TLDR: GetCookies' free scanner checks any website for cookie compliance in 30 seconds. No signup required. Get instant reports on consent mode status, pre-consent violations, and GDPR risk scoring—then decide if you need to act.
Read full summary
A free, no-signup-required tool that scans any website for cookie compliance issues. The scanner checks for pre-consent cookie violations, Google Consent Mode v2 implementation, cookie categorization, and provides an overall GDPR compliance score. Results include actionable recommendations and the option to generate a full compliance report.
Summary by Claude AI
The €1.5 Million Wake-Up Call
Illustrative scenario: a composite example, not a specific reported case.
A French e-commerce company thought their cookie implementation was fine. Their developers had added a consent banner two years ago. It showed categories. Users could accept or reject. Job done.
Then a customer filed a complaint with the CNIL. The regulator scanned the site and found 14 tracking cookies firing before consent. Every page view since the banner was added had violated GDPR. The fine: €1.5 million. The fix: two hours of development work.
Two hours of work versus €1.5 million in fines. The only difference was knowing there was a problem.
Why Scan Before You're Scanned
Data protection authorities don't send warning letters. They run automated scans, document violations, and calculate fines. By the time you hear from a regulator, the evidence is already collected.
The websites that avoid fines aren't lucky—they're proactive. They scan themselves before regulators do.
How the Free Scanner Works
Step 1: Enter Any URL
No account needed. No credit card. Just paste a URL and click "Scan."
The scanner loads your page in a controlled browser environment and monitors everything: which cookies get set, when they're set, what scripts load, and how consent signals are configured.
Step 2: Get Instant Results
Within 30 seconds, you'll see:
Compliance Score A 0-100 rating based on detected issues:
- Cookie consent implementation
- Pre-consent violations
- Third-party tracking coverage
- Consent mode configuration
Privacy Blocker Check Did any cookies set before user consent? This is the most common GDPR violation—and the easiest for regulators to detect.
Google Consent Mode Status
Is your site configured for Consent Mode v2? Are all four signals present (ad_storage, analytics_storage, ad_user_data, ad_personalization)?
Cookie Inventory A preview of detected cookies with:
- Name and category
- First-party vs third-party
- Known provider identification
Step 3: Take Action
Based on your results:
- Green (Compliant): Your basic consent setup looks good
- Yellow (Issues): Specific problems need attention
- Red (Critical): Immediate action required to avoid enforcement risk
What the Scanner Detects
Pre-Consent Cookie Violations
The scanner records all network activity before simulating user consent. Any cookies or tracking requests that fire during this window are flagged.
Common violations detected:
- Google Analytics loading before consent
- Meta Pixel firing on page load
- Session cookies from third-party services
- Marketing cookies from ad networks
Consent Mode v2 Compliance
For sites using Google Analytics or Google Ads, the scanner verifies:
- Is
gtag('consent', 'default', {...})called before tags? - Are all four v2 parameters present?
- Do signals update correctly after consent?
Sites missing Consent Mode v2 implementation can lose 30-70% of conversion data from EU traffic.
Cookie Classification
The scanner identifies known cookies from a database of 50,000+ tracking technologies:
- Analytics platforms
- Advertising networks
- Social media integrations
- Essential/functional cookies
- Unknown/unclassified cookies
Unclassified cookies require investigation—they might be legitimate functionality or undisclosed tracking.
Real Scan Results Breakdown
Here's what a typical scan might reveal:
URL: example.com
Scan Date: 2025-01-15 14:32:00 UTC
Compliance Score: 42/100 (Critical Issues)
Privacy Blocker: ❌ FAIL
- 6 cookies set before consent
- Violating cookies: _ga, _gid, _fbp, fr, IDE, NID
Consent Mode v2: ⚠️ PARTIAL
- ad_storage: Present
- analytics_storage: Present
- ad_user_data: Missing
- ad_personalization: Missing
Cookie Summary:
- Total: 23 cookies
- Analytics: 8
- Marketing: 11
- Functional: 2
- Unclassified: 2
Third-party cookies: 18 (78%)
This site would likely face enforcement action. The pre-consent violations alone warrant investigation.
Free vs Full Report
The free scan shows:
- Overall compliance score
- Pre-consent violation status
- Consent Mode check
- Top 10 cookie preview
- High-level recommendations
The full report (requires free account) includes:
- Complete cookie inventory
- Detailed violation breakdown
- Compliance timeline tracking
- Export for documentation
- Comparison with previous scans
Common Issues and Fixes
"6 cookies before consent"
Problem: Tracking scripts load immediately on page load.
Fix: Implement script blocking until consent:
<script type="text/plain" data-olc-category="analytics">
gtag('config', 'GA-XXXXXX');
</script>
"Consent Mode v2: Partial"
Problem: Missing ad_user_data and ad_personalization parameters.
Fix: Update consent defaults:
gtag('consent', 'default', {
'ad_storage': 'denied',
'analytics_storage': 'denied',
'ad_user_data': 'denied', // Add this
'ad_personalization': 'denied' // Add this
});
"18 third-party cookies"
Problem: Many external services set cookies directly.
Fix: Audit each third-party service. Some can be:
- Blocked until consent
- Replaced with privacy-friendly alternatives
- Removed if no longer needed
Who Should Use This Tool
Website Owners
- Quick compliance check before launching changes
- Verify developer implementations
- Prepare for audits
Marketing Teams
- Understand what tracking is active
- Verify consent banner effectiveness
- Identify compliance gaps
Developers
- Debug consent implementations
- Verify script blocking
- Test before deployment
Agencies
- Audit client websites
- Document compliance status
- Propose improvement work
Legal/Compliance Teams
- Due diligence on web properties
- Evidence for compliance documentation
- Vendor audit support
Scanning Best Practices
Scan Multiple Pages
Cookies can vary by page. Scan:
- Homepage
- Key landing pages
- Checkout flows
- Blog/content pages
Test Different Consent States
- Scan with no consent (fresh visitor)
- Scan after accepting all cookies
- Scan after rejecting non-essential
Regular Monitoring
Websites change. New scripts get added. Set up weekly or monthly scanning to catch drift.
Beyond the Free Scan
If the free scanner reveals issues—or if you want ongoing monitoring—GetCookies offers:
- Scheduled automated scans: Weekly or daily monitoring
- Real-time consent analytics: See what users actually choose
- Managed cookie banner: Block violations automatically
- Compliance documentation: Exportable audit trails
But start with the free scan. Know where you stand before investing in solutions.
Scan Your Site Now
- Go to getcookies.co/scan
- Enter your URL
- Get results in 30 seconds
No signup. No sales calls. Just data about your cookie compliance—or lack of it.
The regulators are already scanning. Shouldn't you know what they'll find?