Free GDPR & cookie check
Scan any page for machine-detectable GDPR & ePrivacy (RODO) issues — cookie consent, trackers, Google Fonts, privacy policy, HTTPS and more. No signup, results in seconds.
A GDPR check across four key areas
Enter any URL and we run deterministic privacy checks — the machine-verifiable parts of GDPR and ePrivacy — then score them and explain how to fix each issue. We also flag, honestly, what still needs a legal review. This is a best-effort indicator, not legal advice.
🍪 Cookie consent
Whether a consent banner is present, if tracking cookies are set before consent, and if analytics runs without a consent signal.
📄 Transparency
Links to a privacy policy, cookie policy and terms, plus a reachable data-controller contact.
🔒 Data security
HTTPS, secure form submission, mixed (insecure) content and the HSTS security header.
📡 Trackers & sharing
Google Fonts loaded from Google, the Meta Pixel, third-party trackers, YouTube and Google Maps embeds.
Three steps to a clearer picture
1. Enter your URL
Paste the address of the page you want to check and run the scan.
2. We analyse it
We fetch the page, its headers and cookies and run 16 deterministic GDPR / ePrivacy checks.
3. Read your report
Get a compliance score, per-area results, fixes, and what still needs a manual legal review.
Where cookie compliance usually breaks
In our experience the banner is rarely the problem. The problem is what happens before anyone clicks it: an analytics tag that fires on load, a Meta Pixel added by a plugin, fonts fetched from Google, or a YouTube embed that sets cookies the moment the page opens.
This scan loads the page the way a first-time visitor would and reports which of those are present. It is a technical check and not legal advice, so use it to find what to ask your developer to change.
The order we fix things in
- Hold back analytics, advertising pixels and other trackers until consent is given.
- Host fonts on your own server instead of loading them from Google.
- Replace YouTube and map embeds with click-to-load versions that respect consent.
- Link the privacy policy, cookie policy and a data-controller contact from every page, and serve forms over HTTPS.
Questions we get
No. It is an automated technical check of things a script can detect. Your legal position depends on how you actually process data.
When fonts load from Google, each visitor request goes to Google servers. Hosting the font files yourself avoids that transfer.
It looks at a first visit, before any choice is made, which is exactly where most problems are.
Want a full GDPR audit?
Automated checks catch only part of GDPR. AutCode's team reviews your consent flow, cookie blocking, trackers and legal documents — and delivers a fix-by-fix remediation plan. Send us your scan for a free quote.