Check if your website meets GDPR cookie consent rules
Scan any page for cookies, trackers, third-party requests and consent banner issues. Get a privacy score and a GDPR cookie report showing what needs your attention.
Free, with no installation or sign-up
Cookies, trackers and consent setup checked in one scan
Results in about a minute, right here on the page
How to get your GDPR cookie report in 3 steps
Enter a page URL
Start with your homepage, then scan key landing or form pages, as each can load different scripts.
We scan it like a first-time visitor
The scanner loads your page and records which cookies, requests and trackers fire before any consent is given.
Get your report
Review your score, see exactly what was found and decide which issues to address first.
What the Piwik PRO’s cookie scanner checks
One scan covers the areas data protection authorities look at most often, from the cookies you set to how visitors can change their mind.
Cookies
First-party, third-party and unclassified cookies set on the page, so you know what to disclose and what needs consent.
Network requests
Every request made on page load, split into first- and third-party, so you can spot data flowing to external or non-EU services.
Trackers
Analytics, advertising, session recording and tag management tools detected on the page, grouped by category.
Consent Management Platform
Whether a CMP is running on the page and which one, so you know consent is being collected at all.
Google Consent Mode v2
Whether visitors’ consent choices are passed on to Google services, as required for ads and measurement in the EEA.
“Reject all” button
Whether visitors can refuse all non-essential cookies with a single click, as easily as they can accept them.
Option to withdraw consent
Whether visitors can change or withdraw their consent at any time, for example through a persistent settings link.
Privacy policy page
Whether a privacy policy is linked from the page, explaining how you collect, use and protect personal data.
What your privacy score means
Your score reflects automated scan results across all areas that we scan for. It helps you prioritize, but doesn’t confirm legal compliance.
A
30 – 32 points
Strong setup. Keep scanning regularly as you add new tools and pages.
B
25 – 29 points
Mostly in order, with a few gaps worth closing.
C
16 – 24 points
Significant privacy concerns that need attention.
D
0 – 15 points
Serious issues. Visitors’ data may be collected without valid consent.
Found some issues?
Here is how to fix them:
PIWIK PRO TAG MANAGER
Fire scripts only when visitors say yes
Piwik PRO Tag Manager works with the Cookie Information CMP to make sure every tag and script on your site fires based on your visitors’ consent.
Consent-based tag firing. Each tag fires only for the categories a visitor accepted.
Respect every change of mind. When visitors update or withdraw consent, your tags follow.
Data you can trust. Collect analytics and marketing data on a compliant foundation.
PIWIK PRO ANALYTICS
Analytics that doesn’t put your compliance at risk
Trackers are often the biggest source of privacy issues a scan uncovers. Piwik PRO Analytics gives you detailed insight into how visitors use your website, built for GDPR from the ground up, with full ownership of your data.
Privacy by design. Built to support GDPR and other regulations, ready for regulated industries.
Your data stays yours. No data sharing with third parties or ad networks. You decide where it’s stored.
Insights without the gaps. See journeys, funnels and conversions across web and mobile in one place.
Cookie Scanner FAQ
What is a cookie scanner?
A cookie scanner is a tool that loads a web page and lists the cookies, trackers and third-party requests it triggers. It shows you what data your website collects so you can check it against your consent banner and privacy policy.
Can I check my GDPR cookie consent for free?
Yes. Our free GDPR cookie scanner checks one page at a time for cookies, trackers and consent banner issues. You’ll see if non-essential cookies load before visitors say yes, and if they can reject or withdraw consent. Your GDPR cookie report arrives by email, with no installation needed.
Do I need consent for cookies under GDPR?
For most non-essential cookies, yes. Under GDPR and the ePrivacy Directive, cookies used for analytics, advertising or personalization generally require prior, informed consent. Strictly necessary cookies, such as those that keep a shopping cart working, are usually exempt.
What’s the difference between first-party and third-party cookies?
First-party cookies are set by your own domain. Third-party cookies are set by external domains, such as ad networks or embedded services, and often involve sharing visitor data with other companies.
What is Google Consent Mode v2?
Consent Mode v2 is Google’s framework for passing your visitors’ consent choices to Google services such as Google Ads and Google Analytics. Google requires it for advertisers who measure or target users in the European Economic Area.
Does a good score mean my website is GDPR compliant?
No. The scan is an automated check of one page and a helpful starting point, but it can’t catch everything and isn’t legal advice. For a full GDPR compliance audit, talk to your data protection officer or a privacy lawyer.All this helps you verify and improve your privacy compliance.
How often should I scan my website?
Scan after every change that adds scripts, such as a new marketing tool, plugin or campaign page, and at least once a quarter. Websites change quickly, and new tags can start collecting data without anyone noticing.
Is my website GDPR compliant?
There are many aspects of a website that must be aligned with GDPR. One of the most important steps is to check that the tracking codes and cookies installed on your website are working properly. You must analyze where the data is collected from, stored and processed, and for how long. You can use a cookie scanner that will help you check website cookies to meet GDPR requirements. You can also do a manual check or seek legal assistance to make sure you are 100% compliant.

Privacy / COmpliance Score
33
/ 33 pts
No Major Issues Detected
The website meets most privacy requirements
Your website follows most of the privacy practices checked during this scan. Some areas may still need attention.
Grade ranges
A
30-32
B
25-29
C
16-24
D
0-15
This score reflects automated scan results and does not confirm legal compliance.
Privacy / COmpliance Score
33
/ 33 pts
Improvements needed
The website partially meets privacy requirements
The scan identified several privacy-related issues that should be reviewed to improve your website’s setup.
Grade ranges
A
30-32
B
25-29
C
16-24
D
0-15
This score reflects automated scan results and does not confirm legal compliance.
Privacy / COmpliance Score
33
/ 33 pts
Significant privacy concerns
The website does not meet key privacy requirements
The scan identified significant privacy-related issues. Review the findings and address the areas requiring attention.
Grade ranges
A
30-32
B
25-29
C
16-24
D
0-15
This score reflects automated scan results and does not confirm legal compliance.
Privacy / COmpliance Score
33
/ 33 pts
Assessment Incomplete
The website does not meet key privacy requirements
We couldn’t collect enough information to calculate a reliable score. Try scanning the website again.
Grade ranges
A
30-32
B
25-29
C
16-24
D
0-15
This score reflects automated scan results and does not confirm legal compliance.
COOKIES_NUM
Cookies detected
Cookies found on the page. They may be used for site functionality, analytics, personalization, or advertising.
REQUESTS_NUM
Network Requests
Network requests made during page load, including scripts, APIs, images, or external services.
TRACKERS_NUM
Trackers
Tracking tools detected on the page, often used for analytics, advertising, or behavior measurement.
PLATFORM
Consent Management Platform
Consent platform detected on the page, used to manage cookie consent and privacy choices.
Active
Not Active
Google Consent Mode v2
Communicates user’s consent choices to Google services.
Detected
Not detected
“Reject All” button
Allows visitors to reject all non-essential cookies with a single click.
Detected
Not detected
Option to withdraw consent
Allows visitors to change or withdraw their consent at any time.
Detected
Not detected
Privacy Policy page
Provides information about how the website collects, uses and protects personal data.
Cookies
The presence of cookies may indicate that the website stores information in the user’s browser. Depending on their purpose, cookies can be used for essential site functionality, analytics, personalization, or advertising. Some cookies may require prior user consent and clear disclosure in the privacy or cookie policy.
FIRST_PARTY_COOKIES
First-Party Cookies
Cookies set by the website’s own domain.
THIRD_PARTY_COOKIES
Third-Party Cookies
Cookies set by external domains or embedded services.
COOKIES_UNCLASSIFIED
Unclassified
Cookies that could not be matched to a known category and may need manual review.
Unclassified Cookies (0)
These cookies could not be matched to a known category and may require manual review.
cookie_name
| Name | Domain | Path | Category | Expires in days | Lifetime | Before Consent | After Reject |
|---|---|---|---|---|---|---|---|
|
|
|
Network Requests
The presence of requests may indicate that the website connects to external services when a user visits the page. These connections can result in data being shared with third parties, including technical data such as IP address, device information, browser details, or page activity. Requests to services outside the EU may require additional legal assessment.
REQUESTS_NUM
Total requests
All network requests detected during the website scan.
REQUESTS_FIRSTPARTY
First-party requests
Requests sent to the website’s own domain.
REQUESTS_THIRDPARTY
Third-party requests
Requests sent to external domains and services.
| URL | Host | Destination | Inside EU |
|---|---|---|---|
|
|
Trackers
The presence of trackers may indicate that the website uses tools capable of observing, measuring, or profiling user behavior. Depending on the tracker type, this may involve analytics, advertising, session recording, marketing automation, or CRM integrations. Such technologies may require consent, transparency, and proper documentation in the site’s compliance setup.
TRACKERS_NUM
Trackers detected
Tracking technologies identified on the scanned page.
| Tracker | Category |
|---|---|
|
tracker_category |
A quick note about your results
This Compliance Check is a helpful starting point, but it’s not the whole story:
- It may not catch everything
- It’s not a substitute for legal advice
- We can’t guarantee 100% accuracy
For tailored legal guidance, please consult a professional lawyer.
We couldn’t complete your scan
Something went wrong while scanning your website. Please check the URL and try again.
Status:
STATUS
Scan ID:
SCAN_ID
Requested URL
REQUESTED_URL
Scanned URL:
SCANNED_URL
Requested at:
REQUESTED_AT
Finished at
FINISHED_AT

Your scan is in progress
We’re checking your website for cookies, trackers, consent signals, and privacy-related settings. This usually takes about a minute.
Status:
LOADING
Need some help with collecting visitor consents and managing data subject requests?
Find out how Piwik PRO Consent Manager can help you respect user privacy and become GDPR compliant!