Does your site track visitors before they agree?
Enter your website. In a few seconds you see which trackers your homepage loads, whether a consent banner holds them back until visitors agree, which cookies it sets on the first visit and whether your privacy policy is linked. GDPR, the CNIL's rules and Quebec's Law 25 all expect this.
What we check
Trackers
About 25 known trackers: analytics, ad pixels, heatmaps and chat widgets, and the privacy-friendly analytics that are usually exempt.
Consent banner
About 20 consent tools, plus the banners Squarespace, Wix and Shopify add themselves.
Held back or not
Whether trackers wait for consent, or sit in the page and may run straight away.
First-visit cookies
The cookies the server sets before the visitor has clicked anything, and whether they look like tracking.
Privacy policy
Whether a privacy or cookie policy is linked from the homepage.
Fonts and embeds
Google Fonts and embedded videos or maps, which contact other companies as the page loads.
Questions, answered
Is it really free?
Yes, with no sign-up. It scans the homepage of any public website.
Is this a legal compliance check?
No. It reports what the homepage loads, which is the technical part these laws care about most. Whether your site complies as a whole depends on more than that, and on your country's rules.
Why might it miss a tracker?
It reads the page as it arrives. Trackers that other scripts add afterwards, typically through Google Tag Manager, only appear in a full browser. A full audit covers them.
It says no consent tool was found, but I have a banner. Why?
Some banners are added by another script after the page loads, so they don't appear in the page itself. If yours shows on a first visit in a private window and blocks trackers until visitors agree, you're fine on this point.
Related services
Privacy compliance
A consent banner that really blocks trackers, form notices and a short report.
Free website check
Dead links, phones, https and search basics on your homepage.
Free email check
SPF, DKIM and DMARC for your domain, in seconds.