RegSentry scanned 1,943 business websites in a real browser. These are the third-party tools we most often observed making a request before the consent point in the scan.
458 sites (24% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Advertising and conversion measurement requests can transmit page, browser, and event data to Meta.
Verification step: Check that the base pixel and every event are gated by the same consent state.
255 sites (13% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Clarity provides session replay and behavioral analytics, so load timing matters even when recordings are configured carefully.
Verification step: Prevent the Clarity script from loading until the visitor has made the required consent choice.
221 sites (11% of the full sample) contacted this tracker's network before the consent point observed by the scan.
LinkedIn's advertising tag measures conversions and audience activity for campaign attribution.
Verification step: Audit both the direct tag and any tag-manager copy so neither bypasses the consent configuration.
188 sites (10% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Sentry is primarily an error-monitoring tool, but browser telemetry can still create third-party requests before a choice is recorded.
Verification step: Review the browser SDK's privacy settings, data scrubbing, and consent-dependent initialization.
180 sites (9% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Google advertising and remarketing requests can be introduced directly, through Google Tag Manager, or by a plugin.
Verification step: Test Consent Mode and tag triggers in a fresh browser before accepting the banner.
134 sites (7% of the full sample) contacted this tracker's network before the consent point observed by the scan.
HubSpot's tracking code connects analytics, forms, CRM attribution, and visitor identification.
Verification step: Verify that the global tracking code and embedded forms follow the same consent decision.
132 sites (7% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Hotjar supports heatmaps, surveys, and session replay, which makes pre-consent initialization especially important to inspect.
Verification step: Gate initialization, then verify in the network log that no Hotjar endpoint is contacted beforehand.
80 sites (4% of the full sample) contacted this tracker's network before the consent point observed by the scan.
TikTok's advertising pixel records page and conversion events for campaign optimization and retargeting.
Verification step: Block the base pixel and all custom events until the applicable advertising consent is present.
70 sites (4% of the full sample) contacted this tracker's network before the consent point observed by the scan.
VWO experimentation and personalization scripts may load early to reduce visual flicker.
Verification step: Balance experiment delivery with consent requirements and verify the actual first network request.
62 sites (3% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Datadog Real User Monitoring collects browser performance and session telemetry for application operations.
Verification step: Review sampling, privacy controls, and whether initialization should wait for a consent state.
57 sites (3% of the full sample) contacted this tracker's network before the consent point observed by the scan.
Pinterest's tag measures visits, conversions, and advertising audiences.
Verification step: Check every installation path, including ecommerce plugins and tag-manager containers.
55 sites (3% of the full sample) contacted this tracker's network before the consent point observed by the scan.
The X/Twitter pixel supports conversion measurement and advertising audience creation.
Verification step: Verify that the base tag and conversion events remain silent until consent is recorded.
The ranking measures observed network timing in RegSentry's automated scans. It does not say that a vendor is inherently unsafe, that every implementation behaves the same way, or that a technical request proves a legal violation. Direct tags, plugins, tag managers, consent settings, and custom code all affect when a request fires.
Counts are site-level observations from the same July 2026 corpus used in our full website-tracking report. Refresh date: July 19, 2026.
Check your own site for pre-consent tracker requests, free.
Real browser scan, no signup to run it. You see a summary of the findings; the full report with every tracker unlocks with your email.