@slashgear/gdpr-cookie-scanner 3.5.1 → 3.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (113) hide show
  1. package/CHANGELOG.md +106 -0
  2. package/CLAUDE.md +12 -1
  3. package/NEXT_STEPS.md +37 -3
  4. package/README.md +23 -0
  5. package/dist/analyzers/colour.d.ts +36 -0
  6. package/dist/analyzers/colour.d.ts.map +1 -0
  7. package/dist/analyzers/colour.js +75 -0
  8. package/dist/analyzers/colour.js.map +1 -0
  9. package/dist/analyzers/compliance.d.ts.map +1 -1
  10. package/dist/analyzers/compliance.js +24 -6
  11. package/dist/analyzers/compliance.js.map +1 -1
  12. package/dist/analyzers/tcf-decoder.d.ts +9 -0
  13. package/dist/analyzers/tcf-decoder.d.ts.map +1 -0
  14. package/dist/analyzers/tcf-decoder.js +123 -0
  15. package/dist/analyzers/tcf-decoder.js.map +1 -0
  16. package/dist/analyzers/wording.d.ts +1 -0
  17. package/dist/analyzers/wording.d.ts.map +1 -1
  18. package/dist/analyzers/wording.js +39 -0
  19. package/dist/analyzers/wording.js.map +1 -1
  20. package/dist/report/generator.d.ts +1 -2
  21. package/dist/report/generator.d.ts.map +1 -1
  22. package/dist/report/generator.js +80 -108
  23. package/dist/report/generator.js.map +1 -1
  24. package/dist/report/html.d.ts.map +1 -1
  25. package/dist/report/html.js +173 -4
  26. package/dist/report/html.js.map +1 -1
  27. package/dist/scanner/consent-modal.d.ts.map +1 -1
  28. package/dist/scanner/consent-modal.js +57 -39
  29. package/dist/scanner/consent-modal.js.map +1 -1
  30. package/dist/scanner/index.d.ts.map +1 -1
  31. package/dist/scanner/index.js +4 -0
  32. package/dist/scanner/index.js.map +1 -1
  33. package/dist/scanner/tcf.d.ts +9 -0
  34. package/dist/scanner/tcf.d.ts.map +1 -0
  35. package/dist/scanner/tcf.js +72 -0
  36. package/dist/scanner/tcf.js.map +1 -0
  37. package/dist/types.d.ts +26 -0
  38. package/dist/types.d.ts.map +1 -1
  39. package/docs/index.html +37 -49
  40. package/docs/reports/www.arte.tv/after-accept.png +0 -0
  41. package/docs/reports/www.arte.tv/after-reject.png +0 -0
  42. package/docs/reports/www.arte.tv/gdpr-report-arte.tv-2026-02-24.html +997 -0
  43. package/docs/reports/www.deezer.com/after-accept.png +0 -0
  44. package/docs/reports/www.deezer.com/after-reject.png +0 -0
  45. package/docs/reports/www.deezer.com/gdpr-report-deezer.com-2026-02-22.html +1667 -0
  46. package/docs/reports/www.impots.gouv.fr/after-accept.png +0 -0
  47. package/docs/reports/www.impots.gouv.fr/after-reject.png +0 -0
  48. package/docs/reports/www.impots.gouv.fr/gdpr-report-impots.gouv.fr-2026-02-22.html +751 -0
  49. package/docs/reports/www.leboncoin.fr/after-accept.png +0 -0
  50. package/docs/reports/www.leboncoin.fr/after-reject.png +0 -0
  51. package/docs/reports/www.leboncoin.fr/gdpr-report-leboncoin.fr-2026-02-22.html +764 -0
  52. package/docs/reports/www.netflix.com/after-accept.png +0 -0
  53. package/docs/reports/www.netflix.com/after-reject.png +0 -0
  54. package/docs/reports/www.netflix.com/gdpr-report-netflix.com-2026-02-23.html +1050 -0
  55. package/docs/reports/www.radiofrance.fr/after-accept.png +0 -0
  56. package/docs/reports/www.radiofrance.fr/after-reject.png +0 -0
  57. package/docs/reports/www.radiofrance.fr/gdpr-report-radiofrance.fr-2026-02-24.html +1145 -0
  58. package/package.json +1 -2
  59. package/src/analyzers/colour.ts +89 -0
  60. package/src/analyzers/compliance.ts +35 -10
  61. package/src/analyzers/tcf-decoder.ts +130 -0
  62. package/src/analyzers/wording.ts +44 -0
  63. package/src/report/generator.ts +92 -119
  64. package/src/report/html.ts +197 -4
  65. package/src/scanner/consent-modal.ts +64 -38
  66. package/src/scanner/index.ts +5 -0
  67. package/src/scanner/tcf.ts +80 -0
  68. package/src/types.ts +29 -0
  69. package/tests/analyzers/colour.test.ts +187 -0
  70. package/tests/analyzers/compliance.test.ts +102 -0
  71. package/tests/analyzers/tcf-decoder.test.ts +292 -0
  72. package/tests/analyzers/wording.test.ts +38 -0
  73. package/tests/scanner/button-classification.test.ts +32 -0
  74. package/docs/reports/github.com/after-accept.png +0 -0
  75. package/docs/reports/github.com/after-reject.png +0 -0
  76. package/docs/reports/github.com/gdpr-checklist-github.com-2026-02-22.md +0 -44
  77. package/docs/reports/github.com/gdpr-cookies-github.com-2026-02-22.md +0 -29
  78. package/docs/reports/github.com/gdpr-report-github.com-2026-02-22.md +0 -102
  79. package/docs/reports/github.com/gdpr-report-github.com-2026-02-22.pdf +0 -0
  80. package/docs/reports/gitlab.com/after-accept.png +0 -0
  81. package/docs/reports/gitlab.com/after-reject.png +0 -0
  82. package/docs/reports/gitlab.com/gdpr-checklist-gitlab.com-2026-02-22.md +0 -44
  83. package/docs/reports/gitlab.com/gdpr-cookies-gitlab.com-2026-02-22.md +0 -55
  84. package/docs/reports/gitlab.com/gdpr-report-gitlab.com-2026-02-22.md +0 -200
  85. package/docs/reports/gitlab.com/gdpr-report-gitlab.com-2026-02-22.pdf +0 -0
  86. package/docs/reports/gitlab.com/modal-initial.png +0 -0
  87. package/docs/reports/npmjs.com/after-accept.png +0 -0
  88. package/docs/reports/npmjs.com/after-reject.png +0 -0
  89. package/docs/reports/npmjs.com/gdpr-checklist-npmjs.com-2026-02-22.md +0 -44
  90. package/docs/reports/npmjs.com/gdpr-cookies-npmjs.com-2026-02-22.md +0 -25
  91. package/docs/reports/npmjs.com/gdpr-report-npmjs.com-2026-02-22.md +0 -88
  92. package/docs/reports/npmjs.com/gdpr-report-npmjs.com-2026-02-22.pdf +0 -0
  93. package/docs/reports/reddit.com/after-accept.png +0 -0
  94. package/docs/reports/reddit.com/after-reject.png +0 -0
  95. package/docs/reports/reddit.com/gdpr-checklist-reddit.com-2026-02-22.md +0 -44
  96. package/docs/reports/reddit.com/gdpr-cookies-reddit.com-2026-02-22.md +0 -33
  97. package/docs/reports/reddit.com/gdpr-report-reddit.com-2026-02-22.md +0 -148
  98. package/docs/reports/reddit.com/gdpr-report-reddit.com-2026-02-22.pdf +0 -0
  99. package/docs/reports/reddit.com/modal-initial.png +0 -0
  100. package/docs/reports/stackoverflow.com/after-accept.png +0 -0
  101. package/docs/reports/stackoverflow.com/after-reject.png +0 -0
  102. package/docs/reports/stackoverflow.com/gdpr-checklist-stackoverflow.com-2026-02-22.md +0 -44
  103. package/docs/reports/stackoverflow.com/gdpr-cookies-stackoverflow.com-2026-02-22.md +0 -67
  104. package/docs/reports/stackoverflow.com/gdpr-report-stackoverflow.com-2026-02-22.md +0 -206
  105. package/docs/reports/stackoverflow.com/gdpr-report-stackoverflow.com-2026-02-22.pdf +0 -0
  106. package/docs/reports/stackoverflow.com/modal-initial.png +0 -0
  107. package/docs/reports/www.afp.com/after-accept.png +0 -0
  108. package/docs/reports/www.afp.com/after-reject.png +0 -0
  109. package/docs/reports/www.afp.com/gdpr-checklist-afp.com-2026-02-22.md +0 -44
  110. package/docs/reports/www.afp.com/gdpr-cookies-afp.com-2026-02-22.md +0 -42
  111. package/docs/reports/www.afp.com/gdpr-report-afp.com-2026-02-22.md +0 -202
  112. package/docs/reports/www.afp.com/gdpr-report-afp.com-2026-02-22.pdf +0 -0
  113. package/docs/reports/www.afp.com/modal-initial.png +0 -0
package/docs/reports/www.netflix.com/gdpr-report-netflix.com-2026-02-23.html ADDED
@@ -0,0 +1,1050 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8" />
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
+ <title>GDPR Report — netflix.com</title>
7
+ <style>
8
+ *,
9
+ *::before,
10
+ *::after {
11
+ box-sizing: border-box;
12
+ }
13
+
14
+ :root {
15
+ --grade: #ca8a04;
16
+ --grade-bg: #fefce8;
17
+ --surface: #ffffff;
18
+ --bg: #f1f5f9;
19
+ --border: #e2e8f0;
20
+ --text: #0f172a;
21
+ --text-muted: #64748b;
22
+ --critical: #dc2626;
23
+ --critical-bg: #fef2f2;
24
+ --critical-border: #fecaca;
25
+ --warning: #d97706;
26
+ --warning-bg: #fffbeb;
27
+ --warning-border: #fde68a;
28
+ --ok: #16a34a;
29
+ --ok-bg: #f0fdf4;
30
+ --ok-border: #bbf7d0;
31
+ --radius: 10px;
32
+ --shadow: 0 1px 3px rgba(0, 0, 0, 0.08), 0 1px 2px rgba(0, 0, 0, 0.06);
33
+ --shadow-md: 0 4px 6px rgba(0, 0, 0, 0.07), 0 2px 4px rgba(0, 0, 0, 0.06);
34
+ }
35
+
36
+ body {
37
+ margin: 0;
38
+ background: var(--bg);
39
+ color: var(--text);
40
+ font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
41
+ font-size: 14px;
42
+ line-height: 1.6;
43
+ }
44
+
45
+ /* ── Layout ── */
46
+ .page {
47
+ max-width: 1000px;
48
+ margin: 0 auto;
49
+ padding: 24px 16px 64px;
50
+ }
51
+
52
+ /* ── Hero ── */
53
+ .hero {
54
+ background: var(--surface);
55
+ border-radius: var(--radius);
56
+ box-shadow: var(--shadow-md);
57
+ padding: 32px 36px;
58
+ display: flex;
59
+ align-items: center;
60
+ gap: 32px;
61
+ margin-bottom: 20px;
62
+ border-top: 4px solid var(--grade);
63
+ }
64
+ .grade-badge {
65
+ flex-shrink: 0;
66
+ width: 80px;
67
+ height: 80px;
68
+ border-radius: 16px;
69
+ background: var(--grade);
70
+ color: #fff;
71
+ font-size: 42px;
72
+ font-weight: 800;
73
+ display: flex;
74
+ align-items: center;
75
+ justify-content: center;
76
+ letter-spacing: -2px;
77
+ }
78
+ .hero-info {
79
+ flex: 1;
80
+ min-width: 0;
81
+ }
82
+ .hero-info h1 {
83
+ margin: 0 0 4px;
84
+ font-size: 22px;
85
+ font-weight: 700;
86
+ color: var(--text);
87
+ white-space: nowrap;
88
+ overflow: hidden;
89
+ text-overflow: ellipsis;
90
+ }
91
+ .hero-meta {
92
+ font-size: 13px;
93
+ color: var(--text-muted);
94
+ margin: 0;
95
+ }
96
+ .hero-score {
97
+ flex-shrink: 0;
98
+ text-align: right;
99
+ }
100
+ .hero-score .score-num {
101
+ font-size: 40px;
102
+ font-weight: 800;
103
+ color: var(--grade);
104
+ line-height: 1;
105
+ }
106
+ .hero-score .score-den {
107
+ font-size: 18px;
108
+ color: var(--text-muted);
109
+ font-weight: 400;
110
+ }
111
+ .hero-score .score-label {
112
+ font-size: 12px;
113
+ color: var(--text-muted);
114
+ margin-top: 4px;
115
+ }
116
+
117
+ /* ── Score grid ── */
118
+ .score-grid {
119
+ display: grid;
120
+ grid-template-columns: repeat(4, 1fr);
121
+ gap: 12px;
122
+ margin-bottom: 20px;
123
+ }
124
+ @media (max-width: 640px) {
125
+ .score-grid {
126
+ grid-template-columns: repeat(2, 1fr);
127
+ }
128
+ }
129
+ .score-card {
130
+ background: var(--surface);
131
+ border-radius: var(--radius);
132
+ padding: 16px 18px;
133
+ box-shadow: var(--shadow);
134
+ }
135
+ .score-card-label {
136
+ font-size: 11px;
137
+ font-weight: 600;
138
+ text-transform: uppercase;
139
+ letter-spacing: 0.05em;
140
+ color: var(--text-muted);
141
+ margin-bottom: 8px;
142
+ }
143
+ .score-card-value {
144
+ font-size: 22px;
145
+ font-weight: 700;
146
+ color: var(--text);
147
+ margin-bottom: 8px;
148
+ }
149
+ .score-card-value span {
150
+ font-size: 14px;
151
+ font-weight: 400;
152
+ color: var(--text-muted);
153
+ }
154
+ .progress-track {
155
+ height: 6px;
156
+ background: var(--border);
157
+ border-radius: 3px;
158
+ overflow: hidden;
159
+ }
160
+ .progress-fill {
161
+ height: 100%;
162
+ border-radius: 3px;
163
+ background: var(--grade-color, #64748b);
164
+ }
165
+
166
+ /* ── Section ── */
167
+ .section {
168
+ background: var(--surface);
169
+ border-radius: var(--radius);
170
+ box-shadow: var(--shadow);
171
+ margin-bottom: 16px;
172
+ overflow: hidden;
173
+ }
174
+ .section-header {
175
+ padding: 16px 20px;
176
+ border-bottom: 1px solid var(--border);
177
+ display: flex;
178
+ align-items: center;
179
+ gap: 10px;
180
+ }
181
+ .section-header h2 {
182
+ margin: 0;
183
+ font-size: 15px;
184
+ font-weight: 600;
185
+ color: var(--text);
186
+ }
187
+ .section-body {
188
+ padding: 20px;
189
+ }
190
+ .section-body.no-pad {
191
+ padding: 0;
192
+ }
193
+
194
+ /* ── Badges ── */
195
+ .badge {
196
+ display: inline-flex;
197
+ align-items: center;
198
+ gap: 4px;
199
+ padding: 2px 8px;
200
+ border-radius: 99px;
201
+ font-size: 11px;
202
+ font-weight: 600;
203
+ }
204
+ .badge-critical {
205
+ background: var(--critical-bg);
206
+ color: var(--critical);
207
+ border: 1px solid var(--critical-border);
208
+ }
209
+ .badge-warning {
210
+ background: var(--warning-bg);
211
+ color: var(--warning);
212
+ border: 1px solid var(--warning-border);
213
+ }
214
+ .badge-ok {
215
+ background: var(--ok-bg);
216
+ color: var(--ok);
217
+ border: 1px solid var(--ok-border);
218
+ }
219
+ .badge-muted {
220
+ background: var(--bg);
221
+ color: var(--text-muted);
222
+ border: 1px solid var(--border);
223
+ }
224
+ .count-badge {
225
+ background: var(--bg);
226
+ color: var(--text-muted);
227
+ font-size: 12px;
228
+ font-weight: 600;
229
+ padding: 1px 8px;
230
+ border-radius: 99px;
231
+ margin-left: auto;
232
+ }
233
+
234
+ /* ── Issue cards ── */
235
+ .issue-list {
236
+ display: flex;
237
+ flex-direction: column;
238
+ gap: 10px;
239
+ }
240
+ .issue-card {
241
+ border-radius: 8px;
242
+ padding: 14px 16px;
243
+ border: 1px solid;
244
+ }
245
+ .issue-card.critical {
246
+ background: var(--critical-bg);
247
+ border-color: var(--critical-border);
248
+ }
249
+ .issue-card.warning {
250
+ background: var(--warning-bg);
251
+ border-color: var(--warning-border);
252
+ }
253
+ .issue-title {
254
+ font-size: 13px;
255
+ font-weight: 600;
256
+ margin-bottom: 4px;
257
+ }
258
+ .issue-card.critical .issue-title {
259
+ color: var(--critical);
260
+ }
261
+ .issue-card.warning .issue-title {
262
+ color: var(--warning);
263
+ }
264
+ .issue-evidence {
265
+ font-size: 12px;
266
+ color: var(--text-muted);
267
+ margin: 0;
268
+ }
269
+ .no-issues {
270
+ display: flex;
271
+ align-items: center;
272
+ gap: 8px;
273
+ color: var(--ok);
274
+ font-weight: 500;
275
+ font-size: 14px;
276
+ }
277
+
278
+ /* ── Tables ── */
279
+ .data-table {
280
+ width: 100%;
281
+ border-collapse: collapse;
282
+ font-size: 13px;
283
+ }
284
+ .data-table th {
285
+ background: var(--bg);
286
+ padding: 10px 14px;
287
+ text-align: left;
288
+ font-size: 11px;
289
+ font-weight: 600;
290
+ text-transform: uppercase;
291
+ letter-spacing: 0.04em;
292
+ color: var(--text-muted);
293
+ border-bottom: 1px solid var(--border);
294
+ white-space: nowrap;
295
+ }
296
+ .data-table td {
297
+ padding: 10px 14px;
298
+ border-bottom: 1px solid var(--border);
299
+ vertical-align: top;
300
+ }
301
+ .data-table tr:last-child td {
302
+ border-bottom: none;
303
+ }
304
+ .data-table tr:hover td {
305
+ background: #fafafa;
306
+ }
307
+ code {
308
+ font-family: "SFMono-Regular", Consolas, "Liberation Mono", monospace;
309
+ font-size: 12px;
310
+ background: var(--bg);
311
+ padding: 1px 6px;
312
+ border-radius: 4px;
313
+ border: 1px solid var(--border);
314
+ }
315
+ .empty-state {
316
+ text-align: center;
317
+ padding: 32px;
318
+ color: var(--text-muted);
319
+ font-size: 13px;
320
+ }
321
+
322
+ /* ── Checklist status ── */
323
+ .status-ok {
324
+ color: var(--ok);
325
+ font-weight: 600;
326
+ }
327
+ .status-ko {
328
+ color: var(--critical);
329
+ font-weight: 600;
330
+ }
331
+ .status-warn {
332
+ color: var(--warning);
333
+ font-weight: 600;
334
+ }
335
+
336
+ /* ── Info grid ── */
337
+ .info-grid {
338
+ display: grid;
339
+ grid-template-columns: 1fr 1fr;
340
+ gap: 12px;
341
+ }
342
+ @media (max-width: 640px) {
343
+ .info-grid {
344
+ grid-template-columns: 1fr;
345
+ }
346
+ }
347
+ .info-item {
348
+ }
349
+ .info-label {
350
+ font-size: 11px;
351
+ font-weight: 600;
352
+ text-transform: uppercase;
353
+ letter-spacing: 0.04em;
354
+ color: var(--text-muted);
355
+ margin-bottom: 2px;
356
+ }
357
+ .info-value {
358
+ font-size: 13px;
359
+ color: var(--text);
360
+ }
361
+
362
+ /* ── Buttons table ── */
363
+ .btn-chip {
364
+ display: inline-block;
365
+ padding: 2px 10px;
366
+ border-radius: 4px;
367
+ font-size: 12px;
368
+ font-weight: 600;
369
+ }
370
+ .btn-chip.accept {
371
+ background: #dcfce7;
372
+ color: #166534;
373
+ }
374
+ .btn-chip.reject {
375
+ background: #fee2e2;
376
+ color: #991b1b;
377
+ }
378
+ .btn-chip.preferences {
379
+ background: #dbeafe;
380
+ color: #1e40af;
381
+ }
382
+ .btn-chip.unknown,
383
+ .btn-chip.close {
384
+ background: var(--bg);
385
+ color: var(--text-muted);
386
+ }
387
+
388
+ /* ── Recommendations ── */
389
+ .rec-list {
390
+ list-style: none;
391
+ margin: 0;
392
+ padding: 0;
393
+ display: flex;
394
+ flex-direction: column;
395
+ gap: 10px;
396
+ }
397
+ .rec-item {
398
+ display: flex;
399
+ gap: 12px;
400
+ padding: 12px 14px;
401
+ background: #f8fafc;
402
+ border-radius: 8px;
403
+ border: 1px solid var(--border);
404
+ font-size: 13px;
405
+ }
406
+ .rec-num {
407
+ flex-shrink: 0;
408
+ width: 24px;
409
+ height: 24px;
410
+ border-radius: 50%;
411
+ background: var(--text);
412
+ color: #fff;
413
+ font-size: 12px;
414
+ font-weight: 700;
415
+ display: flex;
416
+ align-items: center;
417
+ justify-content: center;
418
+ margin-top: 1px;
419
+ }
420
+
421
+ /* ── Footer ── */
422
+ .footer {
423
+ text-align: center;
424
+ margin-top: 40px;
425
+ font-size: 12px;
426
+ color: var(--text-muted);
427
+ }
428
+ .footer a {
429
+ color: var(--text-muted);
430
+ }
431
+
432
+ @media print {
433
+ body {
434
+ background: #fff;
435
+ }
436
+ .section {
437
+ box-shadow: none;
438
+ border: 1px solid var(--border);
439
+ }
440
+ .page {
441
+ padding: 0;
442
+ }
443
+ }
444
+ </style>
445
+ </head>
446
+ <body>
447
+ <div class="page">
448
+ <div class="hero">
449
+ <div class="grade-badge" style="background: #ca8a04">C</div>
450
+ <div class="hero-info">
451
+ <h1>netflix.com</h1>
452
+ <p class="hero-meta">Scanned on 23 February 2026 at 23:02 · 15.4s</p>
453
+ </div>
454
+ <div class="hero-score">
455
+ <div>
456
+ <span class="score-num" style="color: #ca8a04">71</span
457
+ ><span class="score-den">/100</span>
458
+ </div>
459
+ <div class="score-label">Compliance score</div>
460
+ </div>
461
+ </div>
462
+
463
+ <div class="score-grid">
464
+ <div class="score-card">
465
+ <div class="score-card-label">Consent validity</div>
466
+ <div class="score-card-value">25<span>/25</span></div>
467
+ <div class="progress-track">
468
+ <div class="progress-fill" style="width: 100%; background: #16a34a"></div>
469
+ </div>
470
+ </div>
471
+ <div class="score-card">
472
+ <div class="score-card-label">Easy refusal</div>
473
+ <div class="score-card-value">25<span>/25</span></div>
474
+ <div class="progress-track">
475
+ <div class="progress-fill" style="width: 100%; background: #16a34a"></div>
476
+ </div>
477
+ </div>
478
+ <div class="score-card">
479
+ <div class="score-card-label">Transparency</div>
480
+ <div class="score-card-value">7<span>/25</span></div>
481
+ <div class="progress-track">
482
+ <div class="progress-fill" style="width: 28%; background: #dc2626"></div>
483
+ </div>
484
+ </div>
485
+ <div class="score-card">
486
+ <div class="score-card-label">Cookie behavior</div>
487
+ <div class="score-card-value">14<span>/25</span></div>
488
+ <div class="progress-track">
489
+ <div class="progress-fill" style="width: 56%; background: #ea580c"></div>
490
+ </div>
491
+ </div>
492
+ </div>
493
+
494
+ <div class="section">
495
+ <div class="section-header">
496
+ <h2>Issues</h2>
497
+ <span class="count-badge">5</span>
498
+ <span class="badge badge-critical">3 critical</span>
499
+ <span class="badge badge-warning">2 warnings</span>
500
+ </div>
501
+ <div class="section-body">
502
+ <div class="issue-list">
503
+ <div class="issue-card critical">
504
+ <div class="issue-title">
505
+ 1 non-essential cookie(s) deposited before any interaction
506
+ </div>
507
+ <p class="issue-evidence">gsid (unknown)</p>
508
+ </div>
509
+ <div class="issue-card critical">
510
+ <div class="issue-title">1 non-essential cookie(s) persist after rejection</div>
511
+ <p class="issue-evidence">gsid (unknown)</p>
512
+ </div>
513
+ <div class="issue-card critical">
514
+ <div class="issue-title">2 tracker request(s) fired before any consent</div>
515
+ <p class="issue-evidence">Tracking Pixel</p>
516
+ </div>
517
+ <div class="issue-card warning">
518
+ <div class="issue-title">Missing required information: &quot;withdrawal&quot;</div>
519
+ <p class="issue-evidence">The consent text does not mention withdrawal</p>
520
+ </div>
521
+ <div class="issue-card warning">
522
+ <div class="issue-title">No privacy policy link found in the consent modal</div>
523
+ <p class="issue-evidence">
524
+ GDPR Art. 13 requires the privacy policy to be accessible from the consent interface
525
+ </p>
526
+ </div>
527
+ </div>
528
+ </div>
529
+ </div>
530
+
531
+ <div class="section">
532
+ <div class="section-header">
533
+ <h2>Consent modal</h2>
534
+ <span class="badge badge-ok">Detected</span>
535
+ </div>
536
+ <div class="section-body">
537
+ <div class="info-grid" style="margin-bottom: 20px">
538
+ <div class="info-item">
539
+ <div class="info-label">Selector</div>
540
+ <div class="info-value"><code>#onetrust-banner-sdk</code></div>
541
+ </div>
542
+ <div class="info-item">
543
+ <div class="info-label">Granular controls</div>
544
+ <div class="info-value"><span class="status-warn">✗ No</span></div>
545
+ </div>
546
+ <div class="info-item">
547
+ <div class="info-label">Privacy policy link</div>
548
+ <div class="info-value"><span class="badge badge-warning">Not found</span></div>
549
+ </div>
550
+ <div class="info-item">
551
+ <div class="info-label">Pre-ticked checkboxes</div>
552
+ <div class="info-value"><span class="status-ok">✓ None</span></div>
553
+ </div>
554
+ </div>
555
+ <div
556
+ style="
557
+ font-size: 12px;
558
+ font-weight: 600;
559
+ text-transform: uppercase;
560
+ letter-spacing: 0.04em;
561
+ color: var(--text-muted);
562
+ margin-bottom: 8px;
563
+ "
564
+ >
565
+ Buttons
566
+ </div>
567
+ <table class="data-table">
568
+ <thead>
569
+ <tr>
570
+ <th>Type</th>
571
+ <th>Label</th>
572
+ <th>Font size</th>
573
+ <th>Contrast</th>
574
+ <th>Clicks</th>
575
+ </tr>
576
+ </thead>
577
+ <tbody>
578
+ <tr>
579
+ <td><span class="btn-chip unknown">unknown</span></td>
580
+ <td>En savoir plus</td>
581
+ <td>13.008px</td>
582
+ <td>12.63:1</td>
583
+ <td>1</td>
584
+ </tr>
585
+ <tr>
586
+ <td><span class="btn-chip reject">reject</span></td>
587
+ <td>Refuser</td>
588
+ <td>13.008px</td>
589
+ <td>4.79:1</td>
590
+ <td>1</td>
591
+ </tr>
592
+ <tr>
593
+ <td><span class="btn-chip accept">accept</span></td>
594
+ <td>Accepter</td>
595
+ <td>13.008px</td>
596
+ <td>4.79:1</td>
597
+ <td>1</td>
598
+ </tr>
599
+ </tbody>
600
+ </table>
601
+ </div>
602
+ </div>
603
+
604
+ <div class="section">
605
+ <div class="section-header"><h2>Cookies</h2></div>
606
+ <div class="section-body">
607
+ <div style="margin-bottom: 24px">
608
+ <div
609
+ style="
610
+ font-size: 12px;
611
+ font-weight: 600;
612
+ text-transform: uppercase;
613
+ letter-spacing: 0.04em;
614
+ color: var(--text-muted);
615
+ margin-bottom: 8px;
616
+ display: flex;
617
+ align-items: center;
618
+ gap: 8px;
619
+ "
620
+ >
621
+ Before interaction
622
+ <span class="count-badge">6</span>
623
+ <span class="badge badge-critical">1 non-essential</span>
624
+ </div>
625
+ <table class="data-table">
626
+ <thead>
627
+ <tr>
628
+ <th>Name</th>
629
+ <th>Domain</th>
630
+ <th>Category</th>
631
+ <th>Expiry</th>
632
+ <th>Consent</th>
633
+ </tr>
634
+ </thead>
635
+ <tbody>
636
+ <tr>
637
+ <td><code>flwssn</code></td>
638
+ <td style="color: var(--text-muted)">.netflix.com</td>
639
+ <td><span class="badge badge-muted">unknown</span></td>
640
+ <td style="color: var(--text-muted)">< 1 day</td>
641
+ <td><span class="badge badge-muted">No</span></td>
642
+ </tr>
643
+ <tr>
644
+ <td><code>nfvdid</code></td>
645
+ <td style="color: var(--text-muted)">.netflix.com</td>
646
+ <td><span class="badge badge-muted">unknown</span></td>
647
+ <td style="color: var(--text-muted)">12mo</td>
648
+ <td><span class="badge badge-muted">No</span></td>
649
+ </tr>
650
+ <tr>
651
+ <td><code>SecureNetflixId</code></td>
652
+ <td style="color: var(--text-muted)">.netflix.com</td>
653
+ <td><span class="badge badge-muted">unknown</span></td>
654
+ <td style="color: var(--text-muted)">12mo</td>
655
+ <td><span class="badge badge-muted">No</span></td>
656
+ </tr>
657
+ <tr>
658
+ <td><code>NetflixId</code></td>
659
+ <td style="color: var(--text-muted)">.netflix.com</td>
660
+ <td><span class="badge badge-muted">unknown</span></td>
661
+ <td style="color: var(--text-muted)">12mo</td>
662
+ <td><span class="badge badge-muted">No</span></td>
663
+ </tr>
664
+ <tr>
665
+ <td><code>gsid</code></td>
666
+ <td style="color: var(--text-muted)">.netflix.com</td>
667
+ <td><span class="badge badge-muted">unknown</span></td>
668
+ <td style="color: var(--text-muted)">1d</td>
669
+ <td><span class="badge badge-warning">Required</span></td>
670
+ </tr>
671
+ <tr>
672
+ <td><code>OptanonConsent</code></td>
673
+ <td style="color: var(--text-muted)">.netflix.com</td>
674
+ <td><span class="badge badge-muted">unknown</span></td>
675
+ <td style="color: var(--text-muted)">12mo</td>
676
+ <td><span class="badge badge-muted">No</span></td>
677
+ </tr>
678
+ </tbody>
679
+ </table>
680
+ </div>
681
+ <div style="margin-bottom: 24px">
682
+ <div
683
+ style="
684
+ font-size: 12px;
685
+ font-weight: 600;
686
+ text-transform: uppercase;
687
+ letter-spacing: 0.04em;
688
+ color: var(--text-muted);
689
+ margin-bottom: 8px;
690
+ display: flex;
691
+ align-items: center;
692
+ gap: 8px;
693
+ "
694
+ >
695
+ After reject
696
+ <span class="count-badge">7</span>
697
+
698
+ <span class="badge badge-critical">1 non-essential</span>
699
+ </div>
700
+ <table class="data-table">
701
+ <thead>
702
+ <tr>
703
+ <th>Name</th>
704
+ <th>Domain</th>
705
+ <th>Category</th>
706
+ <th>Expiry</th>
707
+ <th>Consent</th>
708
+ </tr>
709
+ </thead>
710
+ <tbody>
711
+ <tr>
712
+ <td><code>flwssn</code></td>
713
+ <td style="color: var(--text-muted)">.netflix.com</td>
714
+ <td><span class="badge badge-muted">unknown</span></td>
715
+ <td style="color: var(--text-muted)">< 1 day</td>
716
+ <td><span class="badge badge-muted">No</span></td>
717
+ </tr>
718
+ <tr>
719
+ <td><code>nfvdid</code></td>
720
+ <td style="color: var(--text-muted)">.netflix.com</td>
721
+ <td><span class="badge badge-muted">unknown</span></td>
722
+ <td style="color: var(--text-muted)">12mo</td>
723
+ <td><span class="badge badge-muted">No</span></td>
724
+ </tr>
725
+ <tr>
726
+ <td><code>SecureNetflixId</code></td>
727
+ <td style="color: var(--text-muted)">.netflix.com</td>
728
+ <td><span class="badge badge-muted">unknown</span></td>
729
+ <td style="color: var(--text-muted)">12mo</td>
730
+ <td><span class="badge badge-muted">No</span></td>
731
+ </tr>
732
+ <tr>
733
+ <td><code>NetflixId</code></td>
734
+ <td style="color: var(--text-muted)">.netflix.com</td>
735
+ <td><span class="badge badge-muted">unknown</span></td>
736
+ <td style="color: var(--text-muted)">12mo</td>
737
+ <td><span class="badge badge-muted">No</span></td>
738
+ </tr>
739
+ <tr>
740
+ <td><code>gsid</code></td>
741
+ <td style="color: var(--text-muted)">.netflix.com</td>
742
+ <td><span class="badge badge-muted">unknown</span></td>
743
+ <td style="color: var(--text-muted)">1d</td>
744
+ <td><span class="badge badge-warning">Required</span></td>
745
+ </tr>
746
+ <tr>
747
+ <td><code>OptanonAlertBoxClosed</code></td>
748
+ <td style="color: var(--text-muted)">.netflix.com</td>
749
+ <td><span class="badge badge-muted">unknown</span></td>
750
+ <td style="color: var(--text-muted)">12mo</td>
751
+ <td><span class="badge badge-muted">No</span></td>
752
+ </tr>
753
+ <tr>
754
+ <td><code>OptanonConsent</code></td>
755
+ <td style="color: var(--text-muted)">.netflix.com</td>
756
+ <td><span class="badge badge-muted">unknown</span></td>
757
+ <td style="color: var(--text-muted)">12mo</td>
758
+ <td><span class="badge badge-muted">No</span></td>
759
+ </tr>
760
+ </tbody>
761
+ </table>
762
+ </div>
763
+ <div style="margin-bottom: 24px">
764
+ <div
765
+ style="
766
+ font-size: 12px;
767
+ font-weight: 600;
768
+ text-transform: uppercase;
769
+ letter-spacing: 0.04em;
770
+ color: var(--text-muted);
771
+ margin-bottom: 8px;
772
+ display: flex;
773
+ align-items: center;
774
+ gap: 8px;
775
+ "
776
+ >
777
+ After accept
778
+ <span class="count-badge">7</span>
779
+ </div>
780
+ <table class="data-table">
781
+ <thead>
782
+ <tr>
783
+ <th>Name</th>
784
+ <th>Domain</th>
785
+ <th>Category</th>
786
+ <th>Expiry</th>
787
+ <th>Consent</th>
788
+ </tr>
789
+ </thead>
790
+ <tbody>
791
+ <tr>
792
+ <td><code>flwssn</code></td>
793
+ <td style="color: var(--text-muted)">.netflix.com</td>
794
+ <td><span class="badge badge-muted">unknown</span></td>
795
+ <td style="color: var(--text-muted)">< 1 day</td>
796
+ <td><span class="badge badge-muted">No</span></td>
797
+ </tr>
798
+ <tr>
799
+ <td><code>nfvdid</code></td>
800
+ <td style="color: var(--text-muted)">.netflix.com</td>
801
+ <td><span class="badge badge-muted">unknown</span></td>
802
+ <td style="color: var(--text-muted)">12mo</td>
803
+ <td><span class="badge badge-muted">No</span></td>
804
+ </tr>
805
+ <tr>
806
+ <td><code>SecureNetflixId</code></td>
807
+ <td style="color: var(--text-muted)">.netflix.com</td>
808
+ <td><span class="badge badge-muted">unknown</span></td>
809
+ <td style="color: var(--text-muted)">12mo</td>
810
+ <td><span class="badge badge-muted">No</span></td>
811
+ </tr>
812
+ <tr>
813
+ <td><code>NetflixId</code></td>
814
+ <td style="color: var(--text-muted)">.netflix.com</td>
815
+ <td><span class="badge badge-muted">unknown</span></td>
816
+ <td style="color: var(--text-muted)">12mo</td>
817
+ <td><span class="badge badge-muted">No</span></td>
818
+ </tr>
819
+ <tr>
820
+ <td><code>gsid</code></td>
821
+ <td style="color: var(--text-muted)">.netflix.com</td>
822
+ <td><span class="badge badge-muted">unknown</span></td>
823
+ <td style="color: var(--text-muted)">1d</td>
824
+ <td><span class="badge badge-warning">Required</span></td>
825
+ </tr>
826
+ <tr>
827
+ <td><code>OptanonAlertBoxClosed</code></td>
828
+ <td style="color: var(--text-muted)">.netflix.com</td>
829
+ <td><span class="badge badge-muted">unknown</span></td>
830
+ <td style="color: var(--text-muted)">12mo</td>
831
+ <td><span class="badge badge-muted">No</span></td>
832
+ </tr>
833
+ <tr>
834
+ <td><code>OptanonConsent</code></td>
835
+ <td style="color: var(--text-muted)">.netflix.com</td>
836
+ <td><span class="badge badge-muted">unknown</span></td>
837
+ <td style="color: var(--text-muted)">12mo</td>
838
+ <td><span class="badge badge-muted">No</span></td>
839
+ </tr>
840
+ </tbody>
841
+ </table>
842
+ </div>
843
+ </div>
844
+ </div>
845
+
846
+ <div class="section">
847
+ <div class="section-header">
848
+ <h2>Network trackers</h2>
849
+ <span class="count-badge">4</span>
850
+ <span class="badge badge-critical">2 before consent</span>
851
+ </div>
852
+ <div class="section-body no-pad">
853
+ <table class="data-table">
854
+ <thead>
855
+ <tr>
856
+ <th>Tracker</th>
857
+ <th>Category</th>
858
+ <th>Phase</th>
859
+ <th>URL</th>
860
+ </tr>
861
+ </thead>
862
+ <tbody>
863
+ <tr>
864
+ <td>Tracking Pixel</td>
865
+ <td><span class="badge badge-muted">pixel</span></td>
866
+ <td><span class="badge badge-critical">before consent</span></td>
867
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
868
+ <code>https://www.netflix.com/ichnaea/log</code>
869
+ </td>
870
+ </tr>
871
+ <tr>
872
+ <td>Tracking Pixel</td>
873
+ <td><span class="badge badge-muted">pixel</span></td>
874
+ <td><span class="badge badge-critical">before consent</span></td>
875
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
876
+ <code>https://ichnaea-web.netflix.com/log</code>
877
+ </td>
878
+ </tr>
879
+ <tr>
880
+ <td>Tracking Pixel</td>
881
+ <td><span class="badge badge-muted">pixel</span></td>
882
+ <td><span class="badge badge-muted">after-accept</span></td>
883
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
884
+ <code>https://www.netflix.com/ichnaea/log</code>
885
+ </td>
886
+ </tr>
887
+ <tr>
888
+ <td>Tracking Pixel</td>
889
+ <td><span class="badge badge-muted">pixel</span></td>
890
+ <td><span class="badge badge-muted">after-accept</span></td>
891
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
892
+ <code>https://ichnaea-web.netflix.com/log</code>
893
+ </td>
894
+ </tr>
895
+ </tbody>
896
+ </table>
897
+ </div>
898
+ </div>
899
+
900
+ <div class="section">
901
+ <div class="section-header">
902
+ <h2>Recommendations</h2>
903
+ <span class="count-badge">3</span>
904
+ </div>
905
+ <div class="section-body">
906
+ <ul class="rec-list">
907
+ <li class="rec-item">
908
+ <span class="rec-num">1</span>
909
+ <span
910
+ >Do not set any non-essential cookie before consent. Gate the initialisation of
911
+ third-party scripts on the acceptance callback.</span
912
+ >
913
+ </li>
914
+ <li class="rec-item">
915
+ <span class="rec-num">2</span>
916
+ <span
917
+ >Complete the modal information: processing purposes, identity of sub-processors,
918
+ retention period, right to withdraw.</span
919
+ >
920
+ </li>
921
+ <li class="rec-item">
922
+ <span class="rec-num">3</span>
923
+ <span
924
+ >Remove or block non-essential cookies after rejection, and verify consent handling
925
+ server-side.</span
926
+ >
927
+ </li>
928
+ </ul>
929
+ </div>
930
+ </div>
931
+
932
+ <div class="section">
933
+ <div class="section-header">
934
+ <h2>Compliance checklist</h2>
935
+ <span class="count-badge">12 rules</span>
936
+ <span class="badge badge-ok">7 ✓</span>
937
+ <span class="badge badge-critical">3 ✗</span>
938
+ <span class="badge badge-warning">2 ⚠</span>
939
+ </div>
940
+ <div class="section-body no-pad">
941
+ <table class="data-table">
942
+ <thead>
943
+ <tr>
944
+ <th>Category</th>
945
+ <th>Rule</th>
946
+ <th>Status</th>
947
+ <th>Detail</th>
948
+ </tr>
949
+ </thead>
950
+ <tbody>
951
+ <tr>
952
+ <td
953
+ rowspan="3"
954
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
955
+ >
956
+ Consent
957
+ </td>
958
+ <td>Consent modal detected</td>
959
+ <td><span class="status-ok">✓ Compliant</span></td>
960
+ <td style="color: var(--text-muted); font-size: 12px">
961
+ Detected (#onetrust-banner-sdk)
962
+ </td>
963
+ </tr>
964
+ <tr>
965
+ <td>No pre-ticked checkboxes</td>
966
+ <td><span class="status-ok">✓ Compliant</span></td>
967
+ <td style="color: var(--text-muted); font-size: 12px">None detected</td>
968
+ </tr>
969
+ <tr>
970
+ <td>Unambiguous accept label</td>
971
+ <td><span class="status-ok">✓ Compliant</span></td>
972
+ <td style="color: var(--text-muted); font-size: 12px">Accepter</td>
973
+ </tr>
974
+ <tr>
975
+ <td
976
+ rowspan="3"
977
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
978
+ >
979
+ Easy refusal
980
+ </td>
981
+ <td>Reject button at first layer</td>
982
+ <td><span class="status-ok">✓ Compliant</span></td>
983
+ <td style="color: var(--text-muted); font-size: 12px">Refuser</td>
984
+ </tr>
985
+ <tr>
986
+ <td>Reject ≤ clicks than accept</td>
987
+ <td><span class="status-ok">✓ Compliant</span></td>
988
+ <td style="color: var(--text-muted); font-size: 12px">Accept: 1 · Reject: 1</td>
989
+ </tr>
990
+ <tr>
991
+ <td>Button size symmetry</td>
992
+ <td><span class="status-ok">✓ Compliant</span></td>
993
+ <td style="color: var(--text-muted); font-size: 12px">Comparable sizes</td>
994
+ </tr>
995
+ <tr>
996
+ <td
997
+ rowspan="3"
998
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
999
+ >
1000
+ Transparency
1001
+ </td>
1002
+ <td>Granular controls available</td>
1003
+ <td><span class="status-warn">⚠ Warning</span></td>
1004
+ <td style="color: var(--text-muted); font-size: 12px">No granular controls</td>
1005
+ </tr>
1006
+ <tr>
1007
+ <td>Privacy policy in modal</td>
1008
+ <td><span class="status-warn">⚠ Warning</span></td>
1009
+ <td style="color: var(--text-muted); font-size: 12px">Not found</td>
1010
+ </tr>
1011
+ <tr>
1012
+ <td>Privacy policy on page</td>
1013
+ <td><span class="status-ok">✓ Compliant</span></td>
1014
+ <td style="color: var(--text-muted); font-size: 12px">
1015
+ https://help.netflix.com/legal/privacy
1016
+ </td>
1017
+ </tr>
1018
+ <tr>
1019
+ <td
1020
+ rowspan="3"
1021
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
1022
+ >
1023
+ Cookie behavior
1024
+ </td>
1025
+ <td>No non-essential cookie before consent</td>
1026
+ <td><span class="status-ko">✗ Non-compliant</span></td>
1027
+ <td style="color: var(--text-muted); font-size: 12px">1: gsid</td>
1028
+ </tr>
1029
+ <tr>
1030
+ <td>Non-essential cookies removed after reject</td>
1031
+ <td><span class="status-ko">✗ Non-compliant</span></td>
1032
+ <td style="color: var(--text-muted); font-size: 12px">1 persisting</td>
1033
+ </tr>
1034
+ <tr>
1035
+ <td>No tracker before consent</td>
1036
+ <td><span class="status-ko">✗ Non-compliant</span></td>
1037
+ <td style="color: var(--text-muted); font-size: 12px">2 tracker(s)</td>
1038
+ </tr>
1039
+ </tbody>
1040
+ </table>
1041
+ </div>
1042
+ </div>
1043
+
1044
+ <div class="footer">
1045
+ Generated by <a href="https://github.com/Slashgear/gdpr-report">gdpr-cookie-scanner</a>
1046
+ on 23 February 2026 at 23:02
1047
+ </div>
1048
+ </div>
1049
+ </body>
1050
+ </html>