Worked example
A recorded website privacy scan: what Watch captured
Follow an actual scan of our synthetic Brightleaf website: 4 public pages, 3 third-party entries, 2 forms, and the evidence behind a human review.
The website and the scan
We built Brightleaf at demo.kibawatch.com as a clearly labeled synthetic storefront. The original Sites scan engine completed a Watch on October 3, 2026. It captured 4 public pages, 3 third-party entries, 2 forms, and 74 evidence records. Eight of 15 controls had a decided result; that is not a claim that eight controls passed. The public trailer records this saved scan in Safari.
What the consent evidence showed
Brightleaf provides test consent choices that persist through cookies and browser storage. The recording opens saved before-choice and after-reload screenshots and their capture-quality details. Images show the interface at a particular moment. Related cookie and request observations provide the context needed to review whether a choice changed behavior. A screenshot alone does not establish compliance.
What the third-party inventory means
The demo site uses Google Fonts and an observed Cloudflare beacon as real external services. A synthetic analytics acknowledgement does not store events, and disabled forms do not submit personal data. Infrastructure logs may still exist. Observing a service gives the reviewer a starting inventory; its business purpose and contractual role need company confirmation.
What the recording actually demonstrates
The trailer opens the completed report and screenshot evidence, data inventories, a saved human review, a saved demo roadmap item, an observed vendor and an unsent outreach draft. It also shows a saved synthetic request, an Ask Watch explanation with source references, a reviewer invitation draft, and an exported evidence report. Vendor emails and team invitations were not sent. Recorded pauses and navigation were shortened; the interface and scan counts were not invented.
What a reviewer can conclude
The example demonstrates how Watch keeps observations, capture conditions, human decisions and follow-up together. It does not demonstrate a clean-site certification, a vendor response, or a complete inventory of internal systems. An unresolved or partial capture remains a limitation to investigate. Use the product demo to see the original recording, and start a public watch of a website you are authorized to scan to build your own evidence trail.
