Technical audit · 2026-05-26

vwgh.gv.at

Austrian Administrative Court

Austrian Administrative Court — 29 requests, 1 domain. Everything from [www.vwgh.gv.at](https://www.vwgh.gv.at). Zero external requests, zero cookies, zero trackers. The site shows a cookie banner referring to statistics — the HAR does not confirm this.

Timeline of the leak

+0 ms · load
All resources — CSS, JS, fonts, images — are loaded exclusively from [www.vwgh.gv.at](https://www.vwgh.gv.at).
Session total
29 requests, 1 domain. Not a single external request, not a single Set-Cookie header.

Context

VwGH (Verwaltungsgerichtshof) is Austria’s highest administrative court, a body of constitutional standing. HAR: 29 requests, 1 domain. Privacy policy: https://www.vwgh.gv.at/datenschutz/index.html

One domain

29 requests, all to [www.vwgh.gv.at](https://www.vwgh.gv.at). Fonts, jQuery, a slider — all hosted locally. No CDN, no analytics, no external services. Zero cookies, zero Set-Cookie headers across the entire session.

The site displays a banner: “Wir verwenden Cookies zu Statistikzwecken und zur Qualitätssicherung” — with a link to the policy and a consent button. The HAR does not bear this out: not a single cookie, not a single request to any analytics tool. The site’s privacy policy barely mentions the website itself — it is devoted to data processing within judicial activities rather than the operation of the website. A DPO is appointed only for the non-judicial area.

Conclusion

In practice, this is a clean HAR — one domain, zero trackers. A cookie banner exists, but the statistics it announces are not visible in the HAR.

Evidence
Original (audit)
HAR file: at/vwgh-gv-at-2026-05-26.har
SHA-256: 43a536e41a588161c2b93d6038ac67eb287445f8ea3a2f8d05d246d5d452ef8b
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.