# Realtime Cookie Scanner

### 1. Introduction

The **Realtime Cookie Scanner (RCS)** is Commanders Act’s next-generation module for **continuous, intelligent, and real-world monitoring** of cookies and client-side storage (cookies, localStorage, sessionStorage, etc.).

Unlike crawler-based scanners that simulate visits with bots, the RCS observes **you real user sessions** — across all countries, devices, browsers, and contexts — providing a **complete, live picture** of what actually happens in your users’ browsers.

Whether a cookie appears only for **specific users, browsers, countries, forgotten landing pages, or A/B test variants**, RCS detects it.\
No missed edge cases, no blind spots, no delayed snapshots.

<div><figure><img src="/files/cVuicatbwiQIyAe42gJE" alt="" width="375"><figcaption></figcaption></figure> <figure><img src="/files/wsdl0C4VfGkqJ6oPmZn4" alt="" width="375"><figcaption></figcaption></figure></div>

***

### 2. Typical Use Cases

RCS provides Privacy, Marketing, and Technical teams with **instant, exhaustive, and actionable visibility** over every cookie and storage item.

**Common use cases include:**

* **Continuous CNIL / GDPR compliance monitoring**\
  Detect any cookie deposited before consent and stay compliant in real time.
* **Instant audit after container or tag deployment**\
  Ensure new releases haven’t introduced unauthorized cookies.
* **Proactive detection of new or undeclared partners**\
  Identify scripts depositing unexpected cookies.
* **Automatic multilingual cookie policy publication**\
  Generate and publish an auto-translated cookie table that stays up to date.
* **Post-release monitoring during redesigns or migrations**\
  Detect regressions or compliance issues immediately.

***

### 3. Key Features

#### 🔍 100 % Real-World Detection

* Observes every real user session — no crawlers, no simulations.
* Detects cookies triggered by clicks, scrolls, mobile interactions, or dynamic tags.
* Lists **all URLs** where each cookie was found.
* Groups **variants of the same cookie** (dynamic names or hashed suffixes).
* Displays **detection frequency** (e.g. 0.2 % rare / 32 % common).
* Frequency filter lets you show or hide rare cookies.
* Covers **all countries and devices** at no extra cost.

#### 🧠 Knowledge Base & AI Classification

* Powered by a **large cookie database** enriched through Commanders Act’s browser extensions (Chrome & Edge), leveraging anonymized data from thousands of users.
* Auto-detects vendor, purpose, and category.
* Uses AI to find rare cookies description/category, with human validation.
* Automatically ranks cookies by risk and frequency.

#### 🤖 AI information

RCS uses *Commanders Act AI* capabilities for cookie classification and multilingual content generation.

For more information about Commanders Act AI usage, security, and compliance, see:

{% content-ref url="/pages/cYye52MQmGnbn1XIlM00" %}
[Commander's AI](/getting-started/platform-interface/productivity-tools/commanders-ai.md)
{% endcontent-ref %}

#### ⚙️ Supported Storage Types

1st Party Cookies, 3rd Party Cookies, HttpOnly 1st Party Cookies, HttpOnly 3rd Party Cookies, localStorage, sessionStorage

| Cookie Type                   | Description                                                                                                              | Scanned with                                               |
| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------- |
| **1st Party Cookie**          | 1st party cookies are cookies that are stored on the domain of the website.                                              | <ul><li>Tag client-side</li><li>Chrome Extension</li></ul> |
| **3rd Party Cookie**          | 3rd party cookies are cookies that are stored on a 3rd party domain.                                                     | <ul><li>Chrome Extension</li><li>Cookie Database</li></ul> |
| **HttpOnly 1st Party Cookie** | HttpOnly 1st Party Cookie are server cookies that are stored on the domain of the website and that have a HttpOnly flag. | <ul><li>Tag client-side</li><li>Chrome Extension</li></ul> |
| **HttpOnly 3rd Party Cookie** | HttpOnly 3rd Party Cookie are server cookies that are stored on a 3rd party domain and that have a HttpOnly flag.        | <ul><li>Chrome Extension</li><li>Cookie Database</li></ul> |
| **Local Storage**             | localStorage is a JavaScript accessible browser storage.                                                                 | <ul><li>Tag client-side</li><li>Chrome Extension</li></ul> |
| **Session Storage**           | sessionStorage is a JavaScript accessible session based browser storage.                                                 | <ul><li>Tag client-side</li><li>Chrome Extension</li></ul> |

#### 🔔 Realtime Alerts (< 60 s)

* Instant notifications for new cookies.
* Configurable by severity.
* Integrations : Email, Slack, Teams (and soon webhook).
* Email Recipients: Platform users or external recipients (email addresses not registered in Commanders Act)

<figure><img src="/files/IBIXYZgFj0KikJoaDjzn" alt=""><figcaption></figcaption></figure>

#### 🌍 Multilingual Dynamic Cookie Table

* AI-translated, continuously updated table.
* Export in HTML, JSON, CSV, XLSX.
* Integrates with any website or CMP / TMS.

<figure><img src="/files/HNQ58ZcMeQvyXOkryvun" alt=""><figcaption></figcaption></figure>

#### 🌐 Translation Tokens System

RCS includes a translation token system for multilingual cookie notices.

* Your plan includes a daily allowance of translation tokens (e.g. 200 tokens per day)
* 1 translated field consumes 1 token

#### 📊 Live Dashboards

* Always up-to-date (real & realtime data, not batches).
* Breakdowns by vendor, category, domain, frequency, or status.
* Filters by domain, consent state, frequency, etc.

<figure><img src="/files/rmR4z8NMzPFxB1nC5r2g" alt=""><figcaption></figcaption></figure>

#### 🕒 Versioning, History & Auditability

RCS provides full versioning capabilities to support compliance audits and historical proof.

**Cookie notice version snapshots**

Each time a cookie notice version is created in the Cookie Notice Manager:

* A complete snapshot of all cookies is saved
* This snapshot represents the exact state of detected cookies at that moment
* Snapshots are immutable and preserved over time

**Historical access**

Users can:

* view previous versions at any time
* export historical cookie lists
* demonstrate compliance at a specific point in time

**Supported export formats**

* CSV
* XLSX
* JSON
* HTML

**Compliance and audit use cases**

This enables organizations to:

* prove compliance over a specific period (for example: demonstrate compliance over the last 6 months)
* respond to regulatory audits (CNIL, GDPR, internal compliance teams)
* track compliance evolution over time
* maintain full documentation history

Version history is available in:

`Cookie Notice Manager > Deploy tab`

***

### 4. Setup and Configuration

Implementation is instant.

1-Your Commanders Act consultant or support simply activates RCS in the Backoffice.\
Once enabled, your Web Container injects the JS scanner and starts data collection.

> No scenarios to script, no login management, no maintenance.

RCS works immediately on real traffic — including logged-in or restricted pages.

> 💡 **Compatibility** : RCS is independent of the Commanders Act CMP or TMS and can be used with any CMP vendors or TMS vendors (GTM, etc.)

2- On the "Cookie Notice Manager" page, click on gear icon (top right) to open the settings panel

<figure><img src="/files/qJWkYxYZkEbFl0Ww6f3i" alt=""><figcaption></figcaption></figure>

3-Enter your configuration

* Select the languages you want to use ([more details here](https://doc.commandersact.com/features/realtime-cookie-scanner/cookie-notice-manager#settings))
* Enter your website(s) domain(s)
* Save your config\
  ![](/files/kDt0qbdHXjmHZQVPlK00)

4-Regenerate and Deploy your Web Containers

***

### 5. Interfaces & Roadmap

| Interface                                                                               | Description                                                              | Status              |
| --------------------------------------------------------------------------------------- | ------------------------------------------------------------------------ | ------------------- |
| **Overview**                                                                            | Global summary of detected cookies and compliance status across domains. | 🧩 *In development* |
| **New Cookies**                                                                         | Recently detected cookies with classification and alert options.         | 🧩 *In development* |
| **Live Scan**                                                                           | Real-time feed of detections with domain and device filters.             | 🧩 *In roadmap*     |
| **Cookie Origins**                                                                      | Trace pages, domains, and scripts that set each cookie.                  | 🧩 *In roadmap*     |
| [**Cookies by Category**](/features/realtime-cookie-scanner/cookies-by-category.md)     | Breakdown by functional, analytics, ads, security.                       | ✅ *Available*       |
| **Compliance Summary**                                                                  | Overview of non-compliant cookies and risk levels.                       | 🧩 *In development* |
| [**Cookie Notice Manager**](/features/realtime-cookie-scanner/cookie-notice-manager.md) | Manage, version, and publish the cookie table.                           | ✅ *Available*       |

***

### 6. User Rights

| User Right                 | Description                                                 |
| -------------------------- | ----------------------------------------------------------- |
| **View Cookie List**       | View the full list of detected cookies.                     |
| **Manage Cookie List**     | Edit cookies, add custom entries, and adjust fields.        |
| **Generate Cookie Notice** | Create a new cookie notice version.                         |
| **Deploy Cookie Notice**   | Publish or roll back notice versions.                       |
| **Manage Settings**        | Configure custom fields, filters, and frequency thresholds. |

***

### 7. AI Act compliancy

{% content-ref url="/pages/cYye52MQmGnbn1XIlM00" %}
[Commander's AI](/getting-started/platform-interface/productivity-tools/commanders-ai.md)
{% endcontent-ref %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://doc.commandersact.com/features/realtime-cookie-scanner.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
