TagSentry v1.5.0
Product Wireframes · v1.5.0

Tag
Sentry

A Chrome extension for martech & adtech professionals to intercept, identify, audit, and baseline-compare tracking implementations in real time.

Chrome Extension · MV3
9 Core Screens
80+ Vendor Patterns
PII Detection Engine
Permanent Exclusions
Auto-Save Settings
▸ What's New — Release History  Full history →
v1.5.2 — Current
Auto-Save Settings — Every toggle and field change saves instantly with no Save button needed. PII pattern changes apply live to the feed, badges, and detail panel in the same action.
v1.5.2
Manual Permanent Exclusions — Add exclusions from the Allow List tab directly (Host or Vendor) without right-clicking a live request. Vendor picker shows all built-in and custom vendors sorted alphabetically.
v1.5.1
PII Chip Fully Respects Disabled Patterns — Disabling a pattern now removes chips, inline param highlights, and ⚠ PII badges from the detail panel immediately, including mid-session. Detail panel re-renders on save.
v1.5.0
Permanent Exclusions — Right-click any request to permanently hide that vendor or hostname across all sessions. Manage exclusions in a new section on the Allow List tab with one-click removal.
v1.5.0
Multi-Select & Bulk Actions — Enter select mode to check multiple rows. Bulk export selected, hide all others for the session, or remove all others from the list.
v1.5.0
Request Type Chips + Filter — Each row now shows a type chip (XHR, FETCH·POST, etc.). A dropdown filter lets you narrow the feed to a single request type.
v1.5.0
Path Disambiguation — When multiple requests share the same hostname, the shortest disambiguating URL path suffix is shown beneath the host. Highlighted by the live search.
v1.5.0
Expand All / Collapse All — Body section header now includes a button to expand or collapse all nested JSON objects at once. State is restored on re-render.
v1.5.0
Universal Search Highlight + Per-Request Search — Live feed search term lights up in the detail panel. A secondary search in the detail header narrows to that request only; Escape clears it progressively.
v1.4.0
Vendor Patterns Library — VENDOR_PARSERS map, onBeforeRedirect listener for tracking pixels, ignore list (session-scoped, right-click), Allow List eye-button exclusions, vendor edit/override modals.
00
Architecture Overview

How TagSentry Works

The extension intercepts all network requests via Chrome's webRequest API — identifying vendors, parsing payloads, scanning for PII, and storing structured session data with zero page-side impact.

🌐
Page Load
Any URL
→
🪝
Intercept
webRequest API
→
🏷️
Identify
Vendor matching
→
⚙️
Parse
Decode payload
→
🔒
PII Scan
Regex patterns
→
✅
Allow List
Check approval
→
💾
Store
Session cache
→
🔔
Surface
Panel + badge
🏷️
Vendor Library
Pre-built patterns for 80+ vendors: GA4, Adobe Analytics, Meta Pixel, TikTok, Google Ads, LinkedIn Insight, OneTrust, Hotjar, Segment, Adobe Web SDK, and more. Custom vendor patterns and per-vendor overrides supported.
🔒
PII Detection
Configurable scanning across all params and request bodies. Industry-standard patterns for email (RFC 5322), phone (NANP), SSN, IP, credit cards, and DOB. Custom regex patterns with severity scoring.
📐
Baseline Diff Engine
Save any session as a named baseline. Future sessions diff against it — surfacing added tags, removed tags, and changed parameter values with color-coded severity.
📤
Multi-Format Export
Export as CSV, JSON, HTML audit report, or HAR. Multi-select rows for bulk export of a specific subset. PII redaction available on all formats.
⚙️
Auto-Save Settings
Every setting change — PII toggles, recording behavior, max sessions — saves immediately. No Save button required. Changes apply to the live feed in real time; disabled PII patterns vanish from chips, badges, and the PII tab instantly.
🚫
Permanent Exclusions
Right-click any request to permanently exclude a vendor or hostname, or add exclusions manually via the Allow List tab. Exclusions persist across sessions and take effect at request-capture time. Host and vendor exclusions managed in one place.
TagSentry Wireframes · 00 of 08
01
Primary View

Live Tag Feed

The default view on open. Shows all intercepted requests in real time with vendor identification, PII flags, allow-list status, and instant filter controls. Tied to the active browser tab — switching tabs switches sessions.

shop.example.com/products/sneakers-pro
TagSentry
Recording
📡
Live
24
💾
Sessions
⚖️
Diff
🔒
PII
3
✅
Allow
📤
Export
⚙️
Settings
⏹ Stop
🗑 Clear
📌 Save
☑ Select
⚡ Baseline ▾
24
Total
20
OK
1
Warn
3
PII
🔍  Filter tags, vendors, params…
/Re
🏷️
🔒
⚠️
G
Google Analytics 4 — page_view
analytics.google.com /g/collect
Analytics200FETCH·POSTpage_view
12:04:01
f
Meta Pixel — Purchase
facebook.com /tr/
AdvertisingPII200
12:04:01
T
TikTok Pixel — ViewContent
analytics.tiktok.com /api/v2/pixel
Advertising200XHR
12:04:00
A
Google Ads — Conversion
googleadservices.com /pagead/conversion
AdvertisingUnlistedIMG
12:04:00
▷
Google Tag Manager
googletagmanager.com
Tag Mgmt200SCRIPT
12:03:58
Side panel · 400px wide ↑↓ keyboard navigation · / to focus search
A
Request type chips + filter — each row shows a type chip (XHR, FETCH·POST, IMG, SCRIPT…). The type dropdown filter narrows the live feed to a single request type instantly.
B
Path disambiguation — when multiple requests share the same hostname, the shortest disambiguating URL path suffix is shown at 70% opacity. The live search term highlights it too.
C
PII chip — shown when any enabled pattern fires on this request's params or body. Clicking navigates to the PII tab with a vendor filter pre-set. Disabled patterns contribute no chips — changes apply immediately without reload.
D
Multi-select (☑ Select) — enters select mode; checkboxes appear on all rows. Bulk bar offers: Export selected, Hide others this session, or Remove others from list.
E
Two-tier right-click menu: 🚫 Permanently exclude (written to storage, applies at capture time across all sessions) and ⏸ Hide this session (RAM-only, cleared with Clear button).
TagSentry Wireframes · 01 of 08
02
Inline Component

Tag Detail Panel Updated

Expands below the selected row. Shows stacked sections: Query Params, Body (with Expand All / Collapse All for nested JSON), and Raw URL. A per-request search input in the header narrows to that request only. PII values are flagged inline; disabled patterns show nothing.

TagSentry — Detail
G
Google Analytics 4 — page_view
analytics.google.com /g/collect
Analytics200FETCH·POST
12:04:01
G
Google Analytics 4 — page_view
⤢
Body 6 params ⊞ Expand All ▶
v
2
tid
G-XXXXXXXXXX
en
page_view
items
▶ {3}
uid
[email protected]⚠ EMAIL
↑ Drag resize handle · ⤢ to expand fullscreen · Escape clears per-request search
A
Per-request search — a search input in the detail header narrows highlighting to this request only. First Escape clears it; second Escape closes the detail panel. The live feed's search term is used as a fallback when no per-request search is active.
B
Expand All / Collapse All button in the Body section header bulk-toggles all nested JSON tree nodes. State is remembered across re-renders. Hidden when the body has no nested objects.
C
PII values highlighted inline with pattern type badge (EMAIL, PHONE, SSN…). Only findings from enabled detection patterns are shown — disabling a pattern removes its highlighting immediately. The search term from either input also highlights within PII values.
TagSentry Wireframes · 02 of 08
03
Session Management

Saved Sessions

All saved sessions with metadata, status chips, and quick actions. One session can be pinned as the baseline for diff comparisons. Any two sessions can be compared via the Diff tab.

TagSentry
Idle
📡
Live
💾
Sessions
⚖️
Diff
🔒
PII
✅
Allow
📤
Export
⚙️
Settings
🔍  Search sessions…
↕️
📌
Production Baseline — Checkout Flow
shop.example.com · Jun 1 · 31 tags
BASELINE✓ Clean
Compare ▾
⋯
📋
Staging · Sprint 42
staging.example.com · Today · 28 tags
2 PII3 changed
Compare ▾
Load
⋯
📋
Dev — Feature/checkout-v2
dev.example.com · Yesterday · 19 tags
✓ Clean
Compare ▾
Load
⋯
▶ New Recording
🗑 Delete
📦 Backup All
A
Baseline session is pinned with 📌 and an accent border. Only one baseline at a time. Setting a new baseline prompts confirmation to prevent accidental replacement.
B
Status chips give at-a-glance health: PII count, diff changes vs. baseline, or a clean green check. These derive from stored piiFindings and diff metadata.
C
Compare ▾ dropdown lets the user choose: vs. Baseline, vs. another session, or opens the Diff tab pre-populated. Any two sessions can be compared directly.
D
Sessions are stored locally in chrome.storage.local. Max count is configurable (default 50). Full backup/restore via JSON for cross-machine sharing.
TagSentry Wireframes · 03 of 08
04
Session Comparison

Diff View

Compare any two sessions. Groups requests by vendor, then reports added tags, removed tags, and parameter-level changes. Color-coded for instant triage.

TagSentry
Idle
📡
Live
💾
Sessions
⚖️
Diff
🔒
PII
✅
Allow
📤
Export
⚙️
Settings
Session A (baseline)
📌 Production Baseline
vs
Session B
Staging · Sprint 42 ▾
3 removed 1 added 4 changed
📤 Export Diff
−
LinkedIn Insight Tag — removed entirely
Vendor: snap.licdn.com
Missing
−
OneTrust CMP — not detected on staging
⚠ Consent manager missing
Critical
+
Bing UET Tag — new tag detected
URL: bat.bing.com/action/0
Unlisted
~
Meta Pixel · Purchase — param changed
value: 99.99undefined
⚠ Critical
~
GA4 · page_view — param changed
ep.page_type: product_detailpdp
Changed
A
Session selectors default Session A to the saved baseline. Both can be any stored session for arbitrary cross-session comparison.
B
Color semantics: Red = removed or critical. Green = added. Amber = changed or unlisted. Left-border stripes provide color-blind accessibility.
C
Critical flags are raised for high-impact issues: missing CMP/consent layer, undefined purchase event values, or newly unrecognized tags.
D
Parameter-level diffs show exact old/new values side-by-side (old in red strikethrough, new in green) — catches silent regressions in naming or value formats.
TagSentry Wireframes · 04 of 08
05
Compliance View

PII Audit Updated

All personally identifiable information detected in the session, grouped by severity. Search findings by param name, filter by severity level, or drill in from a PII chip on any tag row. Only enabled patterns contribute findings.

TagSentry
Recording
📡
Live
💾
Sessions
⚖️
Diff
🔒
PII
3
✅
Allow
📤
Export
⚙️
Settings
🔍  Search params…
HIGH
MED
LOW
Showing: Meta Pixel  ·  2 of 3 findings
✕ Clear filter
⚠ 3 PII Issues Detected
Personal data found in tag payloads. Only findings from enabled detection patterns are shown.
HIGH
uid → [email protected]
Pattern: Email address (RFC 5322)
Tag: Google Analytics 4 · 12:04:01
HIGH
em → a8d3f1c2… (hashed email)
Pattern: Email address
Tag: Meta Pixel · 12:04:01
MED
ph → +1-555-867-5309
Pattern: US phone number (NANP)
Tag: Meta Pixel · 12:04:01
📄 Export PII Report
⚙️ Configure Patterns
A
Severity filter buttons (High / Med / Low) narrow findings instantly. Can be combined. Paired with the search box for param-name lookup across large sessions.
B
Vendor filter banner appears when arriving via a PII chip click — shows which vendor's findings are active and offers a one-click "Clear filter" to restore the full session view.
C
Disabled patterns contribute nothing. Turn off the Email pattern in Settings and all email findings vanish from the list, the badge count, and the stats bar — instantly, without a reload.
D
Custom patterns open a modal editor with name, regex, severity, and a live test field. Custom patterns with the same ID as a built-in pattern override the built-in one.
TagSentry Wireframes · 05 of 08
06
Allowlist Management

Allow List Updated

Define the approved set of vendors for a property or environment. Tags outside the list are flagged amber in the live feed. One-click Enable / Disable All for bulk management. A new Permanent Exclusions section shows all hosts and vendors hidden from the feed with one-click removal.

TagSentry
Recording
📡
Live
💾
Sessions
⚖️
Diff
🔒
PII
✅
Allow
📤
Export
⚙️
Settings
🔍  Search vendors…
Enable All
+ Add
Analytics 2 / 2
G
Google Analytics 4
Aa
Adobe Analytics
Advertising 3 / 4
f
Meta Pixel
T
TikTok Pixel
A
Google Ads
Li
LinkedIn Insight
Tag Management 1 / 1
▷
Google Tag Manager
📥 Import JSON
📤 Export JSON
Permanent Exclusions
+ Add
Host ad-tracker.example.com
✕ Remove
Vendor LinkedIn Insight Tag
✕ Remove
A
Per-vendor toggles instantly mark a vendor as allowed or flagged in the live feed. State persists across sessions and is applied immediately to any active recording.
B
Enable / Disable All button bulk-toggles every vendor at once. The label reads "Enable All" (green) when anything is disabled, and "Disable All" (red) when everything is on. Saves immediately.
C
Permanent Exclusions — hosts and vendors excluded via right-click are listed here with type chips (Host / Vendor). Click ✕ Remove to restore them. Exclusions apply at request-capture time so excluded entries never reach the feed.
D
Eye button (👁 / 🙈) on each vendor row toggles vendor-level exclusion — same persistent storage as right-click exclusions. Un-excluding from either the row or the Exclusions section is reflected in both.
E
Import/Export JSON lets consultants maintain a shared, versioned allow list per client or project. Custom vendor entries are included in the export.
TagSentry Wireframes · 06 of 08
07
Export & Share

Export

Export session data in four formats for different audiences: developer-friendly CSV, machine-readable JSON, a client-facing HTML audit report, or HAR for DevTools. PII can be redacted on export.

TagSentry
Idle
📡
Live
💾
Sessions
⚖️
Diff
🔒
PII
✅
Allow
📤
Export
⚙️
Settings
Format
📊
CSV
One row per request
📄
JSON
Full session + payloads
📋
HTML Report
Formatted audit doc
🔧
HAR
DevTools compatible
Options
Include raw payloads
Redact PII values
Replaces PII with [REDACTED]
Include diff vs baseline
📤 Export Session
24 requests · 3 PII findings
A
CSV is best for sharing with developers or importing into Google Sheets. Columns: Timestamp, Vendor, Category, Event, Hostname, URL, Status Code, PII Detected, Whitelisted.
B
JSON Full is the complete machine-readable session. Can be re-imported into TagSentry on another machine, or used in programmatic comparison pipelines.
C
HTML Report is a self-contained, client-ready audit document with vendor summary table, parameter details, PII findings, and — if enabled — a diff vs. baseline section.
D
Redact PII replaces all detected PII values with [REDACTED] before writing any export. Recommended for all client-shared documents.
TagSentry Wireframes · 07 of 08
08
Configuration

Settings Updated

Global preferences: recording behavior, appearance (theme + font size), PII detection toggles, custom patterns, session storage, and data management. All changes save automatically the moment you interact with a control — no Save button required.

TagSentry
Idle
📡
Live
💾
Sessions
⚖️
Diff
🔒
PII
✅
Allow
📤
Export
⚙️
Settings
Appearance
Theme
Default: Light
Light
Dark
Font size
Default: Large
S
M
L
Recording
Auto-start on page load
Begin recording without clicking Record
Known vendors only
Hide unrecognized requests from feed
Max stored sessions
50
PII Detection
Email addresses
Phone numbers
IP addresses
SSN patterns
Credit / debit cards
Custom patterns
2 patterns configured
Edit →
Data Management
Backup all sessions
📦 Backup
Restore from backup
📥 Restore
Clear all data
Wipes sessions, allow list, settings
🗑 Clear
✓ Changes save automatically — no Save button needed
TagSentry v1.5.2 · MV3 Chrome Extension
A
Version badge is injected at runtime from chrome.runtime.getManifest().version — it always shows the actual installed version regardless of what was hardcoded in HTML during a previous install.
B
Appearance defaults are Light theme and Large (14px) font for new installs. Saved preferences override these on subsequent opens.
C
Auto-save on change — every toggle and number field saves the moment you interact. Toggles save immediately on flip; the max sessions number waits 600ms after you stop typing. No Save button needed — but one is still available for explicit confirmation.
D
PII pattern toggles take effect live — no reload needed. Disabling a pattern removes its chips from tag rows, its count from the badge, and its rows from the PII tab. The open detail panel also re-renders immediately.
E
Custom patterns open a modal editor. Each pattern has a name, regex, severity level, and a live test input that validates the regex against sample values before saving.
F
Backup / Restore exports all sessions, settings, and allow list as a single JSON. Ideal for onboarding new team members or moving between machines. Zero cloud sync.
TagSentry Wireframes · 08 of 08