GDPR Cookie Consent Checker (Free, No Signup)
ConsentProof is a cookie consent checker that scans any website with a real browser and records which cookies and third-party trackers fire before the visitor consents.
What the GDPR actually requires here
For cookies, the operative rule in the EU is the ePrivacy Directive as implemented locally, with the GDPR supplying the standard of consent: freely given, specific, informed and unambiguous, expressed by a clear affirmative action, and obtained before storage or access happens. Prior is the load-bearing word.
That is why the interesting part of a scan is the pre-consent window rather than the total cookie count. A site can set fifty cookies and be fine if every non-essential one waits for a choice; a site can set three and be non-compliant if one of them is an advertising pixel that fired on load.
Evidence a data protection officer can use
Every scan produces an absolute UTC timestamp, a SHA-256 over the captured evidence, screenshots before and after consent, and the full list of third-party requests. That combination is what turns 'we think it is fine' into a record with a date on it.
Regulators have been active on exactly this point. The French CNIL fined Google €325M in September 2025 over cookie and advertising practices, and fined SHEIN €150M in a case that included cookies still being set after a visitor clicked reject all.
Frequently asked
- Is a cookie banner enough to be GDPR compliant?
- No. The banner is the mechanism for collecting a choice; compliance depends on whether non-essential cookies and trackers actually wait for that choice. A scan is how you tell the two apart.
- Does this checker make my site GDPR compliant?
- No, and nobody's tool does. It is a test that produces evidence about one specific requirement — prior consent for non-essential storage and access. Compliance is broader, and it is a legal judgement, not a scanner output.
- Do I need an account to run a GDPR cookie consent check?
- No. Public scans need no account, no email and no card. Accounts exist for monitoring several sites on a schedule, not for running a single check.
Related
Try ConsentProof
Free public scan, no account needed.