        "bb_*": { "company": "Blackboard/Anthology", "service": "Blackboard LMS", "category": "functional", "description": "Blackboard (Anthology) learning management system session and analytics cookie", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.anthology.com/trust-center/privacy-statement" },
         "be_typo_user": { "company": "TYPO3", "service": "TYPO3 CMS", "category": "functional", "description": "TYPO3 backend admin session cookie for CMS administration panel access", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://typo3.org/project/privacy" },
         "borlabs-cookie": { "company": "Borlabs", "service": "Borlabs Cookie", "category": "functional", "description": "Stores user consent preferences for the Borlabs Cookie WordPress consent plugin", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://borlabs.io/borlabs-cookie/" },
         "braintree_*": { "company": "PayPal/Braintree", "service": "Braintree Payments", "category": "functional", "description": "Braintree payment gateway cookie for payment processing session and fraud detection", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.braintreepayments.com/legal/braintree-privacy-policy" },
@@ -159,6 +165,7 @@
         "civicCookieControl": { "company": "Civic", "service": "Civic Cookie Control", "category": "functional", "description": "Stores user cookie consent state for the Civic Cookie Control banner", "consent_burden": "minimal", "lifetime": "90 days", "docs_url": "https://www.civicuk.com/cookie-control/documentation" },
         "clearsale_*": { "company": "ClearSale", "service": "ClearSale Fraud Protection", "category": "functional", "description": "ClearSale fraud protection cookie for e-commerce order screening and chargeback prevention", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.clear.sale/privacy-policy" },
         "cleverpush_*": { "company": "CleverPush", "service": "CleverPush Consent/Push", "category": "functional", "description": "CleverPush notification and consent management cookie for push subscriber state and preferences", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://cleverpush.com/en/privacy/" },
+        "cloudfront_viewer_country": { "company": "Amazon", "service": "AWS CloudFront", "category": "functional", "description": "AWS CloudFront Viewer-Country header echoed into a cookie by sites for first-party geo-routing decisions", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-cloudfront-headers.html" },
         "cmplz_*": { "company": "Complianz", "service": "Complianz", "category": "functional", "description": "Complianz WordPress consent plugin cookie storing per-category consent preferences", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://complianz.io/cookie-policy/" },
         "cognito": { "company": "Amazon", "service": "AWS Cognito", "category": "functional", "description": "AWS Cognito session cookie for federated identity authentication and user pool access", "consent_burden": "minimal", "lifetime": "1 hour", "docs_url": "https://docs.aws.amazon.com/cognito/" },
         "comment_author_*": { "company": "WordPress", "service": "WordPress Core", "category": "functional", "description": "WordPress comment form cookie storing commenter name for form pre-fill", "consent_burden": "minimal", "pattern": true, "lifetime": "347 days", "docs_url": "https://wordpress.org/documentation/article/cookies/" },
@@ -169,6 +176,7 @@
         "consentmanager_*": { "company": "consentmanager", "service": "ConsentManager CMP Extended", "category": "functional", "description": "consentmanager CMP extended cookie storing granular vendor consent and IAB TCF preferences", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.consentmanager.net/privacy/" },
         "contentful_*": { "company": "Contentful", "service": "Contentful CMS", "category": "functional", "description": "Contentful headless CMS cookie for content delivery session and preview management", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.contentful.com/legal/privacy-at-contentful/" },
         "cookie_accepted": { "company": "Various", "service": "Generic Cookie Notice", "category": "functional", "description": "Generic cookie acceptance flag used by many custom-built cookie notice implementations", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "" },
+        "cookiehub": { "company": "CookieHub", "service": "CookieHub CMP", "category": "functional", "description": "CookieHub consent management platform state cookie", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.cookiehub.com/privacy-policy" },
         "cookieyes-consent": { "company": "CookieYes", "service": "CookieYes", "category": "functional", "description": "CookieYes consent banner state cookie encoding per-category consent decisions", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.cookieyes.com/documentation/" },
         "country_code": { "company": "Various", "service": "Country Detection", "category": "functional", "description": "Geolocation-based country code cookie for localizing content, prices, and shipping options", "consent_burden": "minimal", "lifetime": "session", "docs_url": "" },
         "cpass_*": { "company": "ContentPass", "service": "ContentPass", "category": "functional", "description": "ContentPass ad-free subscription service cookie tracking member authentication on partner sites", "consent_burden": "minimal", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.contentpass.de/datenschutz" },
@@ -212,6 +220,7 @@
         "form_key": { "company": "Adobe", "service": "Magento Commerce", "category": "functional", "description": "Magento CSRF form key cookie for protecting form submissions against cross-site request forgery", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://experienceleague.adobe.com/docs/commerce-operations/configuration-guide/cache/config-varnish.html" },
         "forter_*": { "company": "Forter", "service": "Forter Fraud Prevention", "category": "functional", "description": "Forter real-time fraud prevention cookie for device fingerprinting and transaction risk scoring", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.forter.com/privacy-policy/" },
         "freshbooks_*": { "company": "FreshBooks", "service": "FreshBooks Accounting", "category": "functional", "description": "FreshBooks cloud accounting cookie for invoicing session and expense tracking workflow", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.freshbooks.com/policies/privacy" },
+        "g_state": { "company": "Google", "service": "Google Sign-In (GSI)", "category": "functional", "description": "Google Identity Services (GSI) state cookie set when the Google Sign-In button is rendered. Set before any user interaction whenever the GSI library loads — leaks visitor presence to Google", "consent_burden": "required", "lifetime": "6 months", "docs_url": "https://developers.google.com/identity/gsi/web/guides/overview" },
         "gform_*": { "company": "Gravity Forms (Rocketgenius)", "service": "Gravity Forms", "category": "functional", "description": "Gravity Forms WordPress plugin cookie for form state persistence and multi-page form progress", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.gravityforms.com/privacy/" },
         "ghost-admin-api-session": { "company": "Ghost", "service": "Ghost CMS", "category": "functional", "description": "Ghost CMS admin API session cookie for authenticated content management access", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://ghost.org/privacy/" },
         "ghost-members-ssr": { "company": "Ghost", "service": "Ghost CMS", "category": "functional", "description": "Ghost CMS server-side rendering cookie for member authentication state in newsletter/membership sites", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://ghost.org/docs/themes/members/" },
@@ -226,6 +235,7 @@
         "hblid": { "company": "Olark", "service": "Olark Live Chat", "category": "functional", "description": "Olark visitor identifier cookie for persistent chat session and conversation history", "consent_burden": "contested", "lifetime": "2 years", "docs_url": "https://www.olark.com/privacy-policy/" },
         "hellosign_*": { "company": "Dropbox", "service": "Dropbox Sign (HelloSign)", "category": "functional", "description": "Dropbox Sign (formerly HelloSign) e-signature cookie for document workflow session management", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.hellosign.com/privacy" },
         "hs-beacon-*": { "company": "Help Scout", "service": "Help Scout Beacon", "category": "functional", "description": "Help Scout Beacon widget cookie storing visitor identity and help article interaction history", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.helpscout.com/company/legal/privacy/" },
+        "hubspot_id_sent": { "company": "HubSpot", "service": "HubSpot Tracking", "category": "functional", "description": "HubSpot internal flag indicating whether the HubSpot visitor ID has been sent to a server in the current session", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser" },
         "i18n-prefs": { "company": "Amazon", "service": "Amazon", "category": "functional", "description": "Stores currency and locale preferences for Amazon internationalization settings", "consent_burden": "minimal", "lifetime": "2 years", "docs_url": "https://www.amazon.com/gp/help/customer/display.html?nodeId=201890250" },
         "i18n_redirected": { "company": "Nuxt.js", "service": "Nuxt i18n Module", "category": "functional", "description": "Nuxt.js i18n locale redirect cookie storing user language preference to prevent redirect loops", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://i18n.nuxtjs.org/" },
         "icl_current_language": { "company": "WPML", "service": "WPML Multilingual Plugin", "category": "functional", "description": "WPML language cookie (legacy) storing current language code for multilingual WordPress sites", "consent_burden": "minimal", "lifetime": "1 day", "docs_url": "https://wpml.org/documentation/support/browser-cookies-stored-wpml/" },
@@ -293,6 +303,7 @@
         "opentable_*": { "company": "OpenTable", "service": "OpenTable Reservations", "category": "functional", "description": "OpenTable restaurant reservation widget cookie for booking session and diner preference tracking", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.opentable.com/legal/privacy-policy" },
         "orejime": { "company": "Orejime", "service": "Orejime Consent Manager", "category": "functional", "description": "Stores user consent preferences for the Orejime open-source consent manager", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://github.com/nicbou/orejime" },
         "osano_consentmanager": { "company": "Osano", "service": "Osano", "category": "functional", "description": "Osano consent manager cookie recording the visitor's data privacy choices", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.osano.com/cookieconsent" },
+        "ovtc_*": { "company": "OneTrust", "service": "OneTrust Virtual Tag Capture", "category": "functional", "description": "OneTrust Virtual Tag Capture (`ovtc_*`) — records current/previous page URL+title so the CMP can re-evaluate consent decisions on SPA navigations. Family includes ovtc_last_page_url, ovtc_last_page_title, ovtc_this_page_url, ovtc_this_page_title", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.onetrust.com/products/cookie-consent/" },
         "oysterhr_*": { "company": "Oyster HR", "service": "Oyster HR Platform", "category": "functional", "description": "Oyster HR global employment platform cookie for hiring workflow session management", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.oysterhr.com/privacy-policy" },
         "paddle_*": { "company": "Paddle", "service": "Paddle Payments", "category": "functional", "description": "Paddle payment platform cookie for checkout flow session and revenue attribution", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.paddle.com/legal/privacy" },
         "pandadoc_*": { "company": "PandaDoc", "service": "PandaDoc Documents", "category": "functional", "description": "PandaDoc document automation cookie for proposal and contract workflow tracking", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.pandadoc.com/privacy-policy/" },
@@ -328,6 +339,9 @@
         "scalapay_*": { "company": "Scalapay", "service": "Scalapay BNPL", "category": "functional", "description": "Scalapay European buy-now-pay-later cookie for checkout session and installment management", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://www.scalapay.com/privacy-policy" },
         "secure_customer_sig": { "company": "Shopify", "service": "Shopify", "category": "functional", "description": "Shopify customer authentication cookie for logged-in customer session verification", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.shopify.com/legal/cookies" },
         "secureframe_*": { "company": "Secureframe", "service": "Secureframe Compliance", "category": "functional", "description": "Secureframe security compliance cookie for SOC 2/ISO 27001 workflow session management", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://secureframe.com/privacy" },
+        "sequel-consent": { "company": "Sequel.io", "service": "Sequel B2B Virtual Events", "category": "functional", "description": "Sequel.io consent state cookie", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://www.sequel.io/privacy" },
+        "sequelSessionId": { "company": "Sequel.io", "service": "Sequel B2B Virtual Events", "category": "functional", "description": "Sequel.io session identifier", "consent_burden": "required", "lifetime": "1 day", "docs_url": "https://www.sequel.io/privacy" },
+        "sequelUserId": { "company": "Sequel.io", "service": "Sequel B2B Virtual Events", "category": "functional", "description": "Sequel.io B2B virtual events platform user identifier — captures attendance, engagement, and video/audio session metrics on marketing/event sites", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.sequel.io/privacy" },
         "session-id": { "company": "Amazon", "service": "Amazon", "category": "functional", "description": "Primary session identifier for Amazon shopping and browsing experience personalization", "consent_burden": "required", "lifetime": "2 years", "docs_url": "https://www.amazon.com/gp/help/customer/display.html?nodeId=201890250" },
         "session-id-time": { "company": "Amazon", "service": "Amazon", "category": "functional", "description": "Timestamp companion for session-id cookie tracking session duration on Amazon", "consent_burden": "contested", "lifetime": "2 years", "docs_url": "https://www.amazon.com/gp/help/customer/display.html?nodeId=201890250" },
         "sessionid": { "company": "Django", "service": "Django Framework", "category": "functional", "description": "Django default session cookie for maintaining authenticated user sessions", "consent_burden": "minimal", "lifetime": "2 weeks", "docs_url": "https://docs.djangoproject.com/en/stable/topics/http/sessions/" },
@@ -363,6 +377,7 @@
         "tidio_state_*": { "company": "Tidio", "service": "Tidio", "category": "functional", "description": "Tidio chatbot state cookie preserving conversation context and visitor identification", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.tidio.com/privacy-policy/" },
         "tink_*": { "company": "Visa/Tink", "service": "Tink Open Banking", "category": "functional", "description": "Tink open banking cookie for European PSD2 account linking and payment initiation", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://tink.com/privacy-policy/" },
         "tp_*": { "company": "Trustpilot", "service": "Trustpilot Widget", "category": "functional", "description": "Trustpilot review widget cookie for tracking review display and user interactions with embedded reviews", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://legal.trustpilot.com/for-businesses/business-privacy-policy" },
+        "tracking-preferences": { "company": "Twilio (Segment)", "service": "Segment", "category": "functional", "description": "Twilio Segment consent-preference storage cookie. Records which Segment destinations the visitor has consented to", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://segment.com/legal/privacy/" },
         "truelayer_*": { "company": "TrueLayer", "service": "TrueLayer Open Banking", "category": "functional", "description": "TrueLayer open banking cookie for PSD2 bank connection and payment initiation flows", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://truelayer.com/privacy/" },
         "truste.eu.cookie.notice_gdpr_pr498": { "company": "TrustArc", "service": "TrustArc", "category": "functional", "description": "TrustArc GDPR consent notice state cookie storing user privacy preferences", "consent_burden": "minimal", "lifetime": "13 months", "docs_url": "https://trustarc.com/cookie-consent-manager/" },
         "ts_c": { "company": "PayPal", "service": "PayPal", "category": "functional", "description": "PayPal consent cookie storing user preferences for PayPal checkout and payment widgets", "consent_burden": "minimal", "lifetime": "3 years", "docs_url": "https://www.paypal.com/us/legalhub/privacy-full" },

package/dist/actors/marketing.json

@@ -1,7 +1,7 @@
 {
     "category": "marketing",
     "description": "Email marketing, SMS, push notifications, CRM tracking, marketing automation, lead capture",
-    "stats": { "cookies": 182, "domains": 545, "companies": 373 },
+    "stats": { "cookies": 193, "domains": 544, "companies": 375 },
     "cookies": {
         "MCPopupClosed": { "company": "Mailchimp (Intuit)", "service": "Mailchimp", "category": "marketing", "description": "Mailchimp popup closed cookie preventing dismissed subscription popups from re-appearing", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://mailchimp.com/legal/cookies/" },
         "MCPopupSubscribed": { "company": "Mailchimp (Intuit)", "service": "Mailchimp", "category": "marketing", "description": "Mailchimp subscription state cookie hiding signup popups for already-subscribed visitors", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://mailchimp.com/legal/cookies/" },
@@ -16,6 +16,10 @@
         "_aw_*": { "company": "ActiveCampaign", "service": "ActiveCampaign", "category": "marketing", "description": "ActiveCampaign marketing automation web tracking cookie for lead scoring and email triggers", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.activecampaign.com/legal/privacy-policy" },
         "_bfa": { "company": "Bloomreach", "service": "Bloomreach Engagement", "category": "marketing", "description": "Bloomreach (Exponea) marketing platform cookie for e-commerce personalization and campaign attribution", "consent_burden": "required", "lifetime": "2 years", "docs_url": "https://www.bloomreach.com/en/legal/privacy-policy" },
         "_bfs": { "company": "Bloomreach", "service": "Bloomreach Engagement", "category": "marketing", "description": "Bloomreach session cookie for real-time behavioral segmentation and personalized messaging", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.bloomreach.com/en/legal/privacy-policy" },
+        "_biz_flagsA": { "company": "Adobe", "service": "Bizible (Marketo Measure)", "category": "marketing", "description": "Bizible (Marketo Measure / Adobe) feature-flag state cookie for B2B marketing attribution experiments", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.adobe.com/privacy/policy.html" },
+        "_biz_nA": { "company": "Adobe", "service": "Bizible (Marketo Measure)", "category": "marketing", "description": "Bizible (Marketo Measure / Adobe) sequence counter for cross-touchpoint marketing attribution", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.adobe.com/privacy/policy.html" },
+        "_biz_pendingA": { "company": "Adobe", "service": "Bizible (Marketo Measure)", "category": "marketing", "description": "Bizible (Marketo Measure / Adobe) pending-event queue cookie for marketing-touchpoint synchronization", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.adobe.com/privacy/policy.html" },
+        "_biz_uid": { "company": "Adobe", "service": "Bizible (Marketo Measure)", "category": "marketing", "description": "Bizible (Marketo Measure / Adobe) cross-site visitor ID for B2B marketing attribution and revenue analytics", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://www.adobe.com/privacy/policy.html" },
         "_bl_uid": { "company": "Bloomreach", "service": "Bloomreach Engagement", "category": "marketing", "description": "Bloomreach unique visitor identifier for personalization and product recommendation engine", "consent_burden": "required", "lifetime": "6 months", "docs_url": "https://www.bloomreach.com/en/legal/privacy-policy" },
         "_branch_*": { "company": "Branch.io", "service": "Branch Deep Linking", "category": "marketing", "description": "Branch.io deep linking cookie for mobile app attribution and cross-platform user journey tracking", "consent_burden": "required", "pattern": true, "lifetime": "2 years", "docs_url": "https://branch.io/policies/privacy-policy/" },
         "_cio": { "company": "Customer.io", "service": "Customer.io", "category": "marketing", "description": "Customer.io visitor tracking cookie for email automation behavioral triggers. Also stored in localStorage", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://customer.io/legal/cookie-policy/" },
@@ -25,6 +29,9 @@
         "_df_deadline": { "company": "Deadline Funnel", "service": "Deadline Funnel Fake Countdown", "category": "marketing", "description": "Deadline Funnel evergreen countdown cookie — stores personalized fake deadline that resets for each new visitor to create manufactured urgency", "consent_burden": "required_strict", "lifetime": "30 days", "docs_url": "https://deadlinefunnel.com/privacy/" },
         "_drip_client_*": { "company": "Drip", "service": "Drip Email Marketing", "category": "marketing", "description": "Drip e-commerce CRM client identifier for behavioral email trigger automation", "consent_burden": "required", "pattern": true, "lifetime": "2 years", "docs_url": "https://www.drip.com/privacy" },
         "_fdl_*": { "company": "Google", "service": "Firebase Dynamic Links", "category": "marketing", "description": "Firebase Dynamic Links cookie for cross-platform deep linking and app install attribution", "consent_burden": "required", "pattern": true, "lifetime": "90 days", "docs_url": "https://firebase.google.com/support/privacy/" },
+        "_gd_session": { "company": "6sense", "service": "6sense Visitor ID", "category": "marketing", "description": "6sense ABM session cookie storing the cross-session 'svisitor' value passed in 6sense beacons (b.6sc.co). Previously misattributed as 'Google Analytics Debug' — the cookie is set by 6sense's tracker, not Google", "consent_burden": "required_strict", "lifetime": "4 hours", "docs_url": "https://6sense.com/privacy-policy/" },
+        "_gd_svisitor": { "company": "6sense", "service": "6sense Visitor ID", "category": "marketing", "description": "6sense ABM persistent cross-session visitor ID. Same value transmitted as 'svisitor' parameter to b.6sc.co. Previously misattributed as 'Google Analytics Debug'", "consent_burden": "required_strict", "lifetime": "2 years", "docs_url": "https://6sense.com/privacy-policy/" },
+        "_gd_visitor": { "company": "6sense", "service": "6sense Visitor ID", "category": "marketing", "description": "6sense ABM short-form visitor cookie variant — same family as _gd_svisitor", "consent_burden": "required_strict", "lifetime": "2 years", "docs_url": "https://6sense.com/privacy-policy/" },
         "_gp_*": { "company": "GetResponse", "service": "GetResponse", "category": "marketing", "description": "GetResponse marketing automation cookie for landing page tracking and email list segmentation", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.getresponse.com/legal/privacy" },
         "_kx_*": { "company": "Klaviyo", "service": "Klaviyo", "category": "marketing", "description": "Klaviyo extended tracking cookie for cross-channel attribution and behavioral email triggers", "consent_burden": "required", "pattern": true, "lifetime": "2 years", "docs_url": "https://www.klaviyo.com/legal/cookie-policy" },
         "_lfa": { "company": "Leadfeeder", "service": "Leadfeeder (Dealfront)", "category": "marketing", "description": "Leadfeeder B2B website visitor identification cookie for company-level lead tracking via IP resolution", "consent_burden": "required_strict", "lifetime": "2 years", "docs_url": "https://www.leadfeeder.com/privacy/" },
@@ -69,9 +76,12 @@
         "cact_*": { "company": "Commanders Act", "service": "Commanders Act TrustCommander Extended", "category": "marketing", "description": "Commanders Act tag management and consent cookie for GDPR-compliant marketing orchestration", "consent_burden": "required", "pattern": true, "lifetime": "13 months", "docs_url": "https://www.commandersact.com/en/privacy/" },
         "campaign_monitor_*": { "company": "CM Group", "service": "Campaign Monitor", "category": "marketing", "description": "Campaign Monitor email marketing cookie for subscriber tracking and campaign analytics", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.campaignmonitor.com/policies/privacy/" },
         "campaignmonitor_*": { "company": "Campaign Monitor", "service": "Campaign Monitor", "category": "marketing", "description": "Campaign Monitor email marketing cookie for subscriber activity tracking and campaign analytics", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.campaignmonitor.com/policies/#privacy-policy" },
+        "cb_anonymous_id": { "company": "HubSpot (Clearbit)", "service": "Clearbit Reveal", "category": "marketing", "description": "Clearbit Reveal anonymous visitor cookie set on .clearbit.com (HubSpot-owned post-2023). Previously misattributed to Cxense by an over-greedy 'cb_*' pattern — Cxense (Piano DMP) uses 'cX_*' prefix, not 'cb_'", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://clearbit.com/privacy" },
+        "cb_group_id": { "company": "HubSpot (Clearbit)", "service": "Clearbit Reveal", "category": "marketing", "description": "Clearbit Reveal company/group identifier from reverse-IP firmographic match. Previously misattributed to Cxense", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://clearbit.com/privacy" },
+        "cb_user_id": { "company": "HubSpot (Clearbit)", "service": "Clearbit Reveal", "category": "marketing", "description": "Clearbit Reveal cross-session user identifier. Previously misattributed to Cxense", "consent_burden": "required_strict", "lifetime": "1 year", "docs_url": "https://clearbit.com/privacy" },
         "cc_*": { "company": "Constant Contact", "service": "Constant Contact", "category": "marketing", "description": "Constant Contact email marketing cookie for subscriber tracking and campaign engagement analytics", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.constantcontact.com/legal/privacy-statement" },
         "ck_subscriber_id": { "company": "ConvertKit", "service": "ConvertKit", "category": "marketing", "description": "ConvertKit subscriber identifier for email list segmentation and form tracking", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://convertkit.com/privacy" },
-        "clearbit_*": { "company": "Clearbit", "service": "Clearbit (HubSpot)", "category": "marketing", "description": "Clearbit B2B data enrichment cookie for company identification and lead intelligence from IP data", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://clearbit.com/privacy" },
+        "clearbit_*": { "company": "HubSpot (Clearbit)", "service": "Clearbit Reveal", "category": "marketing", "description": "Clearbit B2B data enrichment cookie for company identification and lead intelligence from IP data. Clearbit was acquired by HubSpot in 2023", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://clearbit.com/privacy" },
         "contentful_*": { "company": "Contentful", "service": "Contentful CMS Marketing", "category": "marketing", "description": "Contentful headless CMS marketing cookie for content delivery analytics and A/B testing", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.contentful.com/legal/privacy-at-contentful/" },
         "convertflow_*": { "company": "ConvertFlow", "service": "ConvertFlow CRO", "category": "marketing", "description": "ConvertFlow conversion rate optimization cookie for personalized CTA targeting", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.convertflow.com/privacy" },
         "convertkit_*": { "company": "ConvertKit (Kit)", "service": "ConvertKit", "category": "marketing", "description": "ConvertKit creator email marketing cookie for subscriber identification and form targeting", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://convertkit.com/privacy" },
@@ -119,6 +129,7 @@
         "messagesUtk": { "company": "HubSpot", "service": "HubSpot Messages", "category": "marketing", "description": "HubSpot messages tracking cookie identifying visitors for live chat conversation history and lead capture", "consent_burden": "required", "lifetime": "13 months", "docs_url": "https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser" },
         "mnt_*": { "company": "Monetate", "service": "Monetate", "category": "marketing", "description": "Monetate personalization platform cookie for A/B testing and experience optimization", "consent_burden": "required", "pattern": true, "lifetime": "2 years", "docs_url": "https://www.monetate.com/privacy-policy" },
         "moosend_*": { "company": "Sitecore", "service": "Moosend Email Marketing", "category": "marketing", "description": "Moosend (Sitecore) email automation cookie for subscriber behavior tracking and campaign attribution", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://moosend.com/privacy-policy/" },
+        "mutiny.user.*": { "company": "Mutiny", "service": "Mutiny Personalization", "category": "marketing", "description": "Mutiny B2B website personalization cookie family — visitor token, session, and session counter. Performs reverse-IP firmographic identification to dynamically personalize site content per visiting company. Same legal posture as 6sense/Demandbase", "consent_burden": "required_strict", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.mutinyhq.com/privacy-policy" },
         "nosto_*": { "company": "Nosto", "service": "Nosto", "category": "marketing", "description": "Nosto e-commerce personalization cookie for product recommendations and behavioral targeting", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.nosto.com/privacy/" },
         "nostojs": { "company": "Nosto", "service": "Nosto", "category": "marketing", "description": "Nosto JavaScript personalization engine session cookie for real-time product recommendations", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.nosto.com/privacy/" },
         "omnisendContactID": { "company": "Omnisend", "service": "Omnisend", "category": "marketing", "description": "Omnisend persistent contact identifier for cross-session email marketing attribution", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.omnisend.com/privacy/" },
@@ -603,7 +614,7 @@
         "mkt.piano.io": { "company": "Piano", "service": "Piano Marketing", "category": "marketing", "consent_burden": "required", "note": "Piano marketing module — sends targeted subscription offers and newsletter prompts based on reader engagement scoring", "docs_url": "https://piano.io/privacy-policy/" },
         "monetate.net": { "company": "Monetate", "service": "Monetate", "category": "marketing", "consent_burden": "required", "docs_url": "https://www.monetate.com/privacy-policy" },
         "moosend.com": { "company": "Sitecore", "service": "Moosend Email Marketing", "category": "marketing", "consent_burden": "required", "docs_url": "https://moosend.com/privacy-policy/" },
-        "munchkin.marketo.net": { "company": "Adobe", "service": "Marketo Munchkin", "category": "marketing", "consent_burden": "required", "docs_url": "https://developers.marketo.com/javascript-api/lead-tracking/" },
+        "munchkin.marketo.net": { "company": "Adobe", "service": "Marketo Munchkin", "category": "marketing", "consent_burden": "required", "note": "Marketo's bundled JS includes Sentry error reporting routed to Adobe's own Sentry tenant (o209747.ingest.us.sentry.io). JavaScript errors — which can include form values, URL params, and DOM content — are transmitted to Adobe-controlled infrastructure, not the site operator's. Confirmed across multiple Marketo customer sites", "docs_url": "https://developers.marketo.com/javascript-api/lead-tracking/" },
         "music.amazon.com": { "company": "Amazon", "service": "Amazon Music", "category": "marketing", "consent_burden": "required", "docs_url": "https://www.amazon.com/gp/help/customer/display.html?nodeId=201890250" },
         "music.apple.com": { "company": "Apple", "service": "Apple Music", "category": "marketing", "consent_burden": "contested", "docs_url": "https://www.apple.com/legal/privacy/" },
         "music.youtube.com": { "company": "Google", "service": "YouTube Music", "category": "marketing", "consent_burden": "required", "docs_url": "https://policies.google.com/privacy" },
@@ -693,7 +704,6 @@
         "t.superhuman.com": { "company": "Superhuman", "service": "Superhuman Email Tracking", "category": "marketing", "consent_burden": "required_strict", "note": "Email client with built-in read receipt tracking — embeds invisible pixels that reveal recipient location, device, and open count. Sparked major controversy as recipients cannot opt out. Disables tracking only after public backlash.", "docs_url": "https://superhuman.com/privacy" },
         "t.yesware.com": { "company": "Yesware (Vendasta)", "service": "Yesware Tracking Pixel", "category": "marketing", "consent_burden": "required_strict", "docs_url": "https://www.yesware.com/privacy/" },
         "tag.bombora.com": { "company": "Bombora", "service": "Bombora", "category": "marketing", "consent_burden": "required_strict", "docs_url": "https://bombora.com/privacy-policy/" },
-        "tag.demandbase.com": { "company": "Demandbase", "service": "Demandbase", "category": "marketing", "consent_burden": "required_strict", "docs_url": "https://www.demandbase.com/privacy-policy/" },
         "tag.drip.com": { "company": "Drip", "service": "Drip", "category": "marketing", "consent_burden": "required", "docs_url": "https://www.drip.com/privacy" },
         "tag.getadmiral.com": { "company": "Admiral", "service": "Admiral", "category": "marketing", "consent_burden": "required", "docs_url": "https://getadmiral.com/privacy" },
         "tidal.com": { "company": "Tidal", "service": "Tidal HiFi", "category": "marketing", "consent_burden": "contested", "docs_url": "https://tidal.com/privacy" },

package/dist/actors/security.json

@@ -1,7 +1,7 @@
 {
     "category": "security",
     "description": "Bot detection, CAPTCHA, CSRF protection, fraud prevention, DDoS mitigation",
-    "stats": { "cookies": 44, "domains": 46, "companies": 33 },
+    "stats": { "cookies": 45, "domains": 46, "companies": 33 },
     "cookies": {
         "AEC": { "company": "Google", "service": "Google", "category": "security", "description": "Ensures requests within a browsing session are made by the user and not by other sites", "consent_burden": "minimal", "lifetime": "6 months", "docs_url": "https://policies.google.com/technologies/cookies" },
         "G_AUTHUSER_H": { "company": "Google", "service": "Google Sign-In", "category": "security", "description": "Google multi-account sign-in cookie indicating which logged-in account to use for embedded services", "consent_burden": "minimal", "lifetime": "2 years", "docs_url": "https://policies.google.com/technologies/cookies" },
@@ -20,10 +20,10 @@
         "_abck": { "company": "Akamai", "service": "Akamai Bot Manager", "category": "security", "description": "Akamai Bot Manager cookie for advanced bot detection using behavioral analysis", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.akamai.com/legal/privacy-statement" },
         "_cfuvid": { "company": "Cloudflare", "service": "Cloudflare", "category": "security", "description": "Cloudflare unique visitor ID cookie for rate limiting per-visitor rather than per-IP", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/" },
         "_dd_cookie_test_*": { "company": "DataDome", "service": "DataDome Bot Protection", "category": "security", "description": "DataDome cookie test to verify browser cookie support for bot detection", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://datadome.co/privacy-policy/" },
-        "_dd_s": { "company": "DataDome", "service": "DataDome Bot Protection", "category": "security", "description": "DataDome bot detection session cookie for distinguishing humans from automated traffic", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://datadome.co/privacy-policy/" },
         "_geetest_*": { "company": "GeeTest", "service": "GeeTest CAPTCHA", "category": "security", "description": "GeeTest CAPTCHA verification cookie for bot detection and challenge state", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.geetest.com/en/privacy" },
         "_grecaptcha": { "company": "Google", "service": "reCAPTCHA", "category": "security", "description": "Google reCAPTCHA localStorage token — persists challenge state and behavioral fingerprint data on the client", "consent_burden": "contested", "lifetime": "persistent", "note": "Stored in localStorage, harder to clear than cookies. Contains device fingerprint signals", "docs_url": "https://developers.google.com/recaptcha/docs/faq" },
         "_px3": { "company": "HUMAN Security", "service": "HUMAN (PerimeterX) Bot Defense", "category": "security", "description": "PerimeterX/HUMAN advanced bot detection cookie with behavioral analysis data", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.humansecurity.com/privacy" },
+        "_pxde": { "company": "HUMAN Security", "service": "HUMAN (PerimeterX) Bot Defense", "category": "security", "description": "PerimeterX/HUMAN debug-state cookie companion to _px3/_pxvid for bot detection", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://www.humansecurity.com/privacy" },
         "_pxhd": { "company": "HUMAN Security", "service": "HUMAN (PerimeterX) Bot Defense", "category": "security", "description": "PerimeterX/HUMAN bot detection cookie storing browser fingerprint data", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.humansecurity.com/privacy" },
         "_pxvid": { "company": "HUMAN Security", "service": "HUMAN (PerimeterX) Bot Defense", "category": "security", "description": "PerimeterX/HUMAN visitor identifier cookie for bot risk assessment", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.humansecurity.com/privacy" },
         "ak_bmsc": { "company": "Akamai", "service": "Akamai Bot Manager", "category": "security", "description": "Akamai Bot Manager session cookie for distinguishing human from bot traffic", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.akamai.com/legal/privacy-statement" },
@@ -39,6 +39,7 @@
         "incap_ses_*": { "company": "Imperva", "service": "Imperva (Incapsula) Bot Protection", "category": "security", "description": "Incapsula session cookie for maintaining security state during a visit", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.imperva.com/trust-center/privacy-statement/" },
         "kasada_*": { "company": "Kasada", "service": "Kasada Bot Defense", "category": "security", "description": "Kasada bot mitigation cookie for proof-of-work challenge verification", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.kasada.io/privacy-policy/" },
         "nfp_*": { "company": "Netacea", "service": "Netacea Bot Management", "category": "security", "description": "Netacea bot management fingerprint cookie for distinguishing legitimate traffic from automated bots", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.netacea.com/privacy-policy/" },
+        "pxcts": { "company": "HUMAN Security", "service": "HUMAN (PerimeterX) Bot Defense", "category": "security", "description": "PerimeterX/HUMAN counter cookie tracking client-side timestamps for bot risk scoring", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://www.humansecurity.com/privacy" },
         "reese84": { "company": "F5", "service": "F5 Shape Security", "category": "security", "description": "F5 Shape Security bot detection cookie using telemetry data for automated threat classification", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.f5.com/company/policies/privacy-notice" },
         "sb": { "company": "Meta", "service": "Facebook", "category": "security", "description": "Stores browser details for Facebook security and login verification", "consent_burden": "minimal", "lifetime": "2 years", "docs_url": "https://www.facebook.com/policies/cookies/" },
         "shield_*": { "company": "Shield Security", "service": "Shield Security (WP)", "category": "security", "description": "Shield Security WordPress plugin cookie for login protection, bot blocking, and firewall state", "consent_burden": "minimal", "pattern": true, "lifetime": "session", "docs_url": "https://getshieldsecurity.com/privacy/" },

package/dist/actors/session_recording.json

@@ -1,7 +1,7 @@
 {
     "category": "session_recording",
     "description": "Heatmaps, session replays, screen recording, click tracking, scroll tracking",
-    "stats": { "cookies": 70, "domains": 91, "companies": 53 },
+    "stats": { "cookies": 70, "domains": 90, "companies": 53 },
     "cookies": {
         "ANONCHK": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Indicates whether MUID is transferred to ANID, used for advertising purposes by Microsoft", "consent_burden": "contested", "lifetime": "10 minutes", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
         "CLID": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Identifies the first time Clarity saw this user on any site using Clarity", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
@@ -147,7 +147,6 @@
         "hn.inspectlet.com": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.inspectlet.com/legal" },
         "in.hotjar.com": { "company": "Hotjar", "service": "Hotjar Data Ingestion", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
         "insights.hotjar.com": { "company": "Hotjar", "service": "Hotjar Insights API", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
-        "js-agent.newrelic.com": { "company": "New Relic", "service": "New Relic Browser Session Replay", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/browser-pro-features/session-replay/" },
         "js-agent.newrelic.com/replay": { "company": "New Relic", "service": "New Relic Browser Replay", "category": "session_recording", "consent_burden": "required_strict", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
         "js.userpilot.io": { "company": "Userpilot", "service": "Userpilot SDK", "category": "session_recording", "consent_burden": "required", "docs_url": "https://userpilot.com/privacy-policy/" },
         "o*.ingest.sentry.io": { "company": "Sentry", "service": "Sentry Replay Ingestion", "category": "session_recording", "consent_burden": "required_strict", "pattern": true, "docs_url": "https://sentry.io/privacy/" },

package/dist/actors/social.json

@@ -1,7 +1,7 @@
 {
     "category": "social",
     "description": "Social media embeds, sharing widgets, social login, social plugins",
-    "stats": { "cookies": 74, "domains": 251, "companies": 133 },
+    "stats": { "cookies": 74, "domains": 248, "companies": 132 },
     "cookies": {
         "APISID": { "company": "Google", "service": "Google Accounts", "category": "social", "description": "Google API session identifier for authenticating YouTube embeds and Google integrations", "consent_burden": "contested", "lifetime": "2 years", "docs_url": "https://policies.google.com/technologies/cookies" },
         "GPS": { "company": "Google", "service": "YouTube", "category": "social", "description": "YouTube GPS cookie for recording geolocation data on mobile devices viewing embedded videos", "consent_burden": "required", "lifetime": "30 minutes", "docs_url": "https://policies.google.com/technologies/cookies" },
@@ -82,7 +82,6 @@
         "500px.com/photo": { "company": "500px (VCG)", "service": "500px Photo Embed", "category": "social", "consent_burden": "contested", "docs_url": "https://500px.com/privacy" },
         "accounts.google.com": { "company": "Google", "service": "Google Sign-In", "category": "social", "consent_burden": "contested", "note": "Google Sign-In OAuth widget leaks visitor identity to Google when embedded as social login", "docs_url": "https://developers.google.com/identity/gsi/web/guides/overview" },
         "airtable.com/embed": { "company": "Airtable", "service": "Airtable Embed", "category": "social", "consent_burden": "contested", "docs_url": "https://www.airtable.com/privacy" },
-        "alb.reddit.com": { "company": "Reddit", "service": "Reddit", "category": "social", "consent_burden": "contested", "docs_url": "https://www.redditinc.com/policies/cookies" },
         "anchor.fm": { "company": "Spotify", "service": "Spotify for Podcasters", "category": "social", "consent_burden": "required", "docs_url": "https://www.spotify.com/legal/cookies-policy/" },
         "anchor.fm/embed": { "company": "Spotify (Anchor)", "service": "Anchor Podcast Embed", "category": "social", "consent_burden": "required", "docs_url": "https://www.spotify.com/legal/cookies-policy/" },
         "api-2-0.spot.im": { "company": "OpenWeb", "service": "OpenWeb Comments", "category": "social", "consent_burden": "required", "docs_url": "https://www.openweb.com/legal-and-privacy/privacy/" },
@@ -156,7 +155,6 @@
         "embed.wistia.com": { "company": "Wistia", "service": "Wistia Embed (Social)", "category": "social", "consent_burden": "contested", "docs_url": "https://wistia.com/privacy" },
         "embed.wistia.com/deliveries": { "company": "Wistia", "service": "Wistia Video Delivery", "category": "social", "consent_burden": "contested", "docs_url": "https://wistia.com/privacy" },
         "f.vimeocdn.com": { "company": "Vimeo", "service": "Vimeo Fast CDN", "category": "social", "consent_burden": "contested", "docs_url": "https://vimeo.com/cookie_policy" },
-        "fast.wistia.com": { "company": "Wistia", "service": "Wistia Fast Player", "category": "social", "consent_burden": "contested", "docs_url": "https://wistia.com/privacy" },
         "ghost.io": { "company": "Ghost", "service": "Ghost Publishing", "category": "social", "consent_burden": "minimal", "docs_url": "https://ghost.org/privacy/" },
         "giphy.com": { "company": "Giphy", "service": "Giphy (Meta)", "category": "social", "consent_burden": "required", "note": "Giphy embeds transmit viewer data to Meta since the 2020 acquisition", "docs_url": "https://giphy.com/privacy" },
         "gist.github.com": { "company": "GitHub (Microsoft)", "service": "GitHub Gist Embed", "category": "social", "consent_burden": "contested", "docs_url": "https://docs.github.com/en/site-policy/privacy-policies" },
@@ -234,7 +232,6 @@
         "s7.addthis.com": { "company": "Oracle", "service": "AddThis", "category": "social", "consent_burden": "required_strict", "docs_url": "https://www.addthis.com/privacy" },
         "shadow.tech": { "company": "Shadow", "service": "Shadow Cloud PC", "category": "social", "consent_burden": "required", "docs_url": "https://shadow.tech/privacy-policy" },
         "share.transistor.fm": { "company": "Transistor", "service": "Transistor Podcast Embed", "category": "social", "consent_burden": "minimal", "docs_url": "https://transistor.fm/privacy/" },
-        "snap.licdn.com": { "company": "LinkedIn (Microsoft)", "service": "LinkedIn Embed Assets", "category": "social", "consent_burden": "required", "docs_url": "https://www.linkedin.com/legal/privacy-policy" },
         "soundcloud.com": { "company": "SoundCloud", "service": "SoundCloud", "category": "social", "consent_burden": "contested", "docs_url": "https://soundcloud.com/pages/cookies" },
         "speakerdeck.com": { "company": "Speaker Deck", "service": "Speaker Deck Embed", "category": "social", "consent_burden": "minimal", "docs_url": "https://speakerdeck.com/privacy" },
         "stackblitz.com": { "company": "StackBlitz", "service": "StackBlitz IDE Embed", "category": "social", "consent_burden": "contested", "docs_url": "https://stackblitz.com/privacy-policy" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consenttheater/playbill",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "An open-source, tiered knowledge base of GDPR-relevant web trackers (cookies, domains, companies) with pure-function matching helpers. Each entry is tagged with the consent burden it creates under EU/GDPR rules — no verdicts, no risk scores. Standalone library for privacy auditors, compliance scanners, consent platforms, browser extensions, and research tools.",
   "author": {
     "name": "ConsentTheater",