The website tracker audit checklist

A repeatable checklist for auditing your site's trackers: inventory, scan, triage, consent, cleanup, and cadence — run it every quarter.

Before you start

Define the scope: the apex domain plus subdomains (blog., shop., docs.), a page budget that covers the estate, and who owns the follow-up (marketing, privacy, and engineering all have a stake). One person should own the checklist end to end.

The checklist

1. Enumerate every URL. Sitemap recursion plus internal-link crawl plus subdomain discovery. Sitemap enumeration · subdomain discovery
2. Scan every page for beacons. Static scan for the full estate; browser-render pass for pages with tag managers. Why static scans miss trackers
3. Review dead and blocked pages. 404s in the sitemap, 403s from bot protection — fix or justify each.
4. List beacons per URL with identifiers. One row per tracker per page; extract container, measurement, and pixel IDs.
5. Flag unknowns. Every tracker nobody recognizes gets an owner assigned and a deadline.
6. Deduplicate. Same vendor, multiple IDs, same pages — pick one and remove the rest.
7. Check CMP presence. Is a consent banner deployed, and are tags actually gated by it? Consent banners and beacon audits
8. Run the pre-consent render test. First-visit render, no consent given — any marketing tracker firing is a finding. Consent basics
9. Verify identifier ownership. Every ID must map to a live account someone owns.
10. Remove the dead weight. Pause, watch a reporting cycle, delete. Safe removal
11. Re-audit and diff. Confirm the beacon table is clean; archive the before/after CSVs.

How often

Quarterly as a baseline, plus after any trigger event: a redesign or template change, a new marketing vendor, a consent-banner change, or an acquisition (new domains inherit old trackers). Set a calendar reminder — tag sprawl regrows silently.

Who owns it

Marketing owns the vendor relationships, privacy owns the consent review, engineering owns the templates and the tag manager. The checklist itself should live with one owner who can chase all three. The detailed method behind this checklist.