Is your cookie banner actually compliant? Check it free — right here.
Regulators fined Google €325M and SHEIN €150M over consent failures. Most sites make at least one of the same three mistakes. Paste your URL and find out in seconds — no sign-up, works on every platform.
Try:
Compliance score
–%
What this free check looks at
The scan reads the live page's HTML and response headers. It looks for these static consent and security markers:
| Static signal | Why it matters |
|---|---|
| Tracker and consent markers | Known analytics or ad scripts are compared with consent-platform markers in the served HTML. This does not observe runtime request order. |
| Consent Mode v2 markers | Google expects Consent Mode v2 signals for EEA ad personalisation. Source markers alone do not prove correct runtime behaviour. |
| Reject-option markup | The scanner can find reject text or buttons, but it cannot verify what happens after a visitor clicks them. |
| HTTPS & security headers | These are observable transport and response-header signals for GDPR Art. 32 and NIS2 risk-management reviews. |
| Privacy policy link | A visible link supports the GDPR requirement for notice at data collection; legal adequacy still needs human review. |
Important: this free check does not run a browser, watch network requests, test consent choices or audit rendered UI behaviour.
Fair warning: a passing banner today doesn't stay passing. Scripts get added by marketing, CMP settings drift, tag managers change. Run the free scanner again after changes; hosted daily monitoring and pass-to-fail alerts are planned, not included in Pro.
The three mistakes that cost real companies millions
- Cookies fire before the click. Open your own site in an incognito window with dev tools open — if network requests to analytics or ad domains appear before you touch the banner, you have tracking before consent.
- "Reject all" is harder than "Accept". Equal prominence, equal number of clicks, first layer of the banner. Anything else is a dark pattern under the standard set by the CNIL's Meta and Google decisions.
- Rejecting changes nothing. Click Reject all, reload, and watch whether the same cookies still fire. Misconfigured tag managers make this one of the most common audit findings.
Want the full enforcement history? See the GDPR cookie fines tracker, or the complete EU cookie consent guide for 2026.