Skip to main content

Rogue Tracker Sentry & Pre-DOM Interceptor

The Tracker Sentry is the active enforcement engine within Consent Shield. It prevents unauthorized JavaScript from firing before visitor consent is established.

Zero-Trust Pre-DOM Execution Model​

Traditional tag managers execute third-party scripts asynchronously. If consent is delayed, pixels (such as Meta CAPI or TikTok) fire immediately upon DOM insertion.

[Incoming Page Request]
         │
         ▼
[1. shield.js Installs Pre-DOM Interceptors (<1.4ms)]
         │
         ├── Intercepts window.fetch & XMLHttpRequest
         ├── Hooks document.createElement('script') & Node.appendChild
         └── Intercepts Image() beacon instantiations
         │
         ▼
[2. Visitor Consent Evaluated]
   ├── Granted ──► Forward payloads & release held scripts
   └── Denied ───► Nullify request & record zero-trust ledger proof

Managing Cookie & Tracker Categories​

  1. Open Dashboard → Trackers.
  2. Review the list of detected third-party domains:
    • Strictly Necessary: Authentication, session state, security tokens (always enabled).
    • Functional: Language selection, user preferences.
    • Analytics / Performance: Google Analytics 4, Mixpanel, Amplitude, Hotjar.
    • Marketing / Advertising: Meta Pixel, Google Ads, TikTok Ads, LinkedIn Insight, Criteo.
  3. Reclassify any domain or assign custom regex blocking patterns:
// Example: Whitelist an internal telemetry endpoint
ConsentShield.whitelistDomain("telemetry.mycompany.com");