Privacy

Website Tracking Audit: What Your Site Collects

The data a typical small business site gathers, who else receives it, and how to audit yours in an afternoon.

Published by Akacen Editorial Team3 min readPublished 15 September 2026Verified 15 September 2026

Independently researchedNo paid placementsEvery recommendation is disclosed

Key highlights

This guide covers website tracking audit: what your site collects with practical steps, honest trade-offs, and clear recommendations.

Key highlights

  • 1Most site owners would list their contact form and mailing list.
  • 2Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere.
  • 3Then there's what you hold directly: form submissions, email addresses, order details, payment records, support conversations and account logins.
A phone privacy shield beside a notebook and security key
Privacy improves when access, devices and shared information are reviewed together.

Some links on this page are affiliate links. If you sign up through them we may earn a commission at no extra cost to you.

General information only — not legal advice.

Read more about who publishes this on the publisher profile.

Chapter 01 · The bottom line

The short answer

Most site owners would list their contact form and mailing list. The actual answer is considerably longer, because most of the collection is done by tools they installed and forgot. Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere. Advertising pixels send visit data straight to the ad platform. Embedded.

Chapter 02 · How it works

Practical guide

Most site owners would list their contact form and mailing list. The actual answer is considerably longer, because most of the collection is done by tools they installed and forgot.

Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere. Advertising pixels send visit data straight to the ad platform. Embedded videos, fonts loaded from third parties, chat widgets, comment systems and social buttons each open a connection to another company, frequently with the visitor's address and page.

Most site owners would list their contact form and mailing list.

Related reading: Privacy Rules for Small Businesses: What You Must Do

A person reviewing a printed CV before an online interview
Evidence of skill moves a career faster than a longer list of claims.

Then there's what you hold directly: form submissions, email addresses, order details, payment records, support conversations and account logins.

Recommended: NordVPN

Encrypts your connection on public Wi-Fi so logins to your site, bank and email aren't exposed.

Try NordVPN →

Audit it properly. List every third-party script and embed on the site; your browser's developer tools will show outbound connections if you're unsure. For each one, ask what it sends, whether you actually use what it provides, and whether a lighter or privacy-focused alternative exists. Remove anything you can't justify — it improves both privacy and page speed.

A small online shop owner preparing a customer order
A practical online business starts with a clear offer and a repeatable process.

Then list the data you store yourself, where it lives, who can access it, and how long you keep it. Deleting data you no longer need is the cheapest privacy improvement available: data you don't hold can't leak.

Related reading: Privacy-First Business Tools: Swap Out Big Tech Trackers

Notebook, phone and headphones on a cafe table overlooking a city
Portable work still needs clear boundaries, reliable systems and secure access.

Finally, make sure your privacy policy actually matches what you found. Most don't, because they were copied before half these tools were added.

Chapter 03 · What matters most

Key takeaways

  • Most site owners would list their contact form and mailing list.
  • Analytics records visits, approximate location, device and behaviour — often tied to identifiers that follow visitors elsewhere.
  • Then there's what you hold directly: form submissions, email addresses, order details, payment records, support conversations and account logins.

Watch out for: promises that remove every trade-off, cost or risk from the decision.

Top 3 in this niche, compared

Our editorial shortlist for privacy, ordered by how often it is the right first choice for a beginner. This is our own ranking, not a scored test — check current pricing and availability on each provider’s own site.

  1. 1
    CrowdStrikeBest overallDesktop tool

    Endpoint protection for teams that hold customer data.

    Who it is for: protecting devices and passwords. Not for: anyone who will not keep software updated.

    Position 1 of 3 in our shortlist · best for protecting devices and passwords

    Visit CrowdStrike
  2. 2
    WizRunner-upDesktop tool

    Cloud security visibility as your stack grows past one server.

    Who it is for: protecting devices and passwords. Not for: anyone who will not keep software updated.

    Position 2 of 3 in our shortlist · best for protecting devices and passwords

    Visit Wiz
  3. 3
    A Cloud GuruBest for a tight budgetDesktop tool

    Cloud certification training with hands-on labs.

    Who it is for: learning a skill in a structured way. Not for: anyone who will not finish the course.

    Position 3 of 3 in our shortlist · best for learning a skill in a structured way

    Visit A Cloud Guru

CrowdStrike vs Wiz

The two choices most people in privacy end up deciding between.

CrowdStrike

Type:
Desktop tool
Best for:
protecting devices and passwords
Not for:
anyone who will not keep software updated
Why we list it:
Endpoint protection for teams that hold customer data.

Wiz

Type:
Desktop tool
Best for:
protecting devices and passwords
Not for:
anyone who will not keep software updated
Why we list it:
Cloud security visibility as your stack grows past one server.

When CrowdStrike is the better choice

Choose CrowdStrike when your main job is protecting devices and passwords. Skip it if you are anyone who will not keep software updated.

When Wiz is the better choice

Wiz makes more sense when the priority is protecting devices and passwords. It is not the right pick for anyone who will not keep software updated.

Alternatives to CrowdStrike

Some links here are partner links — if you sign up we may earn a commission at no extra cost to you. How we review and recommend.

Recommended tools and apps

A short, honest shortlist: desktop tools you set up once, and phone apps you can use on the move. We keep the list small on purpose.

Some links below are partner links — if you sign up we may earn a commission at no extra cost to you. It never changes what we recommend. How we review and recommend.

  • NordVPNDesktop tool

    Encrypt your connection on shared and public networks.

    Best for
    keeping personal data out of broker lists
    Not for
    anyone unwilling to keep requests going over time
    Visit NordVPN
  • ExpressVPNDesktop tool

    Reliable speeds when you work from hotels and cafés.

    Best for
    keeping personal data out of broker lists
    Not for
    anyone unwilling to keep requests going over time
    Visit ExpressVPN
  • SurfsharkDesktop tool

    Unlimited devices on one plan, useful for a household.

    Best for
    keeping personal data out of broker lists
    Not for
    anyone unwilling to keep requests going over time
    Visit Surfshark
  • IPVanishPhone app

    A VPN worth having if you work from cafés, hotels or shared wifi.

    Best for
    keeping personal data out of broker lists
    Not for
    anyone unwilling to keep requests going over time
    Visit IPVanish

Availability, pricing and eligibility change — always check on the provider’s own site. See every brand we recommend.

Recommended from Akacen

Tools used in this guide

  • NordVPN

    Encrypts your connection on public Wi-Fi so logins to your site, bank and email aren't exposed.

    Try NordVPN
  • 1Password

    Generates and stores a different strong password for every account, which is the single biggest security upgrade you can make.

    Try 1Password

Chapter 04 · Before you decide

Decision checklist

Three checks to make before acting on this guide.

CheckWhat good looks like
ClarityYou can explain how this applies to website tracking audit: what your site collects in one sentence.
CostYou understand the time and money required before committing.
TestYou can try a small, reversible version before expanding.

Verdict: start with the smallest reversible version, then expand using real results.

Do this next

Your next steps

  1. 1You can explain how this applies to website tracking audit: what your site collects in one sentence.
  2. 2You understand the time and money required before committing.
  3. 3You can try a small, reversible version before expanding.

Chapter 05 · Questions answered

Common questions

What is the best first step for website tracking audit: what your site collects?

Most site owners would list their contact form and mailing list.

Which mistake matters most in privacy?

Avoid adding cost or complexity before you have tested the smallest practical step described in this guide.

How should I use this privacy guide?

Complete one practical action at a time, record what changed, and only add another tool when the next benefit is clear.

Chapter 06 · Final verdict

Final thoughts

The best approach to website tracking audit: what your site collects depends on your current constraints, not the most popular option.

Use the checklist above to choose one small step, try it, and measure whether it actually saves time or money.

When you are ready, explore the related guides below and start with one small step.

Keep reading

What to do next

Pick the smallest useful step from this guide and complete it before adding another tool or plan.

Related guides

Was this guide helpful?

Akacen editorial team

Independent, practical publishing

Akacen covers online business, money, security and software. Guides combine careful research with practical checks, clearly marked partner links and no paid rankings.

About AkacenHow we reviewContactYouTubePinterestInstagramTikTok

Some links on this page are affiliate links. If you sign up through them we may earn a commission at no extra cost to you.

General information only — not legal advice.

Read more about who publishes this on the publisher profile.