How to Review Scan Results
This guide explains how to review the cookies detected during a scan and decide what needs attention before you move forward with classification, banner setup, or policy generation in Cookiedad.
Use this process to turn raw scan data into something clear, usable, and ready for action.
When to use this guide
Follow these steps when:
- you have completed a new scan
- you want to validate the detected cookies
- you need to review unknown or uncategorized entries
- you want to prepare accurate data for your cookie banner or policy pages
Step 1: Open the scan results
Start by opening the latest scan results inside Cookiedad.
Make sure you are reviewing the correct scan, especially if your site has been scanned more than once or if changes were made recently.
You should always work from the most relevant and up-to-date result set.
Step 2: Check the total number of detected cookies
Look at the overall number of cookies found in the scan.
This gives you a first overview of how large the review will be and helps you spot unusual situations, such as:
- an unexpectedly low number of results
- a sudden increase in detected cookies
- missing cookies you expected to see
- too many uncategorized entries
At this stage, do not classify anything yet. First, understand the scope of the results.
Step 3: Review the cookie names one by one
Go through the detected cookie names carefully.
Focus on identifying:
- familiar cookies you already know
- cookies clearly linked to specific services
- repeated entries or very similar names
- entries that look custom, incomplete, or unclear
The goal here is to separate what is already obvious from what needs deeper review.
Step 4: Identify the source when possible
For each cookie, try to understand where it is coming from.
A cookie may be linked to:
- the WordPress site itself
- a plugin
- an analytics tool
- an embedded video or map
- a payment provider
- an advertising or tracking platform
- a consent or security system
If the source is already obvious, note it mentally or in your workflow. If it is not clear, keep it for further review.
Step 5: Check whether the category makes sense
If the scan already assigned a category, review it instead of accepting it automatically.
Ask whether the category fits the actual purpose of the cookie.
For example:
- a login or session cookie may belong to Necessary
- a language or user preference cookie may belong to Functional
- an analytics cookie may belong to Statistical
- an advertising or retargeting cookie may belong to Marketing
Automatic logic can help, but final review should still be based on real purpose.
Step 6: Look for unknown or uncategorized cookies
Pay special attention to cookies that are still marked as unknown, uncategorized, or not fully documented.
These are usually the entries that need manual review before your setup can be considered cleaner and more reliable.
When you find them, check:
- the exact cookie name
- where it appears
- whether it may belong to a known service
- whether it only appears on specific pages or after consent
Do not leave these entries ignored if they may affect compliance or classification accuracy.
Step 7: Watch for duplicate or related cookies
Some cookies may appear as part of the same family.
You may find:
- the same cookie shown more than once in slightly different forms
- cookies with a shared prefix
- cookies from the same provider with different purposes
- session and persistent versions of similar entries
Review them carefully so you do not treat related cookies as completely separate issues when they are actually part of one system.
Step 8: Compare the results with your website features
Now compare the scan results with the real services active on your site.
Ask yourself:
- does the site use analytics tools
- are there embedded videos or maps
- is there a payment system
- are marketing or retargeting tools installed
- are there forms, chats, or third-party widgets
A scan result is more useful when it matches what is actually present on the website.
If a cookie appears but no matching service is active on the site, that entry may need extra verification.
Step 9: Check what needs manual confirmation
Some scan results should not be accepted without checking them further.
These usually include:
- unknown cookies
- cookies with vague descriptions
- cookies with unclear providers
- categories that do not seem correct
- cookies that may be essential on some pages but optional on others
Mark these internally for a second pass so the review stays organized.
Step 10: Prioritize the entries that matter most
Do not treat every cookie with the same urgency.
Start with the entries that are more important for compliance and user consent, such as:
- cookies that may load before consent
- marketing or analytics cookies
- third-party tracking cookies
- cookies with no clear category
- cookies that will appear in your policy or banner setup
This keeps the review practical and helps you fix the most relevant issues first.
Step 11: Cross-check with a browser test when needed
If something in the scan looks unclear, verify it in a real browser session.
This is useful when you want to confirm:
- whether the cookie is actually written in the browser
- whether it appears before or after consent
- whether it is tied to a specific page or action
- whether the scan result reflects real behavior
A scan is useful, but browser validation gives you a more direct view of what happens during an actual visit.
Step 12: Finalize the review before moving on
Once the results have been checked, make sure you have a clear separation between:
- cookies already confirmed
- cookies that need classification updates
- cookies that need web research
- cookies that need browser verification
- cookies that are ready for policy use
This final step helps you move into the next phase without confusion.
What a good review should achieve
By the end of the review, you should be able to answer these questions clearly:
- which cookies are known and correctly categorized
- which cookies still need manual investigation
- which entries may affect consent behavior
- which results are ready to be used in your compliance workflow
If you cannot answer these yet, the scan results still need more review.
Common mistakes
Accepting every result as final
A scan is a strong starting point, but some entries still need human review.
Ignoring unknown cookies
Unclear entries are often the ones that matter most during a proper review.
Reviewing without website context
A cookie only makes sense when matched with the real tools and features active on the site.
Skipping browser verification
Some results are better understood when checked in a live session.
Final result
You have successfully reviewed the scan results and prepared them for the next stage inside Cookiedad.
This process helps you move from raw detection data to a cleaner, more reliable cookie setup that is easier to classify, manage, and document.