Privaci

Cookie consent with an evidence log regulators can read.

Privaci is a privacy-management SaaS platform for GDPR cookie compliance. It scans customer websites to find the cookies and trackers they actually load, blocks the ones that fire before consent, and keeps an append-only evidence log.

SaaS

The Privaci dashboard overview in a browser, with a second window in front showing the consent banner on a demo coffee shop

Client: Privaci
Sector: Privacy and compliance
Platforms: Web portal and consent snippet
Our role: Full build
Period: Ongoing product partnership

What was the challenge?

Consent is a record of what a visitor saw, what they chose, and what the site did with that choice. Privaci needed to scan real sites, find trackers that fire before consent, and keep an audit trail that a regulator can read.

Product: Cookie consent and privacy management
Users: Site owners · agencies · compliance teams
Type: B2B SaaS

What did bon.do build for Privaci?

We built a privacy-management SaaS with a .NET API, a Playwright scanner, PostgreSQL, Wolverine and an Angular 21 portal. The scanner classifies cookies, storage, network trackers and fingerprinting, with pre- and post-consent detection. The consent snippet is a Lit web component that blocks pre-consent tags and drives Google Consent Mode v2. Each site’s verdict is evidence, not a score.

Scanner
A Playwright worker that crawls pages and classifies cookies, storage, network trackers and fingerprinting before and after consent.
Consent snippet
A Lit web component that holds tracker tags back until consent and drives Google Consent Mode v2.
Evidence
A per-site verdict and an append-only audit log that a regulator can read.

Technology

.NET
Wolverine
PostgreSQL
Angular 21
Playwright
Lit

How did the project run?

01Discover
What consent means
The legal requirement, the visitor’s view, and the evidence a site has to keep.
02Design
A banner without dark patterns
Reject stays as easy as accept, and the preview runs the real snippet.
03Build
Scan, block, record
A scanner, a snippet and an evidence log built as one system.
04Run
Ready for an audit
A site’s evidence is a record, not a score.

Inside the product

The banner on a phone: rejecting is as easy as accepting. Real product, demo site.
Customise: one switch per category, with what each one does. Real product, demo site.

The Privaci consent banner on a demo coffee shop website on desktop — The same snippet on desktop, in the site’s own colours. Real product, demo site.

Privaci dashboard overview with site verdict, consent rate, trackers found and recent findings — The overview: consent rates per category and what fires before consent. Real product, example data.

Privaci scan results listing trackers that fire before consent, per page — The Playwright scanner finds trackers that fire before consent, page by page. Real product, example data.

Privaci banner editor with branding and layout controls and a live preview — The banner editor runs the real snippet, not a mock. Real product, example data.

What was the result?

Privaci scans sites for the trackers that actually load, blocks the ones that fire before consent, and keeps an append-only audit log that stores no visitor IP or user agent. It supports per-site billing, agency access and six banner languages.

Tracker seed list148hostsWell-known tracker hosts, checked before consent.

Banner languages6localesWith a runtime language switcher.

In the audit log0IPsNo visitor IP or user agent is stored.