got cipa? — Free Live CIPA Compliance Audit
powered by
Trusted by privacy-forward teams
For legal & compliance teams
Introducing got pixels?
The free scan only loads your homepage. Real risk shows up deeper in the funnel: chatbot transcripts, checkout fields, contact forms, and pages a one-shot crawler never touches. got pixels? tests those journeys across every pixel litigation statute: CIPA, ECPA, VPPA, WESCA, and FSCA.
Full User Journeys
Add to cart, checkout, contact forms, account signup. The flows where PII actually gets typed.
Chatbot Interactions
Drive live conversations through Intercom, Drift, Zendesk and others. Chatbot wiretap suits are the fastest-growing CIPA theory.
Full Site Crawl
Audit every page, not just the homepage. Pixels on a buried product or careers page count the same in court.
Consent Matrix
Run every flow with and without consent, plus GPC. See exactly what fires before a user has any chance to reject.
Evidence Packages
Network logs, HAR files, screenshots, and request payloads. Court-ready proof for outside counsel under CIPA, ECPA, VPPA, WESCA, and FSCA.
Continuous Monitoring
Schedule recurring audits and get alerted when a new tag, vendor, or marketing tool reintroduces risk.
What is CIPA?
The California Invasion of Privacy Act (Cal. Penal Code § 630–638.55) is a wiretapping statute originally written for phone taps — but courts are applying it to the internet. Under § 631, any third-party script that intercepts the contents of a communication without consent can be treated as an illegal wiretap.
That means analytics pixels, session recorders, chatbots, and ad trackers that fire after a user rejects cookies may be creating statutory liability for the website operator — and the vendor.
Deep dives: CIPA § 631 explained, the pixel litigation wave, chatbot wiretapping suits, and session replay class actions.
Why it matters
$5,000
Statutory damages per violation under § 637.2 — no proof of actual harm required.
Class Action
Every visitor who rejects cookies and is still tracked is a potential class member.
Rising Tide
CIPA filings have surged since 2022. Plaintiffs' firms are actively scanning for violations.
How it works
got cipa? launches a real browser from California, navigates to your site, clicks "reject all" on your consent banner, and records every network request that fires afterward. An AI layer then maps those requests against CIPA statutes to assess your exposure.
It's the same test a plaintiffs' attorney would run — except you get the results first.
Want the full picture?
got pixels? gives you full-journey testing across CIPA, ECPA, VPPA, WESCA, and FSCA, with full audit evidence, professional PDF reports ready for legal review, audit history, and team collaboration — everything you need to respond to a demand letter or stay ahead of one.
Try got pixels? →