The Is It Tracking? test browser

Is It Tracking? checks a website's tracking tags the way a visitor meets them. Someone entered your site at isittracking.com, and this browser visited it for them.

What it does

It visits a few pages like an ordinary visitor and may answer the cookie banner.

What it never does

• Submits forms, logs in or creates accounts.
• Adds to cart, buys or starts a payment.
• Tries to get past bot protection, CAPTCHAs or firewalls - if your site blocks it, the test stops.

How to recognise it

Every request carries this in its user agent:

IsItTracking/1 (+https://isittracking.com/test-browser)

To let it test a protected site, allow that user agent in your firewall or bot protection, or test a staging copy that isn't behind the protection. Allowing by IP address won't work.

How to verify it

Its requests to your site are signed (Web Bot Auth), so bot protection that supports signed requests can check they really come from us. Each one carries:

Signature-Agent: "https://isittracking.com"

Our public keys: https://isittracking.com/.well-known/http-message-signatures-directory

How to block it

It follows your robots.txt. To keep it off your site, add these two lines:

User-agent: IsItTracking

Disallow: /

Contact

Questions, or want your site excluded from testing? Write to [email protected].