Free automated website check
An automated GDPR compliance check is a repeatable technical scan of a public website for consent controls, pre-consent trackers, cookies, policy links, and Google Consent Mode signals. Run it free with no signup, then use the prioritized findings to investigate and retest issues.
Technical checks only, not legal advice.
Need a broader website GDPR compliance check? Use the online GDPR validator to review cookie consent, tracker behavior, policy links, and consent evidence in one flow.
Enter a publicly accessible URL to run a clean-session browser scan without creating an account. The automated check observes the page as a first-time visitor, records technical privacy signals, and returns prioritized findings that can be confirmed, fixed, and retested.
Check for a consent banner and visible choices, cookies and tracker technologies, requests that appear before consent, privacy and cookie policy links, and common Google Consent Mode defaults or ordering signals on the scanned page.
Use the report to investigate script order, consent gating, missing policy links, tracker categorization, or Consent Mode configuration. Fix the implementation, rerun the same URL, and compare the observable result.
The checker opens a public URL in a clean browser context, records the initial page load before a visitor makes a choice, and inspects browser-observable evidence: consent controls, cookies and trackers, request timing, policy-link availability, and common Consent Mode signals. Rules convert those observations into repeatable findings. The result describes one public page at that time; it is not a legal certification or a complete audit of every page and internal process.
The scan can inspect banner presence and visible choice controls; cookies and browser storage; common analytics, advertising, session-recording, and tag-manager technologies; third-party requests made during the initial load; privacy and cookie policy links; and common Google Consent Mode indicators. The report groups detected evidence into prioritized findings instead of requiring you to interpret raw HTML and network logs alone.
Prioritize non-essential activity observed before consent, missing or unequal consent choices, and unreachable policy links. Confirm each finding manually, fix the responsible script, tag-manager rule, banner setting, or page link, and rerun the check. Test representative product, checkout, landing, account, and content templates separately because one URL cannot represent an entire website.
The free public check is the starting point. Managed workflows can add reviewed cookie inventory, cookie declarations, consent records, dated scan history, policy consistency checks, and scheduled monitoring so teams can document changes and detect regressions after tag, plugin, theme, or application releases.
Automated checks cover the technical surface — but they cannot assess whether your stated purposes for data processing are lawful, whether your legitimate interest assessments are adequate, whether your data processing agreements with vendors are complete, or whether your data subject request workflow meets regulatory timelines. Use the technical evidence from GDPRChecker to inform those legal discussions, not replace them.
| Compliance area | Automated website check | Manual / legal review still needed |
|---|---|---|
| Consent banner | Detects observable banner and visible choice controls on the scanned page | Assesses wording, purpose granularity, design fairness, accessibility, and jurisdiction-specific requirements |
| Pre-consent tracking | Flags common analytics, marketing, and advertising activity observed during initial load | Confirms source, purpose, legal basis or exemption, and behavior after Reject, Accept, withdrawal, and repeat visits |
| Cookies and trackers | Identifies observable cookies, requests, storage, and common third-party technologies | Completes the full-site inventory, categories, purposes, retention periods, recipients, SDKs, and server-side processing |
| Privacy and cookie policies | Checks whether expected policy links are present and reachable | Reviews whether disclosures are accurate, complete, understandable, and consistent with actual processing |
| Google Consent Mode | Looks for common defaults, updates, and possible ordering signals | Uses Tag Assistant, DevTools, and configuration review to validate every consent state and Google product |
| Repeatability | Produces consistent point-in-time evidence that can be compared after a fix | Reviews changes in business purposes, vendors, contracts, systems, and internal accountability records |
| Overall compliance | Prioritizes technical signals on one public URL | Determines lawful bases, contracts, rights handling, security, retention, DPIAs, governance, and legal compliance |
Related GDPRChecker tools
GDPRChecker provides automated technical checks, templates, and operational guidance. It does not provide legal advice and does not guarantee compliance with GDPR, UK GDPR, ePrivacy, CCPA, PIPEDA, Law 25, or any other law.