$5,000
per violation in statutory damages, no proof of harm required
SiteTrust Consent · Data & Privacy
Your site is tracking visitors before they say yes. Fix that, and prove it.
A 1990s California wiretapping law is being used against everyday business websites: $5,000 per violation, no proof of harm required, and the tools at issue are ones nearly every site runs: analytics, ad pixels, chat, session recording. SiteTrust Consent makes your site consent-first: trackers off until the visitor says yes, policies that match reality, and the evidence to show it.
Included in every Trusted Site plan, from $299/yr.
4,000+
known web-tracking suits by mid-2026, up from about 600 in early 2025
Aug 2026
EU AI Act chatbot-disclosure obligations take effect
1
visitor from California is all it takes, wherever your business is
The Hidden Risk
The tools you already run are the exposure.
The letter arrives
Businesses learn about this risk the week a demand letter lands. Serial claimants and plaintiff firms scan sites with automated tools, then send letters by the thousands.
Your stack is the target
Analytics, ad pixels, live chat, session recording: if they load before the visitor consents, the wiretap theory attaches. It is not about doing something exotic. It is the default setup.
The law keeps moving
The legislative fix collapsed in committee this summer. GDPR and state privacy laws keep layering on. A banner you set once and forget is a policy already going stale.
How It Works
Consent-first, out of the box.
Not another cookie banner. A consent layer built the way the demand letters read, with the defaults that matter and the records to back them up.
01 · Ask first
Consent-first banner
Trackers stay off until your visitor says yes. Opt-in by default, equal buttons, no dark patterns: the configuration that matches how the law is actually being enforced.
02 · Block by default
Automatic tracker blocking
Curated blocking for the trackers that matter most, plus manual script control for everything else. What should not fire, does not.
03 · Keep the receipts
Consent records & store
Every consent, timestamped and stored. When someone asks what your site did and when, you answer with records, not recollection.
04 · Policies that keep up
Attorney-supervised policies
Privacy and cookie policies maintained under attorney supervision, updated as the law moves, so what your policy says matches what your site does.
No vendor sells proof. We do.
Every SiteTrust Consent site gets the evidence report: we test your site the way a plaintiff's tool would, and put the results on record.
Before
Pre-consent capture
What loads before anyone clicks: the exact question a demand letter asks.
After
Post-consent capture
What loads only after the visitor says yes: demonstrable, dated, repeatable.
On record
The evidence report
A dated report you can hand to counsel, a partner, or a carrier. Renewed on your plan's cadence.
The only banner that discloses AI
Every consent tool on the market discloses cookies. None discloses AI. SiteTrust Consent can tell your visitors when AI is in the room: chatbot disclosure where EU AI Act and state transparency rules expect it, on the surface your visitors already see. One layer: permission asked, AI disclosed.
In Every Plan
SiteTrust Consent comes with certification.
It is not an add-on. Every Trusted Site plan runs consent-first. Deeper plans add more sites, geo modes, dashboards, and continuous scanning.
Disclose
$299/yr or $30/mo
Consent-first banner, records, annual evidence report: 1 website.
Verify
Most Popular$849/yr or $85/mo
Geo modes, Consent Mode v2, analytics dashboard, quarterly evidence reports: 3 websites.
Audit
$1,650/yr or $165/mo
Continuous tracker scanner, full evidence archive, priority updates: 5 websites.
Make your site consent-first this week.
Works with WordPress, Shopify, Squarespace, Wix, and Webflow: one snippet, guided setup, and an evidence test before you are done.
SiteTrust provides technology implementation and verification; policy content is maintained under attorney supervision. SiteTrust Consent reduces exposure and produces evidence, but no product can guarantee compliance or prevent litigation.