How Inth scans public websites
Inth uses an automated browser to measure the privacy behaviour a visitor experiences on a public website. This page explains what the scanner does, what it records, and how to ask us not to scan your site.
We say who we are
The browser identifies itself by adding this token to its user agent. It does not impersonate a search crawler or another product.
InthWebScan/1.0 (+https://inth.com/web-scan)A bounded visit, not a crawl
- Public pages only
- The scanner visits the public homepage. It does not pass login, paywall, age-gate, or bot challenges.
- Controlled load
- Each test condition gets one page load. We allow one browser session per origin at a time and wait between visits.
- Consent controls only
- A test may accept all, reject all, or open consent settings. It does not submit forms or change individual purpose or vendor choices.
We record evidence, not secrets
A scan can record network requests, cookie names, storage keys, browser globals, consent signals, page structure, and screenshots. Cookie and storage values are not stored. URLs are sanitised, form values are removed, and raw evidence follows a retention policy.
Ask us not to scan your site
Email us with the domain you want excluded. We may ask you to confirm your association with it. Once the exclusion is recorded, new scan requests for that domain stop before a browser session is created.
Email privacy@inth.com