Consent check

Is your consent management set up correctly?

We open your website in a real browser and look whether cookies are set or third parties loaded before anyone agrees, whether “Reject” works and whether your privacy policy names what is actually loaded.

Address or URL

This feature needs a paid account.

Every page in three passes

We compare what a page loads before anyone decides, after a rejection and after full consent.

UntouchedEvery page in a fresh browser, the banner left alone. What loads now loads without consent.
RejectedOn the first page with a banner we click “Reject” and load all pages after it. What still tracks then ignores the rejection.
AcceptedThe same with “Accept all”. That is the baseline: it shows which services your website uses at all.

We check different kinds of pages rather than many alike: start page, privacy policy, imprint, contact and one page per section, such as /blog/* or /products/*.

With a Pro or Team account

A consent check loads every page three times in a browser and checks that the consent management solution is set up correctly.

Pro10 consent checks a month, up to 20 pages each

Team20 consent checks a month for the team, up to 50 pages each

Create account See pricing

Start here

The guide to consent management

What the findings mean and how to fix them, in the same categories as the report. Or straight to a topic:

Before consent After rejecting Banner Privacy policy

What does the consent check look at?

Before consent

Does the page set tracking cookies or call analytics and advertising services before anyone agreed? Also external content such as fonts, maps and videos, and services based outside the EU.

After rejecting

Does tracking really stop after “Reject”, and does the rejection hold on the following pages?

Banner

Is there a banner, is “Reject” on the first level, are boxes ticked in advance, can imprint and privacy policy still be reached, and can the choice be changed later?

Privacy policy

Is it linked from every page, does it name the services we found, and does it still list services that no longer load?

The consent check is not legal advice. It shows technical observations to discuss with your data protection adviser; whether something is allowed depends on the case.

What a browser can't see

Server-side tagging stays invisible: what your server itself sends to third parties does not show in the browser.
Many banners only show to visitors from the EU, so we check from a server in the EU.