ConsentProof
gdpr cookie scanner

GDPR Cookie Scanner — Free Pre-Consent Scan

ConsentProof is a cookie consent checker that scans any website with a real browser and records which cookies and third-party trackers fire before the visitor consents.

No account needed · results usually under a minute · Free public scans, rate-limited per site and per IP

A limited number of free scans run each day; if today's are used, we queue yours for tomorrow and email you.

Two captures, one difference

The scanner opens a clean browser session, loads the page, and waits for the network to settle or eight seconds, whichever comes first. Everything at that point is pre-consent: cookies, storage writes, and every third-party host contacted.

It then clicks accept, waits three seconds for tags to fire, and captures the same set again. The pre-consent list is the compliance question. The difference between the two lists tells you what the banner was actually holding back — sometimes a lot, sometimes nothing at all.

Classification without guesswork

Cookies are classified against the Open Cookie Database, a public dataset, and every entry keeps its source id so a classification can be traced rather than trusted. Anything without a match is shown as Unclassified.

First-party and third-party are distinguished on every row, because a first-party analytics cookie and a third-party advertising cookie are very different conversations with a client.

Frequently asked

What is the difference between a cookie scanner and a cookie banner?
A banner asks the visitor for a choice. A scanner tests what happened around that choice. They are complementary: keep whatever banner you already pay for, and use a scanner to prove it works.
How many pages does a free scan cover?
A public scan covers the URL you submit. Scheduled monitoring on a paid plan follows a set of pages per site, which matters because a tag is often added to one template and not the homepage.
Can it scan a staging site?
Only if the URL is reachable from the public internet without authentication. Password-protected staging and internal hostnames are not scannable, and you will get a clear scan error rather than a false pass.

Related

Try ConsentProof

Free public scan, no account needed.

Start free Pricing