Cookie & Tracker Scanner
See which cookies, trackers and third-party services a page loads, and whether a consent tool is used.
About the Cookie & Tracker Scanner
Privacy laws such as the GDPR and the UK’s PECR require consent before a website sets analytics or advertising cookies, and regulators increasingly fine sites that load trackers straight away. But many site owners do not know which scripts their themes, plugins and tag managers add.
This scanner reads a page and lists the trackers it loads – Google Analytics, Google Tag Manager, Google Ads, the Meta Pixel, Hotjar, Microsoft Clarity, TikTok, LinkedIn and dozens more – along with the cookies the server sets (with their purpose, expiry and security flags), every third-party domain the page contacts, and whether a consent tool such as Cookiebot, OneTrust or CookieYes and Google Consent Mode are in place. It flags trackers that appear without any consent tool. It reads the HTML, so open the site in a private window too to see cookies created later by JavaScript.
Frequently asked questions
Do I need a cookie banner?
In the EU and UK you need consent for cookies and trackers that are not strictly necessary, such as analytics and advertising. Purely functional cookies (login, basket, language) do not need consent.
What is Google Consent Mode?
A way for Google tags to adjust their behaviour to the visitor’s consent choice. Google requires Consent Mode v2 for measuring ads for visitors in the European Economic Area.
Why are some cookies missing from the scan?
Many cookies are created by JavaScript after the page loads, or only after consent. This scan sees the HTML and the cookies the server sets on the first visit.