Compliancefree audit

Audit in progressAudit complete

Free · no sign-up

What a regulator sees

We count trackers before visitors choose and after they refuse, and read your legal pages. For guidance only, not legal advice.

Nothing is changed. No email needed.

  • Trackers before consent
  • Reject button
  • Legal notice
Right now, somewhere

A visitor opens a site. The banner asks for their choice. Watch what fires before they answer, and what fires after they refuse.

This site uses cookies.AcceptRefuse
Google Analyticsfires
Meta Pixelfires
Hotjarfires
Sessionexempt

A visitor arrives. The banner shows. They haven’t clicked anything yet.

Three trackers fire anyway. Google, Meta and Hotjar already have their identifier.

They click Refuse. The banner disappears.

Two fire again. The refusal isn’t enforced. That’s what an inspection writes down.

You put the three scripts on hold until the choice. One line each.

The same visitor comes back. The banner shows. Nothing fires.

They refuse.

Nothing fires. Only the session cookie, which is exempt, is there.

What stops the trackers takes one line per script, in the tool that runs your banner.

The banner is visible. The violation isn’t. A regulator’s inspection sees it. Your site may be in this position.

What the regulator checks

What a privacy regulator’s inspection looks at first on a page. You see it here before they do.

Questions we get asked
What exactly does this scan check?

What a regulator’s online inspection looks at. We load your page in a real browser, touch nothing, and count the trackers that fire. Then we refuse, like a visitor, and count again. Alongside, we read your legal notice and privacy policy, looking for what the law requires.

Am I really at risk?

Since 2022, the French regulator (CNIL) can sanction simple breaches through a fast-track procedure, up to €20,000. An inspection can start from a single visitor’s complaint.

My banner is there. Why is the score low?

Because a banner isn’t enough. The most common flaw is a tracker firing before the click, or firing anyway after a refusal. The banner is visible, the violation isn’t. That’s precisely what this scan measures.

What does the score measure?

Checks grouped into categories, out of 100. Consent (banner, refuse on the banner, nothing before the choice, nothing after a refusal), cookies set without asking and those left after a refusal, the legal notice (identity, host, publication director) and the privacy policy (rights, how to use them, retention). A check with nothing to examine leaves the calculation.

Does a good score mean I’m compliant?

No. This scan looks at what a visitor and a robot can see. It doesn’t judge how you actually use the data, your contracts with providers, or your internal records. It shows you the most common causes of complaint.

Audit in progress

    Audit of example.com

    0,0 s
    0/ 100
    Reading your site

    Your score is building.

    Each check adds the points it earns, and shows the ones you’re missing.

    0points out of 100
    Reading your site Connecting to the site
    Connection Connecting to the site
    Audit details