Know what your website discloses before a regulator does.

Technical validation of privacy-policy signals, consent setup, and active trackers — findings mapped to what to change, not just what’s wrong.

Is this your website?
  • See which trackers load and whether anything gates them
  • Catch a consent banner that asks but does not actually block
  • Get a concrete action per finding, not a legal disclaimer

Check a page for privacy signals

Enter a URL and see which trackers load, what consent setup is in place, and what to change.

Tracker detection

Scans the page for known tracking scripts — Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, Mixpanel and Adobe.

Consent setup

Looks for consent wording, banner and modal markup, and five named consent platforms: Cookiebot, OneTrust, Quantcast, TrustArc and Iubenda.

Policy and form signals

Checks whether a privacy policy is linked and reachable, and whether forms carry consent checkboxes and privacy notices.

Transport security

Verifies that the page enforces HTTPS after redirects and sends a Strict-Transport-Security header.

Does this replace legal advice?
No. It is a technical check of what the page does and discloses. Whether that satisfies your legal obligation is a lawyer’s call.
Does it prove trackers fire before consent?
It reports which known tracking scripts are present in the page and whether a consent mechanism exists alongside them. It does not observe network traffic at runtime, so it flags the risky combination rather than proving a violation.
Which consent platforms are recognised?
Cookiebot, OneTrust, Quantcast, TrustArc and Iubenda by name, plus generic consent banner and modal markup. A custom banner is usually detected through its markup.
What if I use a tracker that is not on the list?
It will not be named. The tracker list covers the six most common vendors; a self-hosted or niche tool can go unnoticed.

Every check runs on our servers: you provide a public URL, there is nothing to install, and pages are rendered with JavaScript first so single-page apps are read the same way a browser reads them. Each result gets a permanent link you can share. On a website you have claimed, findings become tracked issues, and result pages offer AI summaries and developer guidance on plans that include them.