Why the first second matters
On many websites the cookie banner shows up nicely, yet _ga, _fbp or _gcl_au are already set before anyone clicks. Google Analytics, Google Ads or the Meta Pixel simply load with the page. That exact moment, before the choice, is what a data protection authority or a critical customer looks at first.
What does this scanner check?
- Cookies from your server. We read the cookies your server sends on the first visit. This is measured, not estimated.
- Tracking tags. Google Analytics 4, Universal Analytics, Google Ads, Meta Pixel, LinkedIn, TikTok, Microsoft Ads, Pinterest, Hotjar, Clarity and HubSpot, in your source code and in your public Google Tag Manager container.
- Blocked or not. Does a tag sit directly in the page, or does your consent tool hold it back until consent?
- Consent tool and Consent Mode. Which consent tool you use and whether a Google Consent Mode default is set.
Measured and likely: the difference
This scan runs without a browser, and we say so plainly. Every result carries a label. Measured means we saw it happen ourselves. Likely means we infer it from your code: an unprotected tag in the page almost always fires in practice, but only a test in a real browser proves it. We run that browser test in a tracking audit, with a list of every request your site sends before and after the click.
What if the scanner finds a problem?
The fix usually takes three steps: move hard-coded tags into Tag Manager, pick a consent tool that really blocks tags, and set up Consent Mode properly so your measurement does not drop. Rather not do it yourself? Our tracking specialists set it up for you, without losing data.
Cookie scanner FAQ
Is this cookie scanner free?
Yes. Enter a URL and see the result straight away, no account needed. Want the report in your inbox? Leave your email address.
Why are some results marked "likely"?
The scan runs without a browser. Cookies your server sends itself, we really measure. What JavaScript tags do, we infer from your source code and your Tag Manager container. That is strong evidence, not proof: a test in a real browser confirms it.
I have a consent tool. Why do I still get a warning?
Showing a banner is not the same as blocking tags. Often Google Analytics or the Meta Pixel sits directly in the page, or a tag in Google Tag Manager fires on "All Pages" without waiting for consent. Choosing and configuring a consent tool is covered in Cookiebot vs Usercentrics vs Complianz.
What is Google Consent Mode and do I need it?
Consent Mode tells Google tags whether a visitor consented. With a default of "denied", they set no cookies until consent. For Google Ads advertisers in the EEA it is needed to keep measuring conversions. Everything about the setup: Consent Mode v2.
How do I check which cookies my website sets myself?
Open your site in a private window, click nothing and look in your browser developer tools under Application, Cookies. The step-by-step method is in how to check cookies on a website. To debug your tags, use Google Tag Assistant.
Is a cookie banner mandatory in Belgium?
For cookies that are not strictly necessary, such as analytics and advertising cookies, you need prior consent. What that means for your banner: cookie banner rules in Belgium.