What does the cookie & tracker checker do?

It scans a web page's code for known tracking scripts — Google Analytics, Google Tag Manager, the Meta (Facebook) Pixel, LinkedIn Insight, Hotjar and others — and checks whether a consent platform (a cookie banner) is present. It then flags the common problem: trackers loading on a site with no consent banner.

Why does it matter if trackers load without consent?

Under UK GDPR and PECR, non-essential cookies and trackers (analytics, advertising, session recording) must not run until the visitor has actively agreed. If they fire the moment someone lands on your site, you're processing personal data without a lawful basis — which is exactly what the ICO has started enforcing against.

Is this a full compliance audit?

No — it's a quick first look. It reads the page's code, so it reliably spots trackers and consent tools that are embedded directly, but it can't see trackers a tag manager injects at runtime, and it can't prove whether they fired before consent. A proper audit loads your site in a real browser and watches exactly what's set before anyone clicks 'accept' — we're happy to run that for you.

I have a cookie banner — am I definitely fine?

Not necessarily. A lot of banners are installed but mis-configured, so they show a notice while the trackers fire underneath regardless. Having a consent tool is the right start, but it only counts if it actually blocks non-essential cookies until consent is given. That's the bit worth verifying.

Free tool

Cookie & tracker checker.

Most websites quietly load analytics and advertising trackers the moment you arrive — before anyone agrees to anything. Under UK GDPR and PECR that's not allowed. Scan any site to see what it's running and whether a consent banner is in place.

Scan a website

See which trackers a site loads — and whether consent is asked.

We read the page's code for the tracking scripts and consent tools it embeds. If trackers are present with no consent banner, that's a likely compliance gap worth closing.

This reads the page’s public code for known trackers and consent tools. It can’t see trackers a tag manager injects at runtime, or confirm what fires before consent — for that we run a full audit in a real browser.

Why it matters

Consent isn't a banner — it's blocking trackers until you agree.

The rule (UK GDPR & PECR)

Non-essential cookies and trackers — analytics, advertising, session recording — must not run until the visitor actively agrees. Pre-ticked boxes and "by using this site you accept" banners don't count.

The common mistake

A banner gets installed, but the trackers still fire on page load underneath it. The notice is for show; the data's already gone. A banner only protects you if it actually blocks the trackers first.

Why regulated firms care

For solicitors, accountants and other regulated businesses, a visible data-protection slip undermines client trust — and the ICO has begun actively enforcing consent rules on analytics and advertising cookies.

Common questions

Cookies & consent, explained.

Start here

Let's talk.
We'll be straight.

Tell us a bit about your business and what's on your mind. We'll have a straight conversation about your IT — what you've got, what we'd do differently, and whether we're the right fit for each other.

A human picks up on the first call
No pitch deck — just a proper conversation
We'll tell you honestly if we're not the right fit