How to maintain a cookie and tracker inventory
A useful inventory connects each observed technology to its owner and purpose.
Gather evidence
Observe the site in a fresh browser profile before consent, after consent and after withdrawal. Record actual cookie names, storage keys, network endpoints and vendor names.
Map categories carefully
Classifications such as necessary, preferences, analytics or advertising depend on actual purpose and applicable law; do not assign them solely from a cookie name.
Record lifetimes
Distinguish session storage from persistent lifetimes and note the technical mechanism. Avoid vague phrases when a known expiry can be stated.
Revisit after deployment
New tag managers, embeds, plugins and ads may change the inventory. Give someone ownership of scheduled reviews.
Try the relevant free tool, then verify any output against actual website behavior and local requirements.
Open related tool →Further references
For European data rights, consult the European Commission guidance. For accessibility, consult W3C WAI evaluation guidance. For advertising consent, check your ad provider’s current publisher requirements.
- European Commission — data protection
- W3C WAI — accessibility evaluation
- Google AdSense — certified CMP requirements
Educational content, not legal advice. Last editorial review: 3 November 2026.