Free Security & tech tool
Tracker & Privacy Scanner
See which trackers, cookies and third parties a page loads before visitors agree, and whether your consent banner holds them back.
- Free
- No sign-up
- Results in seconds
Full audit
This is one part of the full report
Speed, Core Web Vitals, UX, SEO and security in one free report, graded A+ to F, with AI fixes for your platform.
What it checks
Trackers before consent
Ad and session recording tags that run straight from the HTML, not blocked until visitors agree.
Consent banner
Cookiebot, OneTrust, CookieYes, Didomi, Usercentrics and 15 more, plus auto-blocking and Google Consent Mode defaults.
Server cookies
Cookies set on the first response, with likely purpose, lifetime and flags. Values are never stored.
Session recording
Hotjar, Microsoft Clarity, FullStory and others that record clicks, scrolls and typing.
Third-party companies
Every outside host the page contacts, grouped by company and category.
Privacy links
Privacy policy, cookie policy, “Do not sell or share” and Global Privacy Control.
Questions
Is this legal advice?
No. It shows what the page loads and when, so you can compare it with your consent setup. Whether a tag needs consent depends on your purpose, your visitors and local law, so check the result with your legal team.
Why might it miss some trackers?
We read the HTML before any script runs. Tags that a tag manager or another script adds later aren’t in it. Some sites also hide their consent banner from bots like ours.
What does “waits for consent” mean?
The tag is in the HTML but can’t run yet, usually because it’s marked type="text/plain" or keeps its URL in a data attribute. Your consent banner switches it on once visitors agree.
Do you store cookie values?
No. We keep only each cookie’s name, flags, domain and lifetime. Values can be session tokens, so we drop them straight away.