Shield

Declare Cookies and Storage

List every cookie, localStorage and sessionStorage key and tracking pixel your site uses, so visitors see them inside each category of the preference center and on your cookie policy. Scan the site to find them and import the results.

What the declaration is

Each consent setup has a declaration: a list of what the site stores on the visitor's device. Visitors see each item inside its category in the preference center, and the same list appears on your privacy policy page through the embed snippet. Items can be:

TypeExpiry
CookiePick from the list, for example Session, 30 days, 13 months or Persistent
localStorageAlways Persistent
sessionStorageAlways Session
PixelPick from the list

Before you start

  • Save the consent setup at least once. The Cookies & Storage page needs an existing setup.
  • Set the Consent Cookie Domain on the setup. The scanner uses it to know which site to crawl.

Open the page

Go to Shield > Consent and click the Cookies & Storage icon in the setup's Actions column, or click Manage Cookies & Storage on the setup's edit page.

Scan the site

  1. In the Site Scans panel, click Scan Site Now. A message confirms the domain and how many pages will be crawled.
  2. Wait a few minutes. The scan records every cookie, storage key and third-party request it sees. Results appear in Scan History and the Review Queue.
  3. Optional: set Automatic Re-Scan to Daily or Weekly. Off (manual only) is the default. A manual scan counts toward the schedule, so the site is not scanned twice in a row.

If the property already has a Pulse monitor with a domain, Shield scans that domain. Otherwise it creates a scan-only monitor for the Consent Cookie Domain.

Import scan results

  1. Click Import Scan Results under the table.
  2. Read the note under the buttons. It says how many pages were scanned, how many new items were added, how many were already declared, and how many earlier imports were refreshed.
  3. Hover the info icon on an imported row to see its scan evidence: how many pages it was seen on, when it was first seen, and what set it.
  4. Fix any highlighted rows (below), then click Save & Publish Preview.

Import follows these rules:

  • Items from a known vendor get that vendor's category, provider, purpose and expiry.
  • Unknown items go to Unclassified, highlighted for review. Visitors see them in a separate Unclassified section, never under a guessed category.
  • Rows an earlier import created are refreshed from the latest scan. Rows you have edited, or added by hand, are never changed.
  • An item already covered by a declared row is skipped.

Edit rows

ColumnWhat to enter
NameThe cookie or key name. Use * as a wildcard: _ga_* covers every cookie that starts with _ga_. Up to 100 characters
TypeCookie, localStorage, sessionStorage or Pixel
ProviderWho sets it, for example Google Analytics
CategoryOne of the setup's category keys, or Unclassified
PurposePlain-English purpose visitors read. Up to 300 characters
ExpiryHow long it lasts
  • Click Add Item to add a row by hand, and the x to remove one.
  • Use the filter box to search by name, provider, purpose or category. Click the "needs review" chip to show only highlighted rows.
  • Rows marked Managed by Shield are the banner's own storage. They are declared on every site automatically and cannot be edited or removed.
  • A declaration holds up to 300 items.

A row is highlighted for review when its category is Unclassified or its purpose still starts with "Found by scan". The Declaration panel on the right counts items by type and how many need review.

Save and publish

Click Save & Publish Preview. As with the rest of the setup, this updates the hosted preview only. The live banner and the cookie list on your policy page change when you use Publish Live on the Consent list. Every saved change to the declaration is recorded in Change History.

Embed the list on your privacy policy

Copy the snippet from the Privacy Policy Embed panel and paste it into your privacy or cookie policy page. See Install the Consent Banner.

Check it worked

  • The note after an import lists items added, and the Declaration panel shows a count above zero.
  • After Publish Live, the preference center shows the items under each category, and the embedded cookie list shows the same rows.

Troubleshooting

MessageCause and fix
"No domain to scan. Set the Consent Cookie Domain on the consent setup first ..."Open the setup, fill in Consent Cookie Domain, save, then scan again
"No Pulse monitor exists for this property yet ..."Nothing has been scanned for this property. Click Scan Site Now first, wait for it to finish, then import
"No completed Pulse scan found for this property's monitors yet ..."The scan has not finished. Wait a few minutes and import again
"Cookie '...' references unknown category '...'"A row uses a category key that no longer exists. Pick a current category or Unclassified
An item you know the site uses is not foundThe scan crawls a limited set of pages and cannot see pixels. Add the row by hand with Add Item
Not legal advice

TagPipes monitors, configures and reports. It does not determine legal compliance and does not provide legal advice. Output is informational and reflects observed state at the time of observation. Confirm any regulatory interpretation with your counsel.