Test full user journeys.
Follow a visitor past the homepage into search, video, forms, cart, and checkout. Capture what fires after each action.
CIPA / ECPA / VPPA / WESCA / FSCA
got pixels?
Got a pixel demand letter? Test what it alleges.
Start with a free reject-all audit of the homepage for CIPA, ECPA, FSCA, or WESCA. When the letter or complaint turns on searches, forms, or checkout, Got Pixels runs those user journeys in a real browser and records requests, payloads, and screenshots at each step. No setup or scripts.
byPapaya Privacy Co.Evidence technology, not legal advice.
Free reject-all test
How it works
From journey to evidence.
Describe the disputed user path. Composer builds the browser tests, runs the journey, and records what happened at each step. Reuse the workflow when the site changes.
Illustrative workflow
Composer
What do you want to audit?
Audit example.com for CIPA exposure from California. Test the checkout journey after rejecting cookies.
Describe the site, law, consent path, and journey.
Step 1 of 4: Describe the journey
Why Got Pixels
What a homepage scanner can't do.
Got Pixels tests the paths that matter in pixel cases, starts from a plain prompt, and needs nothing installed on the site.
No setup.
Enter a URL and start an audit. No tags to install, no scripts to write, and no access to the site's code.
Suites built from a prompt.
Type "audit example.com for CIPA risk." Composer turns it into a browser test suite across consent states.
Templates for each type of site.
Start from journeys that fit the site: add to cart and checkout for ecommerce, articles and video for news.
Works with Shopify.
Run product, cart, and checkout journeys on Shopify storefronts.
Remediation as a service.
Need the issues fixed, not only found? We can remediate what the tests surface, then rerun the same suite to check the fix.
Suite templates
https://shop.example.com
01
Browse product
Home, collection, product page
Reject allAccept allGPC
02
Add to cart
Select variant, add to cart, open cart
Reject allAccept allGPC
03
Checkout
Cart, checkout, contact details
Reject allAccept allGPC
Illustrative template. Edit any journey in Composer before you run it.
Evidence record
Beyond page load.
A homepage check cannot show what fired after a visitor searched, watched a video, submitted a form, or checked out. Got Pixels ties requests and screenshots to those actions and the consent path. Counsel applies the law.
Jurisdiction + consent
Location, banner state, consent choice, GPC, and when consent changed
Communication + journey
Video, search, chat, checkout, or form actions behind the disputed event
Timing + initiator
When the request fired relative to the user action, and which script initiated it
Recipient + identifiers
Third-party endpoints, cookies, identifiers, and the request chain
Contents + payload
URLs, events, search terms, form values, video data, and request parameters
Visual + repeatable record
Screenshots, agent steps, network logs, and rerunnable journeys
Pixel litigation landscape
One pixel. Different legal questions.
One browser request can raise different legal questions. Got Pixels preserves the facts counsel needs to assess each theory.
Read the pixel litigation evidence guideFrameworkAuthorityQuestionBrowser evidence
CIPA
Cal. Penal Code §§ 631, 632, 638.51
Interception, confidential communications, and pen-register theories
Consent state, in-transit timing, third-party role, request data, addressing signals
CIPA evidence guideECPA
18 U.S.C. §§ 2511, 2520
Interception, use, or disclosure of electronic communications
Contents, contemporaneous acquisition, recipient, consent, party and service-provider facts
VPPA
18 U.S.C. § 2710
Disclosure of video-viewing information tied to a consumer
Video title or URL, watch event, user or device identifier, recipient, consent record
VPPA evidence guideWESCA
18 Pa.C.S. § 5703
Interception, disclosure, or use of electronic communications
Pennsylvania user context, contents, timing, consent, tracker and website roles
FSCA
Fla. Stat. §§ 934.03, 934.10
Interception of electronic communications and substantive contents
Searches, health details, form fields, chat text, consent state, third-party requests
STATE + HEALTH
MD, WA, IL, MA and other statutes
State interception, health-data, privacy, and consumer-protection theories
Jurisdiction, data sensitivity, authorization, custom events, identifiers, disclosed recipients
Scope, defenses, standing, remedies, and statutory definitions vary by jurisdiction and current case law. Got Pixels captures evidence for counsel to review. It does not determine liability.
Audit method
Pressure-test the facts, not a generic risk score.
Got Pixels turns each legal question into a repeatable browser test with preserved evidence.
Just need a homepage check? Run a free "reject all" CIPA test on Got CIPA.
What communication occurred?
A video watch, search, chat, checkout, or form entry can create a different record.
When was it acquired?
Compare before consent, after accept or reject, and with GPC. Match each request to the user action.
What left the browser?
Inspect URLs, events, identifiers, form values, cookies, payloads, and recipients.
Which legal context applies?
Record location, consent, content, and party roles so counsel can apply the relevant law.
Outside counsel and defense consultants
Test a client's disputed journey.
Describe the alleged consent path and user flow without scripting every click. Review what was sent, who received it, when it fired, and what remains unknown.
In-house defense teams
Recheck your own site after changes.
Rerun the saved journey after a site or tag change. Compare consent states, then share the evidence with outside counsel.
Questions about the software
What defense counsel needs to know.
Direct answers about the software, the browser evidence it preserves, and the legal questions counsel still decides.
What is Got Pixels?
Got Pixels is browser journey-testing software for pixel litigation defense. It runs defined user paths under controlled consent states and records requests, payloads, screenshots, recipients, timing, and agent steps for counsel's review.
I or my client received a pixel demand letter. Where do we start?
Run the free reject-all audit on the homepage for the statute the letter cites: CIPA, ECPA, FSCA, or WESCA. If the letter describes a search, form, video, or checkout, test that journey in Got Pixels under the same consent states and keep the requests, payloads, and screenshots for counsel. A test shows what the site does today, not what it did on the date in the letter.
How is Got Pixels different from a homepage pixel scanner?
A homepage scanner checks one page state. Got Pixels tests deeper, repeatable journeys such as search, video, forms, and checkout, then ties each browser action and consent state to the resulting network evidence.
Do I need to install anything on the site?
No. Enter a URL or a prompt such as "audit example.com for CIPA risk." Composer builds the test suite, and you can start from a template for ecommerce, news, and other site types.
Does Got Pixels work with Shopify stores?
Yes. Got Pixels runs product, cart, and checkout journeys on Shopify storefronts.
Can Got Pixels compare consent choices and GPC?
Yes. A saved workflow can compare no choice, Accept All, Reject All, and GPC where relevant, then run the same journey again after a site or tag change.
What does the evidence record include?
The tested jurisdiction, consent state, browser journey, requests, payloads, screenshots, recipients, timing, and agent steps.
Can the same journey be run again?
Yes. Reuse the workflow to compare consent states or check a fix without designing the path again.
Which pixel-litigation theories can it investigate?
The record can inform CIPA, ECPA, VPPA, WESCA, FSCA, state wiretap, and health-data analysis. Counsel decides what law applies.
Does Got Pixels determine liability?
No. Got Pixels preserves technical evidence. Counsel evaluates liability under the applicable law, consent record, parties, and defenses.
What happens in a demo?
We run a scenario relevant to your work, then show how to inspect the browser evidence and report. Bring a site or use case if you have one.
Got Pixels pricing
Plans for repeat testing.
Each run tests a consent choice and user journey, with requests, screenshots, and a report for review. Plans reflect how many runs and seats you need. For a walkthrough, bring your site or legal question to a demo.
Start without a subscription
4 free runs per user.
Try a user journey before choosing a plan. Each audit execution uses one run.
01 / plan
Professional
For an individual running focused audits.
$180/ month
or $2,000 annually
- 1 seat
- 25 runs / month
02 / planRecommended
Organization
For a team sharing an audit allowance.
$720/ month
or $8,000 annually
- Unlimited seats
- 120 shared runs / month
03 / plan
Unlimited
For one person running tests without a run-count cap.
$2,400/ month
or $24,000 annually
- 1 seat
- Unlimited runs
04 / plan
Enterprise
For organizations needing custom terms or capacity.
Custom
Monthly or annual terms by agreement
- Custom seats
- Custom usage
Accept All, Reject All, and GPC each count as a run. Paid plans include Composer, screenshots, reports, PDF and Markdown export, sharing, API and MCP access, and scheduled runs. See the app for full terms.
Got Pixels
Build and rerun journey tests.
Set the user path once, inspect what fires along the way, and reuse the workflow when the site changes. Start in the app.
- Set a site, jurisdiction, consent choice, and journey
- Reuse the journey across consent states and site changes
- Inspect requests, payloads, and screenshots
- Share the report for legal review
Product findings support legal analysis. The software does not determine liability or compliance.
Product demo
See a full user journey tested.
Bring a site, consent path, or legal question. We'll show how Got Pixels builds the test, runs the journey, and reports the evidence.
- A walkthrough using your site and user journey
- The consent path, jurisdiction, and tracker you choose
- How to inspect requests, screenshots, and limitations