BambooForge Labs

SEO All in One with Cookie Scanner and Consent

Scan your own pages, list the third parties they really load and the cookies you really set, and see which ones your banner never declared.

Buy on the Odoo Apps StoreOpen the live demoWebsite€287Community & Enterprise

Available for Odoo 16.0, Odoo 17.0, Odoo 18.0, Odoo 19.0, Odoo 20.0. Technical name bambooforge_cookie_scanner.

Odoo 16.0Odoo 17.0Odoo 18.0Odoo 19.0Odoo 20.0
Screens and walkthrough for
Transcript of the walkthrough (Odoo 20)

SEO All in One with Cookie Scanner and Consent. Scan your own pages, list the third parties they really load and the cookies you really set, and see which ones your banner never declared. Said before you buy, because it is the half that decides whether the app fits: In the next few minutes: seo all in one with cookie scanner and consent, then running a scan, then what it will not claim, then the work list, then the knowledge base. Then what this app deliberately does not do, so you can tell before you buy whether it fits.

Everything lives under Cookie Scans then Known Third Parties then Trackers Found. 1. Install BambooForge Cookie Scanner (it needs SEO Pro). Sixteen known third parties are created and a monthly scan is scheduled for every website; nothing is fetched until the first scan runs.

2. Open SEO Pro → Trackers Found, and under Configuration, Cookie Scans and Known Third Parties. SEO All in One with Cookie Scanner and Consent. An add-on for BambooForge Consent Pro.

A cookie banner lists what somebody typed into it eighteen months ago; a website loads what its pages actually contain. This shows you the gap. Running a scan. Configuration → Cookie Scans → New → Scan the site.

third parties, matched against the knowledge base; cookies your server set, read from the response headers. The scan fetches this website's own pages - the ones SEO Pro has indexed, at most sixty, one at a time, each with a twelve second timeout and a two megabyte cap. It never fetches another host: a scanner that can be pointed elsewhere is a proxy. What it will not claim.

It does not run JavaScript. That matters, and it is stated on every screen: it reports which vendor is present and which cookies that vendor is known to set - not that it observed them. Cookies from the response headers are labelled separately, because those really were observed. That is the version of the report you can defend.

A tool that shows a cookie list it inferred is a tool that will be wrong in a meeting. The work list. SEO Pro → Trackers Found opens on Not declared: findings that Consent Pro has never been told about. A finding is treated as declared when a Consent Pro script has the same name, or contains one of the vendor's fingerprints in its URL, code or preset.

Declare in Consent Pro creates the entry with the vendor's category, so the banner and the register agree with the site. Ignore is for the ones you have decided about - a first-party analytics script, say. The knowledge base. Configuration → Known Third Parties.

A vendor is: a name, as it should appear in the banner; a category - essential, functional, analytics or marketing; patterns: comma-separated fragments to look for in the page source, usually a host or a script path; the cookies it is known to set, used to fill in a declaration; optionally a privacy policy URL and a note. Google Fonts sets no cookie, and is listed anyway: the visitor's IP address reaches Google, which a German court has had an opinion about. Stripe is filed as essential because that is what it is on a checkout. If it is on every page of your site, that is the finding.

They are ordinary records. Add the one your agency uses; the next scan knows it. The monthly scan. Every website with Scan for undeclared trackers monthly on is scanned at 02:20, so a script somebody added in a hurry shows up in the report before it shows up in an audit.

A website whose scan fails does not stop the others. How we make sure it works. Before every release, 22 automated checks run against this app on Odoo 16, 17, 18, 19 and 20. Among them: A read only seo user cannot start a scan.

Declaring twice does not duplicate the entry. It never fetches another host. A page that answers 404 is not scanned for trackers. A page that errors does not stop the scan.

The complete list is in the source you receive. Questions people ask. Which Odoo versions does it run on? Odoo 16.0, 17.0, 18.0, 19.0, 20.0, on the series you buy it for; each series is its own listing.

Community or Enterprise? Both. It needs no Enterprise app. Support.

support@bambooforge.dev - the people who wrote it. The complete manual is at docs dot bambooforge dot dev, the demo database is linked from the store page, and support answers within twenty-four hours. Links are in the description.

Findings - bambooforge_cookie_scanner
Findings
Scan - bambooforge_cookie_scanner
Scan
Vendors - bambooforge_cookie_scanner
Vendors

Key facts

What it is
Scan your own pages, list the third parties they really load and the cookies you really set, and see which ones your banner never declared.
For
Website
Odoo versions
16.0, 17.0, 18.0, 19.0, 20.0 - Community and Enterprise
Runs on
Odoo.sh or Odoo you host yourself - not Odoo Online, which accepts no third-party apps
Price
287 EUR, one-time, on the Odoo Apps Store
Technical name
bambooforge_cookie_scanner
Not for
Said before you buy, because it is the half that decides whether the app fits:; Fetch any host but your own website: a scanner that can be pointed elsewhere would be a proxy.; Declare a tracker for you: findings are a work list for Consent Pro, a person decides.; Run for a read-only SEO user - starting a scan needs the SEO manager role.
Manual
https://docs.bambooforge.dev/bambooforge_cookie_scanner/
Live demo
https://demo20.bambooforge.dev/odoo/action-bambooforge_cookie_scanner.action_bf_cookie_scan
Store page
https://apps.odoo.com/apps/modules/20.0/bambooforge_cookie_scanner
Manual last updated
2026-10-15