Track Synthetic Traffic & Trace AI Agents on Charities Websites
Paste one snippet before </body>. Detect autonomous AI assistants, get step-by-step session reports of what they read and submit, and audit the data exposures they find.
$9.99 a month or $59.94 a year. No contract. Cancel any time.
One-snippet deployment
Paste one line of HTML right before the closing body tag on every page. It loads asynchronously, after your page, so it does not hold up what real visitors see. Visits that do not look synthetic are never sent to SynthTrail.
Example
<script async src="https://synthtrail.com/api/public/t.js" data-site="YOUR_SITE_KEY"></script>
Your account page shows your own snippet with your personal key already filled in.
Why Charities sites need synthetic visitor tracking
Traditional analytics such as GA4 are built to count people. Three things they hide:
- 1
Enquiry and booking numbers get distorted
Agents that submit donation-pledge and volunteer forms create false leads and wasted follow-up, and blur which of your marketing brings real customers.
- 2
Your content is read and repeated
AI assistants read your programs, impact stories and financials and repeat it when people ask about your area or field, often without sending the customer to you.
- 3
Leftovers can be exposed
Donor lists and volunteer records can end up on a public path without anyone deciding to publish them, and agents find them first.
The three core pillars of SynthTrail
Spot synthetic visitors live
Tell people apart from AI agents and automated browsers by the name they give, automation markers, scripted clicks and typing, speed and missing human activity. Each flag comes with its reasons.
Read the session trail
Review a timeline such as 00:00 landed, 00:21 read pricing, 01:05 submitted a form, with pages, clicks, scrolling and time on site.
Audit what AI sees
Find exposed keys, open admin routes, public backups and readable email lists, with a fix for each and an exposure score from 0 to 100.
Privacy by design
- Human visitors are ignored: only sessions flagged as synthetic are sent and saved.
- No names, accounts or personal details of your visitors are collected, and typed form values are never recorded.
- The snippet sets no tracking cookies, so it adds nothing to a cookie banner.
- SynthTrail is owned and operated by Ramenbox Technologies Ltd. in Saint John, New Brunswick, Canada.
This is designed to fit privacy-first practices, including those of Canadian privacy law, but it is not legal advice. Check your own obligations.
Frequently asked questions
The snippet loads asynchronously, after your page, so it does not hold up what a visitor sees. It checks in the browser for signs of an AI agent: a name that identifies one, automation markers, scripted clicks and typing, speed no person has, and no real mouse, touch or keyboard activity. Visits that do not look synthetic are not sent to SynthTrail.
Each flagged visit is saved as a timestamped trail: the agent name when it gives one, where it landed, each page it opened, clicks, scrolling, forms it submitted (field names only, never typed values), time on site, a risk rating and the plain-language reasons it was flagged.
It looks for public backup and export files, open admin routes, keys in page source, and public paths holding donor lists and volunteer records. Each finding shows how serious it is and how to fix it, and findings feed an exposure score from 0 to 100. Checks run from visitors' browsers, at most once a day per browser.
Add ?synthtrail_test=1 to the end of any page address on your site, for example yoursite.com/?synthtrail_test=1. That visit is treated as an AI agent, runs a security check straight away and appears in your dashboard after about ten seconds, so you can see the whole flow on your own site.