Privacy
Website Tracking Audit: What Your Site Collects
The data a typical small business site gathers, who else receives it, and how to audit yours in an afternoon.
Independently researchedNo paid placementsEvery recommendation is disclosed
Key highlights
This guide covers website tracking audit: what your site collects with practical steps, honest trade-offs, and clear recommendations.
Key highlights
- 1Most site owners would list their contact form and mailing list.
- 2Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere.
- 3Then there's what you hold directly: form submissions, email addresses, order details, payment records, support conversations and account logins.

Some links on this page are affiliate links. If you sign up through them we may earn a commission at no extra cost to you.
General information only — not legal advice.
Read more about who publishes this on the publisher profile.
Chapter 01 · The bottom line
The short answer
Most site owners would list their contact form and mailing list. The actual answer is considerably longer, because most of the collection is done by tools they installed and forgot. Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere. Advertising pixels send visit data straight to the ad platform. Embedded.
Chapter 02 · How it works
Practical guide
Most site owners would list their contact form and mailing list. The actual answer is considerably longer, because most of the collection is done by tools they installed and forgot.
Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere. Advertising pixels send visit data straight to the ad platform. Embedded videos, fonts loaded from third parties, chat widgets, comment systems and social buttons each open a connection to another company, frequently with the visitor's address and page.
Most site owners would list their contact form and mailing list.
Related reading: Privacy Rules for Small Businesses: What You Must Do

Then there's what you hold directly: form submissions, email addresses, order details, payment records, support conversations and account logins.
Recommended: NordVPN
Encrypts your connection on public Wi-Fi so logins to your site, bank and email aren't exposed.
Try NordVPN →Audit it properly. List every third-party script and embed on the site; your browser's developer tools will show outbound connections if you're unsure. For each one, ask what it sends, whether you actually use what it provides, and whether a lighter or privacy-focused alternative exists. Remove anything you can't justify — it improves both privacy and page speed.

Then list the data you store yourself, where it lives, who can access it, and how long you keep it. Deleting data you no longer need is the cheapest privacy improvement available: data you don't hold can't leak.
Related reading: Privacy-First Business Tools: Swap Out Big Tech Trackers

Finally, make sure your privacy policy actually matches what you found. Most don't, because they were copied before half these tools were added.
Chapter 03 · What matters most
Key takeaways
- Most site owners would list their contact form and mailing list.
- Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere.
- Then there's what you hold directly: form submissions, email addresses, order details, payment records, support conversations and account logins.
Watch out for: promises that remove every trade-off, cost or risk from the decision.
People also viewed
Top 3 in this niche, compared
Our editorial shortlist for privacy, ordered by how often it is the right first choice for a beginner. This is our own ranking, not a scored test — check current pricing and availability on each provider’s own site.
- 1
Endpoint protection for teams that hold customer data.
Who it is for: protecting devices and passwords. Not for: anyone who will not keep software updated.
Position 1 of 3 in our shortlist · best for protecting devices and passwords
Visit CrowdStrike - 3
Cloud certification training with hands-on labs.
Who it is for: learning a skill in a structured way. Not for: anyone who will not finish the course.
Position 3 of 3 in our shortlist · best for learning a skill in a structured way
Visit A Cloud Guru
CrowdStrike vs Wiz
The two choices most people in privacy end up deciding between.
CrowdStrike
- Type:
- Desktop tool
- Best for:
- protecting devices and passwords
- Not for:
- anyone who will not keep software updated
- Why we list it:
- Endpoint protection for teams that hold customer data.
Wiz
- Type:
- Desktop tool
- Best for:
- protecting devices and passwords
- Not for:
- anyone who will not keep software updated
- Why we list it:
- Cloud security visibility as your stack grows past one server.
When CrowdStrike is the better choice
Choose CrowdStrike when your main job is protecting devices and passwords. Skip it if you are anyone who will not keep software updated.
When Wiz is the better choice
Wiz makes more sense when the priority is protecting devices and passwords. It is not the right pick for anyone who will not keep software updated.
Alternatives to CrowdStrike
Some links here are partner links — if you sign up we may earn a commission at no extra cost to you. How we review and recommend.
Recommended tools and apps
A short, honest shortlist: desktop tools you set up once, and phone apps you can use on the move. We keep the list small on purpose.
Some links below are partner links — if you sign up we may earn a commission at no extra cost to you. It never changes what we recommend. How we review and recommend.
- NordVPNDesktop tool
Encrypt your connection on shared and public networks.
- Best for
- keeping personal data out of broker lists
- Not for
- anyone unwilling to keep requests going over time
- ExpressVPNDesktop tool
Reliable speeds when you work from hotels and cafés.
- Best for
- keeping personal data out of broker lists
- Not for
- anyone unwilling to keep requests going over time
- SurfsharkDesktop tool
Unlimited devices on one plan, useful for a household.
- Best for
- keeping personal data out of broker lists
- Not for
- anyone unwilling to keep requests going over time
- IPVanishPhone app
A VPN worth having if you work from cafés, hotels or shared wifi.
- Best for
- keeping personal data out of broker lists
- Not for
- anyone unwilling to keep requests going over time
Availability, pricing and eligibility change — always check on the provider’s own site. See every brand we recommend.
Recommended from Akacen
Related product guides

Audifort
A plain-language review covering everyday hearing comfort routines.

Genius Song
A plain-language review of the audio program for daily concentration.
Tools used in this guide
NordVPN
Encrypts your connection on public Wi-Fi so logins to your site, bank and email aren't exposed.
Try NordVPN1Password
Generates and stores a different strong password for every account, which is the single biggest security upgrade you can make.
Try 1Password
Chapter 04 · Before you decide
Decision checklist
Three checks to make before acting on this guide.
| Check | What good looks like |
|---|---|
| Clarity | You can explain how this applies to website tracking audit: what your site collects in one sentence. |
| Cost | You understand the time and money required before committing. |
| Test | You can try a small, reversible version before expanding. |
Verdict: start with the smallest reversible version, then expand using real results.
Do this next
Your next steps
- 1You can explain how this applies to website tracking audit: what your site collects in one sentence.
- 2You understand the time and money required before committing.
- 3You can try a small, reversible version before expanding.
Chapter 05 · Questions answered
Common questions
What is the best first step for website tracking audit: what your site collects?
Most site owners would list their contact form and mailing list.
Which mistake matters most in privacy?
Avoid adding cost or complexity before you have tested the smallest practical step described in this guide.
How should I use this privacy guide?
Complete one practical action at a time, record what changed, and only add another tool when the next benefit is clear.
Chapter 06 · Final verdict
Final thoughts
The best approach to website tracking audit: what your site collects depends on your current constraints, not the most popular option.
Use the checklist above to choose one small step, try it, and measure whether it actually saves time or money.
When you are ready, explore the related guides below and start with one small step.
Keep reading
What to do next
Pick the smallest useful step from this guide and complete it before adding another tool or plan.
Related guides
Akacen editorial team
Independent, practical publishing
Akacen covers online business, money, security and software. Guides combine careful research with practical checks, clearly marked partner links and no paid rankings.
About AkacenHow we reviewContactYouTubePinterestInstagramTikTok
Some links on this page are affiliate links. If you sign up through them we may earn a commission at no extra cost to you.
General information only — not legal advice.
Read more about who publishes this on the publisher profile.