Illustrative sample — synthetic data, not a live customer scan
Passive evidence snapshot
CartTruth storefront signal snapshot
https://demo-shop.example/
For Shopify agencies: use this evidence format on storefronts you own, manage or are authorised to review. CartTruth is EUR 79 once. Request the launch link or email carttruth.audit@icloud.com.
Windows notice: portable v0.1 is unsigned. Verify SHA-256 85D2FADD9026D9F2EDD6B4EAFDB36FCF27012042D62841B3E15699571F7DBFD6. SmartScreen may warn; no administrator access is required.
ShopifyObserved
Consent banner hintObserved
Cookie metadata2
Console errors1
Store-level summary
Signals observed
| Provider | Observed | Requests | Public IDs |
|---|---|---|---|
| Google Tag Manager | Observed | 2 | GTM-DEMO123 |
| Google Analytics 4 | Observed | 2 | G-DEMO12345 |
| Meta Pixel | Observed | 1 | 123456789012345 |
| TikTok Pixel | Not observed | 0 | None exposed |
| Pinterest Tag | Not observed | 0 | None exposed |
homepage
Homepage
https://demo-shop.example/
HTTP200
Observation842 ms
ShopifyObserved
Consent hintObserved
Measurement requests
| Provider | Endpoint | Method | Status | Public ID |
|---|---|---|---|---|
| Google Analytics 4 | https://www.google-analytics.com/g/collect | POST | Blocked by policy | G-DEMO12345 |
| Google Tag Manager | https://www.googletagmanager.com/gtm.js | GET | 200 | GTM-DEMO123 |
| Meta Pixel | https://www.facebook.com/tr | GET | 200 | 123456789012345 |
Cookies before interaction
| Name | Domain | HttpOnly | Secure | SameSite |
|---|---|---|---|---|
_ga | .demo-shop.example | No | Yes | Lax |
localization | demo-shop.example | No | Yes | Lax |
Console errors
- console — Failed to load optional storefront recommendation resource
Safety blocks
POST https://www.google-analytics.com/g/collect— non-read-only-method
product
Product page
https://demo-shop.example/products/example-product
HTTP200
Observation733 ms
ShopifyObserved
Consent hintObserved
Measurement requests
| Provider | Endpoint | Method | Status | Public ID |
|---|---|---|---|---|
| Google Analytics 4 | https://www.google-analytics.com/g/collect | POST | Blocked by policy | G-DEMO12345 |
| Google Tag Manager | https://www.googletagmanager.com/gtm.js | GET | 200 | GTM-DEMO123 |
Cookies before interaction
| Name | Domain | HttpOnly | Secure | SameSite |
|---|---|---|---|---|
_ga | .demo-shop.example | No | Yes | Lax |
localization | demo-shop.example | No | Yes | Lax |
Console errors
- No console errors observed.
Safety blocks
POST https://www.google-analytics.com/g/collect— non-read-only-method
Read before acting
What this snapshot cannot prove
- This is a passive, outside-in browser snapshot. No Shopify, GTM, GA4 or ad-platform account was accessed.
- Absence of a browser request during this short visit is not proof that a tag or event is absent.
- Non-read-only requests and cart, checkout, order and account paths were blocked; blocked measurement attempts are evidence of an attempted request, not successful receipt.
- No consent choice was clicked, so this snapshot does not test accept/reject behaviour and is not a legal compliance assessment.
- Cookie values and arbitrary query parameters are deliberately omitted; only cookie metadata and strictly matched public measurement IDs are retained.
- This scan cannot validate payload accuracy, event deduplication, server-side tracking, revenue reconciliation or downstream attribution.