# Cookie consent with an evidence log regulators can read.

> Privaci is a privacy-management SaaS platform for GDPR cookie compliance. It scans customer websites to find the cookies and trackers they actually load, blocks the ones that fire before consent, and keeps an append-only evidence log.

- URL: https://bon.do/en/work/privaci
- Client: Privaci
- Sector: Privacy and compliance
- Platforms: Web portal and consent snippet
- Role: Full build
- Outcome: Blocks trackers that fire before consent, with an audit log that stores no visitor IP.
- Tags: SaaS

## Overview

Privaci is a privacy-management SaaS platform for GDPR cookie compliance. It scans customer websites to find the cookies and trackers they actually load, blocks the ones that fire before consent, and keeps an append-only evidence log.

Consent is a record of what a visitor saw, what they chose, and what the site did with that choice. Privaci needed to scan real sites, find trackers that fire before consent, and keep an audit trail that a regulator can read.

We built a privacy-management SaaS with a .NET API, a Playwright scanner, PostgreSQL, Wolverine and an Angular 21 portal. The scanner classifies cookies, storage, network trackers and fingerprinting, with pre- and post-consent detection. The consent snippet is a Lit web component that blocks pre-consent tags and drives Google Consent Mode v2. Each site’s verdict is evidence, not a score.

Privaci scans sites for the trackers that actually load, blocks the ones that fire before consent, and keeps an append-only audit log that stores no visitor IP or user agent. It supports per-site billing, agency access and six banner languages.

## Results

- **Tracker seed list:** 148 hosts. Well-known tracker hosts, checked before consent.
- **Banner languages:** 6 locales. With a runtime language switcher.
- **In the audit log:** 0 IPs. No visitor IP or user agent is stored.

## At a glance

- **Client:** Privaci
- **Product:** Cookie consent and privacy management
- **Users:** Site owners · agencies · compliance teams
- **Our role:** Full build
- **Type:** B2B SaaS
- **Stack:** .NET · Wolverine · PostgreSQL · Angular 21 · Playwright · Lit
- **Timeline:** Ongoing product partnership

## What we built

### 01. Scanner

A Playwright worker that crawls pages and classifies cookies, storage, network trackers and fingerprinting before and after consent.

### 02. Consent snippet

A Lit web component that holds tracker tags back until consent and drives Google Consent Mode v2.

### 03. Evidence

A per-site verdict and an append-only audit log that a regulator can read.

## How it ran

### 01. Discover: What consent means

The legal requirement, the visitor’s view, and the evidence a site has to keep.

### 02. Design: A banner without dark patterns

Reject stays as easy as accept, and the preview runs the real snippet.

### 03. Build: Scan, block, record

A scanner, a snippet and an evidence log built as one system.

### 04. Run: Ready for an audit

A site’s evidence is a record, not a score.



## Contact

Bon.do ApS · Rantzausmindevej 228, 5700 Svendborg, Denmark · info@bon.do · https://bon.do/en/contact-us