@slashgear/gdpr-cookie-scanner 3.7.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (86) hide show
  1. package/.dockerignore +3 -0
  2. package/.gitattributes +1 -0
  3. package/.github/workflows/website.yml +80 -0
  4. package/CHANGELOG.md +33 -0
  5. package/CONTRIBUTING.md +32 -4
  6. package/dist/report/generator.d.ts.map +1 -1
  7. package/dist/report/generator.js +9 -4
  8. package/dist/report/generator.js.map +1 -1
  9. package/dist/report/html.js +12 -3
  10. package/dist/report/html.js.map +1 -1
  11. package/dist/scanner/consent-modal.d.ts.map +1 -1
  12. package/dist/scanner/consent-modal.js +17 -5
  13. package/dist/scanner/consent-modal.js.map +1 -1
  14. package/dist/scanner/index.d.ts.map +1 -1
  15. package/dist/scanner/index.js +12 -2
  16. package/dist/scanner/index.js.map +1 -1
  17. package/package.json +7 -3
  18. package/pnpm-workspace.yaml +3 -0
  19. package/scripts/build-showcase.mjs +113 -0
  20. package/src/report/generator.ts +10 -4
  21. package/src/report/html.ts +13 -3
  22. package/src/scanner/consent-modal.ts +16 -5
  23. package/src/scanner/index.ts +12 -2
  24. package/tests/analyzers/compliance.test.ts +49 -0
  25. package/website/Dockerfile +55 -0
  26. package/website/node_modules/.bin/oxfmt +21 -0
  27. package/website/node_modules/.bin/oxlint +21 -0
  28. package/website/node_modules/.bin/tsc +21 -0
  29. package/website/node_modules/.bin/tsserver +21 -0
  30. package/website/node_modules/.bin/tsx +21 -0
  31. package/website/package.json +29 -0
  32. package/{docs → website/public}/index.html +70 -20
  33. package/website/public/reports/www.20minutes.fr/after-accept.png +3 -0
  34. package/website/public/reports/www.20minutes.fr/after-reject.png +3 -0
  35. package/{docs/reports/www.leboncoin.fr/gdpr-report-leboncoin.fr-2026-02-22.html → website/public/reports/www.20minutes.fr/gdpr-report-20minutes.fr-2026-02-22.html} +194 -51
  36. package/website/public/reports/www.20minutes.fr/modal-initial.png +3 -0
  37. package/website/public/reports/www.arte.tv/after-accept.png +3 -0
  38. package/website/public/reports/www.arte.tv/after-reject.png +3 -0
  39. package/{docs → website/public}/reports/www.arte.tv/gdpr-report-arte.tv-2026-02-24.html +1 -0
  40. package/website/public/reports/www.arte.tv/modal-initial.png +3 -0
  41. package/website/public/reports/www.backmarket.fr/after-accept.png +3 -0
  42. package/website/public/reports/www.backmarket.fr/after-reject.png +3 -0
  43. package/website/public/reports/www.backmarket.fr/gdpr-report-backmarket.fr-2026-02-24.html +1530 -0
  44. package/website/public/reports/www.backmarket.fr/modal-initial.png +3 -0
  45. package/website/public/reports/www.deezer.com/after-accept.png +3 -0
  46. package/website/public/reports/www.deezer.com/after-reject.png +3 -0
  47. package/{docs → website/public}/reports/www.deezer.com/gdpr-report-deezer.com-2026-02-22.html +1 -0
  48. package/website/public/reports/www.deezer.com/modal-initial.png +3 -0
  49. package/website/public/reports/www.france.tv/after-accept.png +3 -0
  50. package/website/public/reports/www.france.tv/after-reject.png +3 -0
  51. package/website/public/reports/www.france.tv/gdpr-report-france.tv-2026-02-23.html +977 -0
  52. package/website/public/reports/www.france.tv/modal-initial.png +3 -0
  53. package/website/public/reports/www.m6.fr/after-accept.png +3 -0
  54. package/website/public/reports/www.m6.fr/after-reject.png +3 -0
  55. package/website/public/reports/www.m6.fr/gdpr-report-m6.fr-2026-02-28.html +1862 -0
  56. package/website/public/reports/www.m6.fr/modal-initial.png +3 -0
  57. package/website/public/reports/www.netflix.com/after-accept.png +3 -0
  58. package/website/public/reports/www.netflix.com/after-reject.png +3 -0
  59. package/{docs → website/public}/reports/www.netflix.com/gdpr-report-netflix.com-2026-02-23.html +1 -0
  60. package/website/public/reports/www.netflix.com/modal-initial.png +3 -0
  61. package/website/public/reports/www.radiofrance.fr/after-accept.png +3 -0
  62. package/website/public/reports/www.radiofrance.fr/after-reject.png +3 -0
  63. package/{docs → website/public}/reports/www.radiofrance.fr/gdpr-report-radiofrance.fr-2026-02-24.html +1 -0
  64. package/website/public/reports/www.radiofrance.fr/modal-initial.png +3 -0
  65. package/website/public/reports/www.tf1.fr/after-accept.png +3 -0
  66. package/website/public/reports/www.tf1.fr/after-reject.png +3 -0
  67. package/website/public/reports/www.tf1.fr/gdpr-report-tf1.fr-2026-02-23.html +1512 -0
  68. package/website/public/reports/www.tf1.fr/modal-initial.png +3 -0
  69. package/website/src/index.ts +15 -0
  70. package/website/src/security.ts +26 -0
  71. package/website/tsconfig.json +14 -0
  72. package/.github/workflows/pages.yml +0 -40
  73. package/docs/reports/www.arte.tv/after-accept.png +0 -0
  74. package/docs/reports/www.arte.tv/after-reject.png +0 -0
  75. package/docs/reports/www.deezer.com/after-accept.png +0 -0
  76. package/docs/reports/www.deezer.com/after-reject.png +0 -0
  77. package/docs/reports/www.impots.gouv.fr/after-accept.png +0 -0
  78. package/docs/reports/www.impots.gouv.fr/after-reject.png +0 -0
  79. package/docs/reports/www.impots.gouv.fr/gdpr-report-impots.gouv.fr-2026-02-22.html +0 -751
  80. package/docs/reports/www.leboncoin.fr/after-accept.png +0 -0
  81. package/docs/reports/www.leboncoin.fr/after-reject.png +0 -0
  82. package/docs/reports/www.netflix.com/after-accept.png +0 -0
  83. package/docs/reports/www.netflix.com/after-reject.png +0 -0
  84. package/docs/reports/www.radiofrance.fr/after-accept.png +0 -0
  85. package/docs/reports/www.radiofrance.fr/after-reject.png +0 -0
  86. /package/{docs → website/public}/style.css +0 -0
@@ -0,0 +1,977 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8" />
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
+ <title>GDPR Report — france.tv</title>
7
+ <style>
8
+ *,
9
+ *::before,
10
+ *::after {
11
+ box-sizing: border-box;
12
+ }
13
+
14
+ :root {
15
+ --grade: #ca8a04;
16
+ --grade-bg: #fefce8;
17
+ --surface: #ffffff;
18
+ --bg: #f1f5f9;
19
+ --border: #e2e8f0;
20
+ --text: #0f172a;
21
+ --text-muted: #64748b;
22
+ --critical: #dc2626;
23
+ --critical-bg: #fef2f2;
24
+ --critical-border: #fecaca;
25
+ --warning: #d97706;
26
+ --warning-bg: #fffbeb;
27
+ --warning-border: #fde68a;
28
+ --ok: #16a34a;
29
+ --ok-bg: #f0fdf4;
30
+ --ok-border: #bbf7d0;
31
+ --radius: 10px;
32
+ --shadow: 0 1px 3px rgba(0, 0, 0, 0.08), 0 1px 2px rgba(0, 0, 0, 0.06);
33
+ --shadow-md: 0 4px 6px rgba(0, 0, 0, 0.07), 0 2px 4px rgba(0, 0, 0, 0.06);
34
+ }
35
+
36
+ body {
37
+ margin: 0;
38
+ background: var(--bg);
39
+ color: var(--text);
40
+ font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
41
+ font-size: 14px;
42
+ line-height: 1.6;
43
+ }
44
+
45
+ /* ── Layout ── */
46
+ .page {
47
+ max-width: 1000px;
48
+ margin: 0 auto;
49
+ padding: 24px 16px 64px;
50
+ }
51
+
52
+ /* ── Hero ── */
53
+ .hero {
54
+ background: var(--surface);
55
+ border-radius: var(--radius);
56
+ box-shadow: var(--shadow-md);
57
+ padding: 32px 36px;
58
+ display: flex;
59
+ align-items: center;
60
+ gap: 32px;
61
+ margin-bottom: 20px;
62
+ border-top: 4px solid var(--grade);
63
+ }
64
+ .grade-badge {
65
+ flex-shrink: 0;
66
+ width: 80px;
67
+ height: 80px;
68
+ border-radius: 16px;
69
+ background: var(--grade);
70
+ color: #fff;
71
+ font-size: 42px;
72
+ font-weight: 800;
73
+ display: flex;
74
+ align-items: center;
75
+ justify-content: center;
76
+ letter-spacing: -2px;
77
+ }
78
+ .hero-info {
79
+ flex: 1;
80
+ min-width: 0;
81
+ }
82
+ .hero-info h1 {
83
+ margin: 0 0 4px;
84
+ font-size: 22px;
85
+ font-weight: 700;
86
+ color: var(--text);
87
+ white-space: nowrap;
88
+ overflow: hidden;
89
+ text-overflow: ellipsis;
90
+ }
91
+ .hero-meta {
92
+ font-size: 13px;
93
+ color: var(--text-muted);
94
+ margin: 0;
95
+ }
96
+ .hero-score {
97
+ flex-shrink: 0;
98
+ text-align: right;
99
+ }
100
+ .hero-score .score-num {
101
+ font-size: 40px;
102
+ font-weight: 800;
103
+ color: var(--grade);
104
+ line-height: 1;
105
+ }
106
+ .hero-score .score-den {
107
+ font-size: 18px;
108
+ color: var(--text-muted);
109
+ font-weight: 400;
110
+ }
111
+ .hero-score .score-label {
112
+ font-size: 12px;
113
+ color: var(--text-muted);
114
+ margin-top: 4px;
115
+ }
116
+
117
+ /* ── Score grid ── */
118
+ .score-grid {
119
+ display: grid;
120
+ grid-template-columns: repeat(4, 1fr);
121
+ gap: 12px;
122
+ margin-bottom: 20px;
123
+ }
124
+ @media (max-width: 640px) {
125
+ .score-grid {
126
+ grid-template-columns: repeat(2, 1fr);
127
+ }
128
+ }
129
+ .score-card {
130
+ background: var(--surface);
131
+ border-radius: var(--radius);
132
+ padding: 16px 18px;
133
+ box-shadow: var(--shadow);
134
+ }
135
+ .score-card-label {
136
+ font-size: 11px;
137
+ font-weight: 600;
138
+ text-transform: uppercase;
139
+ letter-spacing: 0.05em;
140
+ color: var(--text-muted);
141
+ margin-bottom: 8px;
142
+ }
143
+ .score-card-value {
144
+ font-size: 22px;
145
+ font-weight: 700;
146
+ color: var(--text);
147
+ margin-bottom: 8px;
148
+ }
149
+ .score-card-value span {
150
+ font-size: 14px;
151
+ font-weight: 400;
152
+ color: var(--text-muted);
153
+ }
154
+ .progress-track {
155
+ height: 6px;
156
+ background: var(--border);
157
+ border-radius: 3px;
158
+ overflow: hidden;
159
+ }
160
+ .progress-fill {
161
+ height: 100%;
162
+ border-radius: 3px;
163
+ background: var(--grade-color, #64748b);
164
+ }
165
+
166
+ /* ── Section ── */
167
+ .section {
168
+ background: var(--surface);
169
+ border-radius: var(--radius);
170
+ box-shadow: var(--shadow);
171
+ margin-bottom: 16px;
172
+ overflow: hidden;
173
+ }
174
+ .section-header {
175
+ padding: 16px 20px;
176
+ border-bottom: 1px solid var(--border);
177
+ display: flex;
178
+ align-items: center;
179
+ gap: 10px;
180
+ }
181
+ .section-header h2 {
182
+ margin: 0;
183
+ font-size: 15px;
184
+ font-weight: 600;
185
+ color: var(--text);
186
+ }
187
+ .section-body {
188
+ padding: 20px;
189
+ }
190
+ .section-body.no-pad {
191
+ padding: 0;
192
+ }
193
+
194
+ /* ── Badges ── */
195
+ .badge {
196
+ display: inline-flex;
197
+ align-items: center;
198
+ gap: 4px;
199
+ padding: 2px 8px;
200
+ border-radius: 99px;
201
+ font-size: 11px;
202
+ font-weight: 600;
203
+ }
204
+ .badge-critical {
205
+ background: var(--critical-bg);
206
+ color: var(--critical);
207
+ border: 1px solid var(--critical-border);
208
+ }
209
+ .badge-warning {
210
+ background: var(--warning-bg);
211
+ color: var(--warning);
212
+ border: 1px solid var(--warning-border);
213
+ }
214
+ .badge-ok {
215
+ background: var(--ok-bg);
216
+ color: var(--ok);
217
+ border: 1px solid var(--ok-border);
218
+ }
219
+ .badge-muted {
220
+ background: var(--bg);
221
+ color: var(--text-muted);
222
+ border: 1px solid var(--border);
223
+ }
224
+ .count-badge {
225
+ background: var(--bg);
226
+ color: var(--text-muted);
227
+ font-size: 12px;
228
+ font-weight: 600;
229
+ padding: 1px 8px;
230
+ border-radius: 99px;
231
+ margin-left: auto;
232
+ }
233
+
234
+ /* ── Issue cards ── */
235
+ .issue-list {
236
+ display: flex;
237
+ flex-direction: column;
238
+ gap: 10px;
239
+ }
240
+ .issue-card {
241
+ border-radius: 8px;
242
+ padding: 14px 16px;
243
+ border: 1px solid;
244
+ }
245
+ .issue-card.critical {
246
+ background: var(--critical-bg);
247
+ border-color: var(--critical-border);
248
+ }
249
+ .issue-card.warning {
250
+ background: var(--warning-bg);
251
+ border-color: var(--warning-border);
252
+ }
253
+ .issue-title {
254
+ font-size: 13px;
255
+ font-weight: 600;
256
+ margin-bottom: 4px;
257
+ }
258
+ .issue-card.critical .issue-title {
259
+ color: var(--critical);
260
+ }
261
+ .issue-card.warning .issue-title {
262
+ color: var(--warning);
263
+ }
264
+ .issue-evidence {
265
+ font-size: 12px;
266
+ color: var(--text-muted);
267
+ margin: 0;
268
+ }
269
+ .no-issues {
270
+ display: flex;
271
+ align-items: center;
272
+ gap: 8px;
273
+ color: var(--ok);
274
+ font-weight: 500;
275
+ font-size: 14px;
276
+ }
277
+
278
+ /* ── Tables ── */
279
+ .data-table {
280
+ width: 100%;
281
+ border-collapse: collapse;
282
+ font-size: 13px;
283
+ }
284
+ .data-table th {
285
+ background: var(--bg);
286
+ padding: 10px 14px;
287
+ text-align: left;
288
+ font-size: 11px;
289
+ font-weight: 600;
290
+ text-transform: uppercase;
291
+ letter-spacing: 0.04em;
292
+ color: var(--text-muted);
293
+ border-bottom: 1px solid var(--border);
294
+ white-space: nowrap;
295
+ }
296
+ .data-table td {
297
+ padding: 10px 14px;
298
+ border-bottom: 1px solid var(--border);
299
+ vertical-align: top;
300
+ }
301
+ .data-table tr:last-child td {
302
+ border-bottom: none;
303
+ }
304
+ .data-table tr:hover td {
305
+ background: #fafafa;
306
+ }
307
+ code {
308
+ font-family: "SFMono-Regular", Consolas, "Liberation Mono", monospace;
309
+ font-size: 12px;
310
+ background: var(--bg);
311
+ padding: 1px 6px;
312
+ border-radius: 4px;
313
+ border: 1px solid var(--border);
314
+ }
315
+ .empty-state {
316
+ text-align: center;
317
+ padding: 32px;
318
+ color: var(--text-muted);
319
+ font-size: 13px;
320
+ }
321
+
322
+ /* ── Checklist status ── */
323
+ .status-ok {
324
+ color: var(--ok);
325
+ font-weight: 600;
326
+ }
327
+ .status-ko {
328
+ color: var(--critical);
329
+ font-weight: 600;
330
+ }
331
+ .status-warn {
332
+ color: var(--warning);
333
+ font-weight: 600;
334
+ }
335
+
336
+ /* ── Info grid ── */
337
+ .info-grid {
338
+ display: grid;
339
+ grid-template-columns: 1fr 1fr;
340
+ gap: 12px;
341
+ }
342
+ @media (max-width: 640px) {
343
+ .info-grid {
344
+ grid-template-columns: 1fr;
345
+ }
346
+ }
347
+ .info-item {
348
+ }
349
+ .info-label {
350
+ font-size: 11px;
351
+ font-weight: 600;
352
+ text-transform: uppercase;
353
+ letter-spacing: 0.04em;
354
+ color: var(--text-muted);
355
+ margin-bottom: 2px;
356
+ }
357
+ .info-value {
358
+ font-size: 13px;
359
+ color: var(--text);
360
+ }
361
+
362
+ /* ── Buttons table ── */
363
+ .btn-chip {
364
+ display: inline-block;
365
+ padding: 2px 10px;
366
+ border-radius: 4px;
367
+ font-size: 12px;
368
+ font-weight: 600;
369
+ }
370
+ .btn-chip.accept {
371
+ background: #dcfce7;
372
+ color: #166534;
373
+ }
374
+ .btn-chip.reject {
375
+ background: #fee2e2;
376
+ color: #991b1b;
377
+ }
378
+ .btn-chip.preferences {
379
+ background: #dbeafe;
380
+ color: #1e40af;
381
+ }
382
+ .btn-chip.unknown,
383
+ .btn-chip.close {
384
+ background: var(--bg);
385
+ color: var(--text-muted);
386
+ }
387
+
388
+ /* ── Recommendations ── */
389
+ .rec-list {
390
+ list-style: none;
391
+ margin: 0;
392
+ padding: 0;
393
+ display: flex;
394
+ flex-direction: column;
395
+ gap: 10px;
396
+ }
397
+ .rec-item {
398
+ display: flex;
399
+ gap: 12px;
400
+ padding: 12px 14px;
401
+ background: #f8fafc;
402
+ border-radius: 8px;
403
+ border: 1px solid var(--border);
404
+ font-size: 13px;
405
+ }
406
+ .rec-num {
407
+ flex-shrink: 0;
408
+ width: 24px;
409
+ height: 24px;
410
+ border-radius: 50%;
411
+ background: var(--text);
412
+ color: #fff;
413
+ font-size: 12px;
414
+ font-weight: 700;
415
+ display: flex;
416
+ align-items: center;
417
+ justify-content: center;
418
+ margin-top: 1px;
419
+ }
420
+
421
+ /* ── Footer ── */
422
+ .footer {
423
+ text-align: center;
424
+ margin-top: 40px;
425
+ font-size: 12px;
426
+ color: var(--text-muted);
427
+ }
428
+ .footer a {
429
+ color: var(--text-muted);
430
+ }
431
+
432
+ @media print {
433
+ body {
434
+ background: #fff;
435
+ }
436
+ .section {
437
+ box-shadow: none;
438
+ border: 1px solid var(--border);
439
+ }
440
+ .page {
441
+ padding: 0;
442
+ }
443
+ }
444
+ </style>
445
+ </head>
446
+ <body>
447
+ <div class="page">
448
+ <div class="hero">
449
+ <div class="grade-badge" style="background: #ca8a04">C</div>
450
+ <div class="hero-info">
451
+ <h1>france.tv</h1>
452
+ <p class="hero-meta">Scanned on 23 February 2026 at 20:34 · 11.7s</p>
453
+ </div>
454
+ <div class="hero-score">
455
+ <div>
456
+ <span class="score-num" style="color: #ca8a04">71</span
457
+ ><span class="score-den">/100</span>
458
+ </div>
459
+ <div class="score-label">Compliance score</div>
460
+ </div>
461
+ </div>
462
+
463
+ <div class="score-grid">
464
+ <div class="score-card">
465
+ <div class="score-card-label">Consent validity</div>
466
+ <div class="score-card-value">25<span>/25</span></div>
467
+ <div class="progress-track">
468
+ <div class="progress-fill" style="width: 100%; background: #16a34a"></div>
469
+ </div>
470
+ </div>
471
+ <div class="score-card">
472
+ <div class="score-card-label">Easy refusal</div>
473
+ <div class="score-card-value">10<span>/25</span></div>
474
+ <div class="progress-track">
475
+ <div class="progress-fill" style="width: 40%; background: #ea580c"></div>
476
+ </div>
477
+ </div>
478
+ <div class="score-card">
479
+ <div class="score-card-label">Transparency</div>
480
+ <div class="score-card-value">15<span>/25</span></div>
481
+ <div class="progress-track">
482
+ <div class="progress-fill" style="width: 60%; background: #ca8a04"></div>
483
+ </div>
484
+ </div>
485
+ <div class="score-card">
486
+ <div class="score-card-label">Cookie behavior</div>
487
+ <div class="score-card-value">21<span>/25</span></div>
488
+ <div class="progress-track">
489
+ <div class="progress-fill" style="width: 84%; background: #16a34a"></div>
490
+ </div>
491
+ </div>
492
+ </div>
493
+
494
+ <div class="section">
495
+ <div class="section-header">
496
+ <h2>Issues</h2>
497
+ <span class="count-badge">3</span>
498
+ <span class="badge badge-critical">3 critical</span>
499
+ </div>
500
+ <div class="section-body">
501
+ <div class="issue-list">
502
+ <div class="issue-card critical">
503
+ <div class="issue-title">No reject/decline option found in the consent modal</div>
504
+ <p class="issue-evidence">
505
+ RGPD requires refusal to be as easy as acceptance (CNIL 2022)
506
+ </p>
507
+ </div>
508
+ <div class="issue-card critical">
509
+ <div class="issue-title">No reject button on first layer</div>
510
+ <p class="issue-evidence">
511
+ CNIL (2022) requires reject to require no more clicks than accept
512
+ </p>
513
+ </div>
514
+ <div class="issue-card critical">
515
+ <div class="issue-title">2 tracker request(s) fired before any consent</div>
516
+ <p class="issue-evidence">Tracking Pixel</p>
517
+ </div>
518
+ </div>
519
+ </div>
520
+ </div>
521
+
522
+ <div class="section">
523
+ <div class="section-header">
524
+ <h2>Consent modal</h2>
525
+ <span class="badge badge-ok">Detected</span>
526
+ </div>
527
+ <div class="section-body">
528
+ <img src="modal-initial.png" alt="Consent modal screenshot" class="modal-screenshot" />
529
+ <div class="info-grid" style="margin-bottom: 20px">
530
+ <div class="info-item">
531
+ <div class="info-label">Selector</div>
532
+ <div class="info-value"><code>.didomi-popup-container</code></div>
533
+ </div>
534
+ <div class="info-item">
535
+ <div class="info-label">Granular controls</div>
536
+ <div class="info-value"><span class="status-warn">✗ No</span></div>
537
+ </div>
538
+ <div class="info-item">
539
+ <div class="info-label">Privacy policy link</div>
540
+ <div class="info-value">
541
+ <a
542
+ href="https://www.france.tv/confidentialite/politique-de-confidentialite/#:~:text=afficher%20de%20la%20publicite%20personnalisee%20ou%20non%2Dpersonnalisee"
543
+ target="_blank"
544
+ rel="noopener"
545
+ >https://www.france.tv/confidentialite/politique-de-confidentialite/#:~:text=afficher%20de%20la%20publicite%20personnalisee%20ou%20non%2Dpersonnalisee</a
546
+ >
547
+ </div>
548
+ </div>
549
+ <div class="info-item">
550
+ <div class="info-label">Pre-ticked checkboxes</div>
551
+ <div class="info-value"><span class="status-ok">✓ None</span></div>
552
+ </div>
553
+ </div>
554
+ <div
555
+ style="
556
+ font-size: 12px;
557
+ font-weight: 600;
558
+ text-transform: uppercase;
559
+ letter-spacing: 0.04em;
560
+ color: var(--text-muted);
561
+ margin-bottom: 8px;
562
+ "
563
+ >
564
+ Buttons
565
+ </div>
566
+ <table class="data-table">
567
+ <thead>
568
+ <tr>
569
+ <th>Type</th>
570
+ <th>Label</th>
571
+ <th>Font size</th>
572
+ <th>Contrast</th>
573
+ <th>Clicks</th>
574
+ </tr>
575
+ </thead>
576
+ <tbody>
577
+ <tr>
578
+ <td><span class="btn-chip accept">accept</span></td>
579
+ <td>Continuer sans accepter →</td>
580
+ <td>18px</td>
581
+ <td>21:1</td>
582
+ <td>1</td>
583
+ </tr>
584
+ <tr>
585
+ <td><span class="btn-chip unknown">unknown</span></td>
586
+ <td>Paramétrer</td>
587
+ <td>15px</td>
588
+ <td>1:1</td>
589
+ <td>1</td>
590
+ </tr>
591
+ <tr>
592
+ <td><span class="btn-chip accept">accept</span></td>
593
+ <td>Tout Accepter</td>
594
+ <td>15px</td>
595
+ <td>1:1</td>
596
+ <td>1</td>
597
+ </tr>
598
+ </tbody>
599
+ </table>
600
+ </div>
601
+ </div>
602
+
603
+ <div class="section">
604
+ <div class="section-header"><h2>Cookies</h2></div>
605
+ <div class="section-body">
606
+ <div style="margin-bottom: 24px">
607
+ <div
608
+ style="
609
+ font-size: 12px;
610
+ font-weight: 600;
611
+ text-transform: uppercase;
612
+ letter-spacing: 0.04em;
613
+ color: var(--text-muted);
614
+ margin-bottom: 8px;
615
+ display: flex;
616
+ align-items: center;
617
+ gap: 8px;
618
+ "
619
+ >
620
+ Before interaction
621
+ <span class="count-badge">5</span>
622
+ </div>
623
+ <table class="data-table">
624
+ <thead>
625
+ <tr>
626
+ <th>Name</th>
627
+ <th>Domain</th>
628
+ <th>Category</th>
629
+ <th>Expiry</th>
630
+ <th>Consent</th>
631
+ </tr>
632
+ </thead>
633
+ <tbody>
634
+ <tr>
635
+ <td><code>__Host-next-auth.csrf-token</code></td>
636
+ <td style="color: var(--text-muted)">www.france.tv</td>
637
+ <td><span class="badge badge-muted">unknown</span></td>
638
+ <td style="color: var(--text-muted)">Session</td>
639
+ <td><span class="badge badge-muted">No</span></td>
640
+ </tr>
641
+ <tr>
642
+ <td><code>__Secure-next-auth.callback-url</code></td>
643
+ <td style="color: var(--text-muted)">www.france.tv</td>
644
+ <td><span class="badge badge-muted">unknown</span></td>
645
+ <td style="color: var(--text-muted)">Session</td>
646
+ <td><span class="badge badge-muted">No</span></td>
647
+ </tr>
648
+ <tr>
649
+ <td><code>_pprv</code></td>
650
+ <td style="color: var(--text-muted)">.france.tv</td>
651
+ <td><span class="badge badge-muted">unknown</span></td>
652
+ <td style="color: var(--text-muted)">13mo</td>
653
+ <td><span class="badge badge-muted">No</span></td>
654
+ </tr>
655
+ <tr>
656
+ <td><code>_pcid</code></td>
657
+ <td style="color: var(--text-muted)">.france.tv</td>
658
+ <td><span class="badge badge-muted">unknown</span></td>
659
+ <td style="color: var(--text-muted)">13mo</td>
660
+ <td><span class="badge badge-muted">No</span></td>
661
+ </tr>
662
+ <tr>
663
+ <td><code>_pctx</code></td>
664
+ <td style="color: var(--text-muted)">.france.tv</td>
665
+ <td><span class="badge badge-muted">unknown</span></td>
666
+ <td style="color: var(--text-muted)">13mo</td>
667
+ <td><span class="badge badge-muted">No</span></td>
668
+ </tr>
669
+ </tbody>
670
+ </table>
671
+ </div>
672
+ <div style="margin-bottom: 24px">
673
+ <div
674
+ style="
675
+ font-size: 12px;
676
+ font-weight: 600;
677
+ text-transform: uppercase;
678
+ letter-spacing: 0.04em;
679
+ color: var(--text-muted);
680
+ margin-bottom: 8px;
681
+ display: flex;
682
+ align-items: center;
683
+ gap: 8px;
684
+ "
685
+ >
686
+ After reject
687
+ <span class="count-badge">0</span>
688
+ </div>
689
+ <p class="empty-state">No cookies detected.</p>
690
+ </div>
691
+ <div style="margin-bottom: 24px">
692
+ <div
693
+ style="
694
+ font-size: 12px;
695
+ font-weight: 600;
696
+ text-transform: uppercase;
697
+ letter-spacing: 0.04em;
698
+ color: var(--text-muted);
699
+ margin-bottom: 8px;
700
+ display: flex;
701
+ align-items: center;
702
+ gap: 8px;
703
+ "
704
+ >
705
+ After accept
706
+ <span class="count-badge">5</span>
707
+ </div>
708
+ <table class="data-table">
709
+ <thead>
710
+ <tr>
711
+ <th>Name</th>
712
+ <th>Domain</th>
713
+ <th>Category</th>
714
+ <th>Expiry</th>
715
+ <th>Consent</th>
716
+ </tr>
717
+ </thead>
718
+ <tbody>
719
+ <tr>
720
+ <td><code>__Host-next-auth.csrf-token</code></td>
721
+ <td style="color: var(--text-muted)">www.france.tv</td>
722
+ <td><span class="badge badge-muted">unknown</span></td>
723
+ <td style="color: var(--text-muted)">Session</td>
724
+ <td><span class="badge badge-muted">No</span></td>
725
+ </tr>
726
+ <tr>
727
+ <td><code>__Secure-next-auth.callback-url</code></td>
728
+ <td style="color: var(--text-muted)">www.france.tv</td>
729
+ <td><span class="badge badge-muted">unknown</span></td>
730
+ <td style="color: var(--text-muted)">Session</td>
731
+ <td><span class="badge badge-muted">No</span></td>
732
+ </tr>
733
+ <tr>
734
+ <td><code>_pprv</code></td>
735
+ <td style="color: var(--text-muted)">.france.tv</td>
736
+ <td><span class="badge badge-muted">unknown</span></td>
737
+ <td style="color: var(--text-muted)">13mo</td>
738
+ <td><span class="badge badge-muted">No</span></td>
739
+ </tr>
740
+ <tr>
741
+ <td><code>_pcid</code></td>
742
+ <td style="color: var(--text-muted)">.france.tv</td>
743
+ <td><span class="badge badge-muted">unknown</span></td>
744
+ <td style="color: var(--text-muted)">13mo</td>
745
+ <td><span class="badge badge-muted">No</span></td>
746
+ </tr>
747
+ <tr>
748
+ <td><code>_pctx</code></td>
749
+ <td style="color: var(--text-muted)">.france.tv</td>
750
+ <td><span class="badge badge-muted">unknown</span></td>
751
+ <td style="color: var(--text-muted)">13mo</td>
752
+ <td><span class="badge badge-muted">No</span></td>
753
+ </tr>
754
+ </tbody>
755
+ </table>
756
+ </div>
757
+ </div>
758
+ </div>
759
+
760
+ <div class="section">
761
+ <div class="section-header">
762
+ <h2>Network trackers</h2>
763
+ <span class="count-badge">5</span>
764
+ <span class="badge badge-critical">2 before consent</span>
765
+ </div>
766
+ <div class="section-body no-pad">
767
+ <table class="data-table">
768
+ <thead>
769
+ <tr>
770
+ <th>Tracker</th>
771
+ <th>Category</th>
772
+ <th>Phase</th>
773
+ <th>URL</th>
774
+ </tr>
775
+ </thead>
776
+ <tbody>
777
+ <tr>
778
+ <td>Tracking Pixel</td>
779
+ <td><span class="badge badge-muted">pixel</span></td>
780
+ <td><span class="badge badge-critical">before consent</span></td>
781
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
782
+ <code
783
+ >https://logs1238.xiti.com/event?s=634550&amp;idclient=mlzksf6jt51930st</code
784
+ >
785
+ </td>
786
+ </tr>
787
+ <tr>
788
+ <td>Tracking Pixel</td>
789
+ <td><span class="badge badge-muted">pixel</span></td>
790
+ <td><span class="badge badge-critical">before consent</span></td>
791
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
792
+ <code
793
+ >https://logs1238.xiti.com/event?s=634550&amp;idclient=mlzksf6jt51930st</code
794
+ >
795
+ </td>
796
+ </tr>
797
+ <tr>
798
+ <td>Tracking Pixel</td>
799
+ <td><span class="badge badge-muted">pixel</span></td>
800
+ <td><span class="badge badge-muted">after-accept</span></td>
801
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
802
+ <code
803
+ >https://logs1238.xiti.com/event?s=634550&amp;idclient=mlzksifzoyukmfsr</code
804
+ >
805
+ </td>
806
+ </tr>
807
+ <tr>
808
+ <td>Tracking Pixel</td>
809
+ <td><span class="badge badge-muted">pixel</span></td>
810
+ <td><span class="badge badge-muted">after-accept</span></td>
811
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
812
+ <code
813
+ >https://logs1238.xiti.com/event?s=634550&amp;idclient=mlzksifzoyukmfsr</code
814
+ >
815
+ </td>
816
+ </tr>
817
+ <tr>
818
+ <td>Tracking Pixel</td>
819
+ <td><span class="badge badge-muted">pixel</span></td>
820
+ <td><span class="badge badge-muted">after-accept</span></td>
821
+ <td style="font-size: 11px; color: var(--text-muted); word-break: break-all">
822
+ <code
823
+ >https://logs1238.xiti.com/event?s=634550&amp;idclient=mlzksifzoyukmfsr</code
824
+ >
825
+ </td>
826
+ </tr>
827
+ </tbody>
828
+ </table>
829
+ </div>
830
+ </div>
831
+
832
+ <div class="section">
833
+ <div class="section-header">
834
+ <h2>Recommendations</h2>
835
+ <span class="count-badge">2</span>
836
+ </div>
837
+ <div class="section-body">
838
+ <ul class="rec-list">
839
+ <li class="rec-item">
840
+ <span class="rec-num">1</span>
841
+ <span
842
+ >Add a &quot;Reject all&quot; button at the first layer of the modal, requiring no
843
+ more clicks than &quot;Accept all&quot; (CNIL 2022).</span
844
+ >
845
+ </li>
846
+ <li class="rec-item">
847
+ <span class="rec-num">2</span>
848
+ <span
849
+ >Do not set any non-essential cookie before consent. Gate the initialisation of
850
+ third-party scripts on the acceptance callback.</span
851
+ >
852
+ </li>
853
+ </ul>
854
+ </div>
855
+ </div>
856
+
857
+ <div class="section">
858
+ <div class="section-header">
859
+ <h2>Compliance checklist</h2>
860
+ <span class="count-badge">12 rules</span>
861
+ <span class="badge badge-ok">9 ✓</span>
862
+ <span class="badge badge-critical">2 ✗</span>
863
+ <span class="badge badge-warning">1 ⚠</span>
864
+ </div>
865
+ <div class="section-body no-pad">
866
+ <table class="data-table">
867
+ <thead>
868
+ <tr>
869
+ <th>Category</th>
870
+ <th>Rule</th>
871
+ <th>Status</th>
872
+ <th>Detail</th>
873
+ </tr>
874
+ </thead>
875
+ <tbody>
876
+ <tr>
877
+ <td
878
+ rowspan="3"
879
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
880
+ >
881
+ Consent
882
+ </td>
883
+ <td>Consent modal detected</td>
884
+ <td><span class="status-ok">✓ Compliant</span></td>
885
+ <td style="color: var(--text-muted); font-size: 12px">
886
+ Detected (.didomi-popup-container)
887
+ </td>
888
+ </tr>
889
+ <tr>
890
+ <td>No pre-ticked checkboxes</td>
891
+ <td><span class="status-ok">✓ Compliant</span></td>
892
+ <td style="color: var(--text-muted); font-size: 12px">None detected</td>
893
+ </tr>
894
+ <tr>
895
+ <td>Unambiguous accept label</td>
896
+ <td><span class="status-ok">✓ Compliant</span></td>
897
+ <td style="color: var(--text-muted); font-size: 12px">Continuer sans accepter →</td>
898
+ </tr>
899
+ <tr>
900
+ <td
901
+ rowspan="3"
902
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
903
+ >
904
+ Easy refusal
905
+ </td>
906
+ <td>Reject button at first layer</td>
907
+ <td><span class="status-ko">✗ Non-compliant</span></td>
908
+ <td style="color: var(--text-muted); font-size: 12px">Not found</td>
909
+ </tr>
910
+ <tr>
911
+ <td>Reject ≤ clicks than accept</td>
912
+ <td><span class="status-ok">✓ Compliant</span></td>
913
+ <td style="color: var(--text-muted); font-size: 12px">Cannot verify</td>
914
+ </tr>
915
+ <tr>
916
+ <td>Button size symmetry</td>
917
+ <td><span class="status-ok">✓ Compliant</span></td>
918
+ <td style="color: var(--text-muted); font-size: 12px">Comparable sizes</td>
919
+ </tr>
920
+ <tr>
921
+ <td
922
+ rowspan="3"
923
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
924
+ >
925
+ Transparency
926
+ </td>
927
+ <td>Granular controls available</td>
928
+ <td><span class="status-warn">⚠ Warning</span></td>
929
+ <td style="color: var(--text-muted); font-size: 12px">No granular controls</td>
930
+ </tr>
931
+ <tr>
932
+ <td>Privacy policy in modal</td>
933
+ <td><span class="status-ok">✓ Compliant</span></td>
934
+ <td style="color: var(--text-muted); font-size: 12px">
935
+ https://www.france.tv/confidentialite/politique-de-confidentialite/#:~:text=afficher%20de%20la%20publicite%20personnalisee%20ou%20non%2Dpersonnalisee
936
+ </td>
937
+ </tr>
938
+ <tr>
939
+ <td>Privacy policy on page</td>
940
+ <td><span class="status-ok">✓ Compliant</span></td>
941
+ <td style="color: var(--text-muted); font-size: 12px">
942
+ https://www.france.tv/confidentialite/politique-de-confidentialite/#:~:text=afficher%20de%20la%20publicite%20personnalisee%20ou%20non%2Dpersonnalisee
943
+ </td>
944
+ </tr>
945
+ <tr>
946
+ <td
947
+ rowspan="3"
948
+ style="font-weight: 600; vertical-align: top; background: var(--bg)"
949
+ >
950
+ Cookie behavior
951
+ </td>
952
+ <td>No non-essential cookie before consent</td>
953
+ <td><span class="status-ok">✓ Compliant</span></td>
954
+ <td style="color: var(--text-muted); font-size: 12px">None</td>
955
+ </tr>
956
+ <tr>
957
+ <td>Non-essential cookies removed after reject</td>
958
+ <td><span class="status-ok">✓ Compliant</span></td>
959
+ <td style="color: var(--text-muted); font-size: 12px">Correctly removed</td>
960
+ </tr>
961
+ <tr>
962
+ <td>No tracker before consent</td>
963
+ <td><span class="status-ko">✗ Non-compliant</span></td>
964
+ <td style="color: var(--text-muted); font-size: 12px">2 tracker(s)</td>
965
+ </tr>
966
+ </tbody>
967
+ </table>
968
+ </div>
969
+ </div>
970
+
971
+ <div class="footer">
972
+ Generated by <a href="https://github.com/Slashgear/gdpr-report">gdpr-cookie-scanner</a>
973
+ on 23 February 2026 at 20:34
974
+ </div>
975
+ </div>
976
+ </body>
977
+ </html>