Audit in progressAudit complete
What a regulator sees
We count trackers before visitors choose and after they refuse, and read your legal pages. For guidance only, not legal advice.
Nothing is changed. No email needed.
- Trackers before consent
- Reject button
- Legal notice
A visitor opens a site. The banner asks for their choice. Watch what fires before they answer, and what fires after they refuse.
A visitor arrives. The banner shows. They haven’t clicked anything yet.
Three trackers fire anyway. Google, Meta and Hotjar already have their identifier.
They click Refuse. The banner disappears.
Two fire again. The refusal isn’t enforced. That’s what an inspection writes down.
You put the three scripts on hold until the choice. One line each.
The same visitor comes back. The banner shows. Nothing fires.
They refuse.
Nothing fires. Only the session cookie, which is exempt, is there.
What stops the trackers takes one line per script, in the tool that runs your banner.
The banner is visible. The violation isn’t. A regulator’s inspection sees it. Your site may be in this position.
Bannerpresent
Refuseon the banner
Trackersbefore the choice
Trackersafter refusal
Cookiesset outright
Noticeidentity
Hostnamed
Rightsexercise
Retentionperiods
Bannerpresent
Refuseon the banner
Trackersbefore the choice
Trackersafter refusal
Cookiesset outright
Noticeidentity
Hostnamed
Rightsexercise
RetentionperiodsWhat a privacy regulator’s inspection looks at first on a page. You see it here before they do.
What exactly does this scan check?
What a regulator’s online inspection looks at. We load your page in a real browser, touch nothing, and count the trackers that fire. Then we refuse, like a visitor, and count again. Alongside, we read your legal notice and privacy policy, looking for what the law requires.
Am I really at risk?
Since 2022, the French regulator (CNIL) can sanction simple breaches through a fast-track procedure, up to €20,000. An inspection can start from a single visitor’s complaint.
My banner is there. Why is the score low?
Because a banner isn’t enough. The most common flaw is a tracker firing before the click, or firing anyway after a refusal. The banner is visible, the violation isn’t. That’s precisely what this scan measures.
What does the score measure?
Checks grouped into categories, out of 100. Consent (banner, refuse on the banner, nothing before the choice, nothing after a refusal), cookies set without asking and those left after a refusal, the legal notice (identity, host, publication director) and the privacy policy (rights, how to use them, retention). A check with nothing to examine leaves the calculation.
Does a good score mean I’m compliant?
No. This scan looks at what a visitor and a robot can see. It doesn’t judge how you actually use the data, your contracts with providers, or your internal records. It shows you the most common causes of complaint.
Audit in progress
Audit of example.com
0,0 sYour score is building.
Each check adds the points it earns, and shows the ones you’re missing.
Does ChatGPT name you?
Do AIs recommend you? Three questions your customers would ask, put to ChatGPT. Its answers land in your inbox.
One email address, nothing else · one test per day · answers within minutes