Pixel Patrol: a GDPR watchdog whose main job is staying quiet

Description and use

Pixel Patrol automatically scans sites for new trackers, generates policy updates, and opens GitHub issues, keeping GDPR policies current.

Problem

Cookie policies become outdated when new third‑party trackers are added without notice, leading to undisclosed personal data processing under GDPR.

Outcome

Pixel Patrol runs unattended on multiple sites, automatically detecting and reporting new trackers, generating policy updates, and filing tickets, thereby keeping GDPR compliance current.

Workflow

• Schedule hourly Cloud Run job to crawl sites with Playwright
• Record third‑party hosts and cookies before and after consent banner
• Compare results to approved baseline by registrable domain
• Classify new domains/cookies against recent history
• Use Gemini 3.5 Flash agents to judge drift vs noise
• Generate redline policy change and RoPA row
• Open GitHub issue with details
• Email site owner

Evidence

Once an hour, Pixel Patrol crawls every site it is responsible for with a real browser (Playwright, in a Cloud Run Job).

Source

When a tracker appears that nobody decided to add, it identifies the vendor, writes the cookie policy change in Czech as a redline, writes the Records of Processing Activities row the owner is now obliged to file, opens a GitHub issue with both, and emails the owner.

Source