{
    "schema": "https://saferpage.de/schemas/evidence-center.v1",
    "generated_at": "2026-06-19T10:43:55+00:00",
    "domain": "app.gastromatic.de",
    "available": true,
    "scan": {
        "id": "9eb85e09-a276-44a9-bdaa-15004b3b3367",
        "checked_at": "2026-06-19 07:56:29.003996+02"
    },
    "summary": "app.gastromatic.de: 8 Nachweisartefakte, 45 Request(s), 17 Drittanbieter-Domain(s), Root-Hash 98cf10a26505e2e1.",
    "metrics": {
        "artifact_count": 8,
        "available_artifact_count": 8,
        "request_count": 45,
        "third_party_count": 17,
        "privacy_relevant_domain_count": 11,
        "cookie_count": 15,
        "storage_tracking_hint_count": 0,
        "consent_score": 0,
        "hash_section_count": 9,
        "history_count": 1
    },
    "protocol": {
        "final_url": "https://auth.gastromatic.de/auth/realms/gastromatic/protocol/openid-connect/auth?response_type=code&redirect_uri=https%3A%2F%2Fapp.gastromatic.de%2Fauth%2Fkeycloak%2Fcallback&scope=openid%20profile&client_id=gastromatic-web",
        "checked_at": "2026-06-19T05:56:28+00:00",
        "user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests; kostenloser Report: <a href=\"https://saferpage.de/app.gastromatic.de\">https://saferpage.de/app.gastromatic.de</a>)",
        "renderer": "playwright-chromium",
        "screenshot_url": "/cache/screenshots/app.gastromatic.de-160x150-f7cc24278cf43b288d.png",
        "http_status": "200"
    },
    "artifacts": [
        {
            "id": "html_http",
            "label": "HTTP-/HTML-Antwort",
            "status": "verfügbar",
            "detail": "Endziel, Status, Header- und HTML-Signale aus passivem Abruf.",
            "source": "evidence/http",
            "url": ""
        },
        {
            "id": "browser_run",
            "label": "Headless-Browserlauf",
            "status": "verfügbar",
            "detail": "Chromium-/Browser-Signale für Requests, Cookies, Storage und Consent.",
            "source": "browser_analysis",
            "url": ""
        },
        {
            "id": "screenshot",
            "label": "Screenshot",
            "status": "verfügbar",
            "detail": "Kleines Seitenpreview als visueller Kontext.",
            "source": "screenshot",
            "url": "https://saferpage.de/cache/screenshots/app.gastromatic.de-160x150-f7cc24278cf43b288d.png"
        },
        {
            "id": "consent_states",
            "label": "Consent-Zustände",
            "status": "verfügbar",
            "detail": "Ablehnen, Akzeptieren, GPC, CMP- und Cookie-/Request-Zustände.",
            "source": "consent_audit",
            "url": "https://saferpage.de/consent/app.gastromatic.de/nachweise"
        },
        {
            "id": "cookies",
            "label": "Cookie-/Storage-Auszug",
            "status": "verfügbar",
            "detail": "Sanitisierte Cookie-, Storage- und Laufzeit-/Zwecksignale.",
            "source": "cookie_inventory",
            "url": "https://saferpage.de/cookies/app.gastromatic.de"
        },
        {
            "id": "third_parties",
            "label": "Drittanbieter-/Request-Auszug",
            "status": "verfügbar",
            "detail": "Kontaktierte Domains, Anbieter, Request-Samples und datenschutzrelevante Kontakte.",
            "source": "browser_analysis",
            "url": "https://saferpage.de/anbieter/app.gastromatic.de"
        },
        {
            "id": "integrity",
            "label": "Integritätsmanifest",
            "status": "verfügbar",
            "detail": "Root-Hash 98cf10a26505e2e1b5b173829a65d2298cdf83101a48c1d1184b0c073964ff20",
            "source": "evidence_integrity_manifest",
            "url": ""
        },
        {
            "id": "zip",
            "label": "ZIP-Nachweispaket",
            "status": "verfügbar",
            "detail": "Getrennte Rohdaten-/Tabellenexporte über die API, soweit im Scan vorhanden.",
            "source": "api_export_zip",
            "url": "https://saferpage.de/api/report/export?id=9eb85e09-a276-44a9-bdaa-15004b3b3367&format=zip"
        }
    ],
    "integrity": {
        "algorithm": "sha256",
        "root_hash": "98cf10a26505e2e1b5b173829a65d2298cdf83101a48c1d1184b0c073964ff20",
        "manifest_available": true,
        "derived_root_hash": "522e13622a94e2f0b2cc66b1fbe81b7cc523845e56a806e981a21e373c826c5a",
        "sections": [
            {
                "id": "audit_receipt",
                "hash": "e773df96d969528b80a939ff51b499dd83feb07a219363172e1106d0f388a6d4",
                "count": 18,
                "label": "Prüfbeleg",
                "detail": "Kanonischer JSON-Hash des kompakten Prüfbelegs.",
                "status": "verfügbar"
            },
            {
                "id": "protocol",
                "hash": "b9b642e94afa130fd51efc1a35401197e0acb39be71bb4df67e62966ea8629e0",
                "count": 15,
                "label": "Scan-Protokoll",
                "detail": "URL, Endziel, User-Agent, Zeitstempel, HTTP/DNS/TLS und Renderer.",
                "status": "verfügbar"
            },
            {
                "id": "checkpoints",
                "hash": "ee9c2dfc37b1063381b055455ab5ec73b6eeebbd05bf8c7d3d651ff9597c74ed",
                "count": 6,
                "label": "Prüfschritte",
                "detail": "Kanonischer JSON-Hash der dokumentierten Prüfstationen.",
                "status": "verfügbar"
            },
            {
                "id": "consent_states",
                "hash": "a281089a9935c41f3c9d4057e660e29fb1274e8877d4398f1abb2f99c4495911",
                "count": 4,
                "label": "Consent-Zustände",
                "detail": "Default-, Ablehnen-, Akzeptieren- und GPC-Nachweise soweit verfügbar.",
                "status": "verfügbar"
            },
            {
                "id": "third_party_evidence",
                "hash": "a81fbe46a28b3dcdea9271003d02a8874f9684fe41fae43beed1569c9fb28700",
                "count": 12,
                "label": "Drittanbieter-Auszug",
                "detail": "Sanitisierte Anbieter-, Kategorie-, Transfer- und Request-Zählwerte.",
                "status": "verfügbar"
            },
            {
                "id": "cookie_evidence",
                "hash": "94e22437d78e03ed148aefb5b755a730753ecca5223a6ccaad0a481816be8516",
                "count": 12,
                "label": "Cookie-Auszug",
                "detail": "Sanitisierte Cookie-Metadaten ohne Cookie-Werte.",
                "status": "verfügbar"
            },
            {
                "id": "request_samples",
                "hash": "dc6be586a9b32c7c2213799da63e5b7bd8cf595d96c2e9d731d26c005a17a13e",
                "count": 10,
                "label": "Request-Samples",
                "detail": "Sanitisierte Drittanbieter-Samples ohne vollständige Request-URLs.",
                "status": "verfügbar"
            },
            {
                "id": "checked_pages",
                "hash": "766f9071b9f8cc230ecc2fd7d9588189c683ce9b45fab517037db8eccfe224e1",
                "count": 1,
                "label": "Geprüfte Unterseiten",
                "detail": "Priorisierte Pfade aus Sitemap, Pflichtseiten und interner Linkstruktur.",
                "status": "verfügbar"
            },
            {
                "id": "screenshot_file",
                "hash": "7c2f83623e2bd9c79725e0991b0f8f69c6fd650fc77ed95f16ef9d216d78c1c9",
                "count": 14058,
                "label": "160x150 Seitenvorschau-Datei",
                "detail": "/cache/screenshots/app.gastromatic.de-160x150-f7cc24278cf43b288d.png",
                "status": "verfügbar"
            }
        ],
        "verification_steps": [
            "JSON-Export speichern und den jeweiligen Abschnitt kanonisch mit sortierten Schlüsseln serialisieren.",
            "SHA-256 des kanonischen Abschnitts bilden und mit dem Manifest vergleichen.",
            "Screenshot-Datei separat als rohe Datei-Bytes hashen, falls ein Screenshot-Artefakt vorhanden ist.",
            "Bei einem Wiederholungsscan Root-Hash, Zeitstempel und Abschnitts-Hashes getrennt vergleichen."
        ]
    },
    "evidence_samples": {
        "consent_states": [
            {
                "id": "",
                "label": "Erstaufruf",
                "request_count": "33",
                "cookie_count": "0",
                "privacy_relevant_domain_count": "11"
            },
            {
                "id": "",
                "label": "Nach Ablehnen neu",
                "request_count": "0",
                "cookie_count": "0",
                "privacy_relevant_domain_count": "0"
            },
            {
                "id": "",
                "label": "Nach Akzeptieren neu",
                "request_count": "0",
                "cookie_count": "0",
                "privacy_relevant_domain_count": "0"
            },
            {
                "id": "",
                "label": "GPC-Aufruf",
                "request_count": "31",
                "cookie_count": "0",
                "privacy_relevant_domain_count": "11"
            }
        ],
        "third_parties": [
            {
                "host": "googletagmanager.com",
                "provider": "Google Tag Manager",
                "category": "Tag-Manager",
                "request_count": "3",
                "privacy_relevant": "ja"
            },
            {
                "host": "px.ads.linkedin.com",
                "provider": "LinkedIn",
                "category": "Social/Tracking",
                "request_count": "2",
                "privacy_relevant": "ja"
            },
            {
                "host": "snap.licdn.com",
                "provider": "LinkedIn",
                "category": "Social/Tracking",
                "request_count": "2",
                "privacy_relevant": "ja"
            },
            {
                "host": "connect.facebook.net",
                "provider": "Meta/Facebook",
                "category": "Social/Tracking",
                "request_count": "2",
                "privacy_relevant": "ja"
            },
            {
                "host": "youtube.com",
                "provider": "YouTube",
                "category": "Video",
                "request_count": "2",
                "privacy_relevant": "ja"
            },
            {
                "host": "region1.analytics.google.com",
                "provider": "Google Analytics",
                "category": "Analytics",
                "request_count": "1",
                "privacy_relevant": "ja"
            },
            {
                "host": "ad.doubleclick.net",
                "provider": "Google DoubleClick",
                "category": "Werbung",
                "request_count": "1",
                "privacy_relevant": "ja"
            },
            {
                "host": "stats.g.doubleclick.net",
                "provider": "Google DoubleClick",
                "category": "Werbung",
                "request_count": "1",
                "privacy_relevant": "ja"
            },
            {
                "host": "static.hotjar.com",
                "provider": "Hotjar",
                "category": "Session-Replay",
                "request_count": "1",
                "privacy_relevant": "ja"
            },
            {
                "host": "px4.ads.linkedin.com",
                "provider": "LinkedIn",
                "category": "Social/Tracking",
                "request_count": "1",
                "privacy_relevant": "ja"
            },
            {
                "host": "facebook.com",
                "provider": "Meta/Facebook",
                "category": "Social/Tracking",
                "request_count": "1",
                "privacy_relevant": "ja"
            },
            {
                "host": "bat.bing.com",
                "provider": "bat.bing.com",
                "category": "Sonstige",
                "request_count": "5",
                "privacy_relevant": "nein"
            }
        ],
        "cookies": [
            {
                "name": "_ga",
                "domain": "gastromatic.de",
                "category": "Analytics",
                "retention": "lang (399 Tage)",
                "pre_consent": "ja"
            },
            {
                "name": "_ga_N7NP9EH1Q6",
                "domain": "gastromatic.de",
                "category": "Analytics",
                "retention": "lang (399 Tage)",
                "pre_consent": "ja"
            },
            {
                "name": "__Secure-ROLLOUT_TOKEN",
                "domain": "youtube.com",
                "category": "Notwendig",
                "retention": "mittel (179 Tage)",
                "pre_consent": "ja"
            },
            {
                "name": "AUTH_SESSION_ID",
                "domain": "auth.gastromatic.de",
                "category": "Notwendig",
                "retention": "Session",
                "pre_consent": "ja"
            },
            {
                "name": "AUTH_SESSION_ID_LEGACY",
                "domain": "auth.gastromatic.de",
                "category": "Notwendig",
                "retention": "Session",
                "pre_consent": "ja"
            },
            {
                "name": "VISITOR_INFO1_LIVE",
                "domain": "youtube.com",
                "category": "Unklar",
                "retention": "mittel (179 Tage)",
                "pre_consent": "ja"
            },
            {
                "name": "VISITOR_PRIVACY_METADATA",
                "domain": "youtube.com",
                "category": "Unklar",
                "retention": "mittel (179 Tage)",
                "pre_consent": "ja"
            },
            {
                "name": "YSC",
                "domain": "youtube.com",
                "category": "Unklar",
                "retention": "Session",
                "pre_consent": "ja"
            },
            {
                "name": "__Secure-YNID",
                "domain": "youtube.com",
                "category": "Unklar",
                "retention": "mittel (179 Tage)",
                "pre_consent": "ja"
            },
            {
                "name": "KC_RESTART",
                "domain": "app.gastromatic.de",
                "category": "Unklar",
                "retention": "Session",
                "pre_consent": "ja"
            },
            {
                "name": "KC_RESTART",
                "domain": "auth.gastromatic.de",
                "category": "Unklar",
                "retention": "Session",
                "pre_consent": "ja"
            },
            {
                "name": "_gcl_au",
                "domain": "gastromatic.de",
                "category": "Unklar",
                "retention": "mittel (89 Tage)",
                "pre_consent": "ja"
            }
        ],
        "requests": [
            {
                "host": "fonts.googleapis.com",
                "resource_type": "stylesheet",
                "query_key_count": "2",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "fonts.googleapis.com",
                "resource_type": "stylesheet",
                "query_key_count": "2",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "googletagmanager.com",
                "resource_type": "script",
                "query_key_count": "1",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "static.hotjar.com",
                "resource_type": "script",
                "query_key_count": "1",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "fonts.gstatic.com",
                "resource_type": "font",
                "query_key_count": "0",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "fonts.gstatic.com",
                "resource_type": "font",
                "query_key_count": "0",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "fonts.gstatic.com",
                "resource_type": "font",
                "query_key_count": "0",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "ad.doubleclick.net",
                "resource_type": "fetch",
                "query_key_count": "2",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "googletagmanager.com",
                "resource_type": "script",
                "query_key_count": "3",
                "sensitive_query_key_count": "0"
            },
            {
                "host": "googletagmanager.com",
                "resource_type": "script",
                "query_key_count": "3",
                "sensitive_query_key_count": "0"
            }
        ]
    },
    "links": {
        "evidence_center": "https://saferpage.de/nachweise/app.gastromatic.de",
        "json": "https://saferpage.de/nachweise/app.gastromatic.de/export",
        "csv": "https://saferpage.de/nachweise/app.gastromatic.de/export-csv",
        "markdown": "https://saferpage.de/nachweise/app.gastromatic.de/manifest-md",
        "zip": "https://saferpage.de/api/report/export?id=9eb85e09-a276-44a9-bdaa-15004b3b3367&format=zip",
        "report": "https://saferpage.de/app.gastromatic.de",
        "consent_evidence": "https://saferpage.de/consent/app.gastromatic.de/nachweise",
        "changes": "https://saferpage.de/aenderungen/app.gastromatic.de",
        "trust": "https://saferpage.de/trust/app.gastromatic.de"
    },
    "disclaimer": "Nachweise sind öffentliche, sanitisiert dargestellte SaferPage-Artefakte. Sie belegen beobachtete Website-Signale zum Scan-Zeitpunkt, ersetzen aber keine interne Freigabe, keine vollständige Logauswertung und keine Rechtsberatung."
}