Observation report
127.0.0.1 · scanned
8/5/2026, 7:04:56 PM ·
crawled ·
scan id sample
How this report was produced
The scanner has changed since this scan ran. What changed, and when.
5 observation(s) relating to 9 state framework(s): California, Maine, Colorado, Connecticut, Illinois, Massachusetts, Minnesota, New York, Virginia.
Summary
127.0.0.1 · scanned 8/5/2026, 7:04:56 PM · crawled
4 high, 1 medium.
- High A consent box is already ticked when the page loads.
- High Cancelling requires a phone call.
- High The renewal terms aren’t on the checkout page — they’re only in the linked Terms.
- High The free trial doesn’t say what happens when it ends.
- Medium There’s no visible way to cancel online.
3 further check(s) cannot be seen by any outside scan and need a person with account access — listed at the foot of this report.
bad demo fixture — a fake merchant site written
to fail several checks — and committed to the repository so this page is reachable without running
anything. It is not a report about a real business. The visual pass was deliberately disabled when it
was generated, so all four of its signals are recorded as undetermined in the signal table
below rather than guessed: that is what an honest report looks like when a pass does not run.
Run a scan of your own.Scoped to every state in the matrix. Nothing has been held back from this report.
- The entered URL already showed recurring-interval wording, so it was used directly as the plans page.
- Stopped at step 2: a card-number field was detected. No payment details were entered and nothing was submitted.
Findings
Ordered by severity, then by the first state each relates to, then by rule identifier — so two reports for the same site line up against each other.
A consent box is already ticked when the page loads.
Relates to: California · Maine
Show evidence
What was observed. No dedicated, unchecked consent control for the renewal terms was detected separately from general terms acceptance.
- No checkbox was found whose label references renewal terms distinctly from a terms-of-service or privacy-policy checkbox.
- At least one checkbox was already checked when the page loaded.
Step 2, cropped to the consent region at 270,513 (508×100px, shown at 130%). Open full capture
Cancelling requires a phone call.
Relates to: California · Colorado · Connecticut · Illinois · Maine · Massachusetts · Minnesota · New York · Virginia
Show evidence
What was observed. The fetched terms text describes cancelling by telephone.
- The matched sentence is recorded verbatim in the signal table below, so the wording can be read in context rather than taken on the scanner’s word.
call our support desk on 1-800-555-0134 to cancel
The sentence the phoneOnlyCancel signal matched, quoted from the fetched
document. There is no on-page element to photograph for this finding — the match is in linked text, and
the quotation above is the evidence itself.
The renewal terms aren’t on the checkout page — they’re only in the linked Terms.
Relates to: California · Colorado · Connecticut · Illinois · Maine · Massachusetts · Minnesota · New York · Virginia
Show evidence
What was observed. Automatic-renewal terms were not detected in the visible text presented alongside the consent action.
- Renewal language appears only in linked terms pages, not in the visible text of the consent step.
Step 2, cropped to the consent region — where the renewal wording would be expected; none was located, which is what this finding reports at 270,513 (508×100px, shown at 130%). Open full capture
The free trial doesn’t say what happens when it ends.
Relates to: California · Colorado · Connecticut · Massachusetts · New York
Show evidence
What was observed. Trial or promotional pricing was detected without accompanying visible text describing the charge that follows it.
Step 2, cropped to the trial region at 266,120 (908×81px, shown at 100%, width clipped so the type is at its real size). Open full capture
There’s no visible way to cancel online.
Relates to: California · Colorado · Connecticut · Illinois · Maine · Massachusetts · Minnesota · New York · Virginia
Show evidence
What was observed. No link or control matching an online cancellation route was found on the pages this scan could reach.
- This scan never authenticates and stops at the card field, so a cancellation route that exists inside an account would not be visible to it. The signal table records how many link and control labels were searched.
No single on-page element corresponds to this finding — it rests on what was searched rather than on one spot on the page. The signal values above record what was looked at, and the full capture of step 2 is available: open it.
Requires manual verification
An outside scan of a signup flow cannot see any of the following. Each needs a person with account access, an email inbox, or the business's own records. These are not counted in the totals above and are not ranked against the findings.
Whether the confirmation repeats the renewal terms can’t be seen from outside.
What was observed. Not observable from outside the signup flow.
The acknowledgment is delivered by email after a completed transaction. This scan never completes a purchase, so the message is never generated or received.
Whether an annual reminder gets sent can’t be seen from a checkout page.
What was observed. Not observable from a checkout flow.
Annual reminders are sent to existing subscribers on a schedule measured from the signup date. Nothing about them is visible at checkout.
Whether notice is sent before each renewal can’t be seen from a checkout page.
What was observed. Not observable from a checkout flow.
Whether a renewal notice was sent depends on the contract term and the notice schedule after signup, neither of which is exposed during checkout.
Cancellation flow behind a login
This scan never creates an account and never completes a purchase, so the actual cancellation journey — how many steps it takes, what retention offers appear, and whether it can be completed online at all — was not exercised.
Confirmation email contents and renewal reminders
Post-transaction messages are generated after a completed purchase and delivered to an inbox. Nothing about them is observable from the signup flow.
All observed signals
Show the 16 raw signal values this report is built from
| Signal | Value and where it came from |
|---|---|
| consentMechanism | undetermined
Undetermined — the visual pass was disabled for this run (ARL_VISION=off) |
| onlineCancelPath | false
Searched 18 link/control labels across captured pages and fetched terms; no match |
| phoneOnlyCancel | true
Matched terms text: “call our support desk on 1-800-555-0134 to cancel” |
| prechecked | true
Checked on load: “I have read and agree to the Terms & Conditions and the Priv…” |
| priceAndIntervalNearCTA | true
Price with billing interval found 0px from the submit control on step 1 |
| proximityToConsentAction | undetermined
Undetermined — the visual pass was disabled for this run (ARL_VISION=off) |
| renewalTermsProminence | undetermined
Undetermined — the visual pass was disabled for this run (ARL_VISION=off) |
| renewalTermsVisible | undetermined
Undetermined — the visual pass was disabled for this run (ARL_VISION=off) |
| renewalTextInLinkedTerms | true
Fetched text of 1 linked terms page(s) |
| renewalTextOnPage | false
Visible text of step 2 (http://127.0.0.1:3000/fixtures/bad/checkout.html) |
| renewalTextOnlyInLinkedTerms | true
Absent from step 2 (http://127.0.0.1:3000/fixtures/bad/checkout.html); present in fetched terms text |
| separateConsentCheckbox | false
1 checkbox(es) on step 2 (http://127.0.0.1:3000/fixtures/bad/checkout.html); 0 referencing renewal, 1 referencing general terms |
| subscriptionFlowReached | true
Observed: step 1 shows a price with a billing interval; step 2 shows a card field; step 2 shows a price with a billing interval; step 2 shows a consent control alongside a price |
| trialConversionInLinkedTermsOnly | true
Conversion wording appears in fetched terms text only |
| trialConversionTerms | false
No wording describing the post-trial charge was found in captured page text |
| trialLanguage | true
Trial wording found in captured page text |
Walk
Every screen the scan reached, in order. No payment details were entered and no purchase was submitted at any point.
http://127.0.0.1:3000/fixtures/bad/
http://127.0.0.1:3000/fixtures/bad/checkout.html
Card field detected — walk stopped here.
Pending state activity
Tracked so a scan can be re-run if these take effect. Informational only — a bill that is not in effect carries no rules in this matrix and can never produce a finding.
- Michigan — Nothing in force. Michigan’s constitution provides that business pending at the final adjournment of an odd-year regular session carries over to the next regular session, so a bill introduced in August 2025 remains live through the 2026 session and would lapse at the end of the two-year term.
- Pennsylvania — Nothing general in force. Two bills are live in the 2025–2026 session, which runs until it adjourns at the end of November 2026; Pennsylvania bills carry over within that two-year session.
- Texas — Nothing in force. Two subscription-contract bills were filed in 2025 and both were referred to committee and went no further. Texas bills do not carry over, the legislature meets in regular session only in odd-numbered years, and the next regular session convenes in January 2027.
Keeping, sharing and re-running this report
Select the field to copy it, or use the copy button if your browser allows it.
This URL keeps resolving for as long as the scan directory exists on the server, and the report is not access-controlled — anyone who can reach this server and has the link can open it. The same data is available as JSON at /report/sample.json.
Save a copy
Use your browser's print command and choose “Save as PDF”. The print stylesheet lays the report out for letter paper, drops the navigation and the forms, prints link destinations in full, repeats the report id at the top of every page, and keeps the disclaimer on page one.
Re-scan this target
Running a scan needs credentials on this instance. Running a scan on this instance needs credentials from whoever operates it. Everything else on this site — the rule matrix, the methodology, every state page and the sample report — is open and needs nothing. This button posts to the same endpoint as the scan form, so it will ask for a username and password. What is still open without them.
Runs the same URL again under the current scanner and the current rule matrix. The new report compares itself against this one automatically — across every state in the matrix rather than only the states selected, so a change of scope cannot look like a change to the site, and checks added since are counted separately rather than reported as a change.
Source note. The statute summaries and effective dates shown in this report
are demo-seed text drafted from public secondary sources. They have not been checked against primary
statutory text and must be verified by a qualified lawyer before any real-world use. This report was
produced under scanner 0.5.0 and rule matrix
2026-08-04, with a matrix of
9 check(s); the matrix now holds 9.
Changelog · How each signal is computed.