Frequently asked
questions

Not for a Site Audit - you only give it a public web address, and it checks the site from the outside like any visitor. The optional GA4 and GTM configuration audits do connect to those accounts, but with read-only access only.

No - never. Lumnio only observes. It installs nothing on your site, and the GA4 and GTM audits use read-only access (analytics.readonly, tagmanager.readonly), so it cannot edit, publish, or delete anything. Your live setup is left exactly as it was.

Analytics and tag platforms (Google Analytics 4, Tag Manager, Segment, Tealium, Adobe), every major advertising pixel (Google Ads, Meta, TikTok, LinkedIn, Microsoft, Pinterest and more), session-recording and heatmap tools (Clarity, Hotjar, FullStory, Contentsquare), customer-data and messaging platforms (Braze, Klaviyo, Amplitude, Mixpanel), A/B testing, and error or performance monitoring. It also names any unknown third party loading on the page, and tells you honestly whether each tool is confirmed sending data or merely present.

Yes. Lumnio flags which tools start collecting before anyone has accepted cookies, and reads each vendor's own settings for privacy-relevant behaviour - such as whether a tool records page content or reads advertising cookies. It's a practical starting point for consent and privacy reviews, showing what a first-time visitor's browser encounters.

No. Lumnio audits the public, logged-out version of a site - the surface any visitor sees before signing in. It never logs in and makes no claim about member-only or account areas, so nothing behind a login is ever visited or reported on. Staging sites are fine, as long as the address is publicly reachable.

For readers who want the technical detail: Lumnio drives a real Chromium browser through Playwright and captures the tracking calls the page makes as it makes them - so a fired event is proven, not inferred from configuration. It waits for client-side rendering, hydration and in-page navigation (history.pushState) before judging coverage, so React, Vue, Angular, Next.js, Gatsby and Svelte sites are handled correctly.

No. Lumnio visits your site as a single anonymous browser session and only records the tracking it itself triggers. It reports on the tracking tools present, not on any individual visitor's data - and because it never signs in, it never touches account, member, or customer records.

Yes. Reports are locked to your account and no other user can reach them. Any access tokens for the GA4 and GTM audits are encrypted at rest, and Lumnio holds only the read-only permissions those audits need.

Audit reports and run history are kept in your account so you can revisit and compare them. If you have specific retention or deletion requirements, contact us and we'll accommodate them.

New accounts start with free audit credits, so you can run a real audit before paying. A run delivers two self-contained reports: a plain-English executive summary of what's working and what's at risk, and a detailed findings dashboard listing every tool, every tracked interaction, and the captured evidence behind each finding. No credit card required to start.

Each audit consumes one credit at the point it runs, so a completed audit is non-refundable. If a fault on our end caused a run to fail, contact us with the run ID and we'll credit it back.

For higher audit volume, multiple sites, or team access, email us with your site, team size, and what you need - we'll respond within one business day.