What does your site actually do?

Every time you visit a website, your browser sends dozens, sometimes hundreds, of requests to servers around the world. It fetches scripts, images, fonts, and data. Many of those requests go to third-party companies that you may never have heard of.

A HAR file (HTTP Archive) is a recording of all those requests. It captures what was sent, what came back, how long each request took, and what cookies were set. Think of it as a flight data recorder for a single page load.

This tool reads your HAR file and produces a structured inventory of every third-party domain your site contacts, every tracker that fires, every CDP event payload sent, and every consent enforcement gap detected. The output is designed to be exported and reviewed against your privacy policy separately.

There is no way for a webpage to automatically capture a HAR file on your behalf. HAR files can only be created through your browser's built-in developer tools, a set of diagnostic features built into every modern browser. This is a browser security boundary, not a limitation of this tool.

The good news: capturing a HAR file takes about two minutes and requires no technical knowledge. We recommend Firefox for the most complete results. Firefox exports full response body data by default, which enables the body fingerprint scanner. Chrome and Brave also work but may produce less complete results depending on export settings.

1. Open a Private Window in Firefox. On Mac: ⌘+Shift+P. On Windows: Ctrl+Shift+P. This gives you a clean session with no cached cookies.
2. Press F12 to open Firefox DevTools. Click the Network tab.
3. Navigate to the page you want to audit. Watch the Network panel fill with requests as the page loads.
4. Once the page has fully loaded, right-click anywhere in the Network panel request list and choose "Save All As HAR".
5. Save the file to your desktop. The filename ends in .har.
6. Come back here and open the file using the selector in Step 1.

1. Open an Incognito window in Chrome (Ctrl+Shift+N / ⌘+Shift+N) or a Private window in Brave.
2. Press F12 → click the Network tab.
3. Navigate to your page, then right-click in the Network panel and choose "Save all as HAR with content".
4. Important (Chrome): if Chrome shows a dialog asking about sanitizing sensitive data, choose the unsanitized option. The sanitized export removes cookie and credential data that HARstack uses for analysis.
5. Save the file and open it in Step 1.

The HAR file contains a complete record of every network request your browser made, including the URLs contacted, request headers, response headers, cookies set, and the size and timing of each request. It does not include your browsing history from other tabs or sessions. It only captures the single page load you recorded.

If you were logged into your site when you captured the HAR, it may contain session tokens or authentication cookies. This is why the capture instructions specify Incognito mode: a fresh session produces a clean result that reflects what an anonymous first-time visitor experiences, not what a logged-in admin sees.

For the most complete picture: run Firefox first for the full tracker inventory, then Brave to see what survives blocking. The gap between those two results is your actual exposure.