Cookie & Privacy Scanner

Scan your Website for GDPR-Leaks with our Cookie Scanner, automatically detect embedded Cookies and Services.

Scan starting…
Error
Scan Started successfuly

How many pages should be crawled and scanned

more advanced options needed?

Sign in to get the most our of your cookie scan results!

Have Questions?

Frequently asked questions

GDPR Compliance is Confusing! We can help.

Is the Cookie Manager & Cookie Scanner really free?

Yes, absolutely! You can use our Cookie Manager including the Cookie Scanner and the basic GDPR compliance features entirely free. It's the perfect starting point for small websites on their compliance journey.

What is a cookie scanner?

A cookie scanner is a tool that automatically scans your website to detect and identify all cookies and tracking technologies in use. It helps you understand what data is being collected, who sets the cookies (first- or third-party), and ensures compliance with privacy regulations like GDPR and ePrivacy.

How does a cookie scanner work?

A cookie scanner crawls your website pages, detecting and analyzing all cookies set during loading. It identifies both first-party and third-party providers, classifies each cookie by type and purpose, and compiles the results into a detailed report that helps you understand your site’s tracking behavior and compliance status.

Why should I use a cookie scanner on my website?

A cookie scanner helps you identify and document all cookies and trackers used on your website, ensuring transparency and compliance with privacy laws such as GDPR and ePrivacy. However, scanning alone is not enough you also need to implement a proper Consent Management Platform (CMP) and cookie banner to manage user consent and control cookie activation based on visitor preferences.

What’s the difference between a cookie scanner and a consent management platform (CMP)?

A cookie scanner detects and analyzes all cookies and tracking technologies on your website, providing you with a detailed overview of what’s being used. A Consent Management Platform (CMP), on the other hand, manages how cookies are loaded based on user consent. In short, the scanner finds and classifies cookies, while the CMP ensures they’re only activated according to the visitor’s choices and privacy preferences.

Can a cookie scanner automatically categorize cookies (e.g., necessary, analytics, marketing)?

Yes this is where our built-in cookie database comes into play. The scanner compares detected cookies and providers with our database to automatically identify and categorize them into groups such as necessary, analytics, or marketing. This saves you time, improves accuracy, and helps ensure your consent banner displays the correct cookie information.

Is it possible to remove or block unwanted cookies after a scan?

Yes  using our CMP (Consent Management Platform), you can easily manage, block, or remove unwanted cookies based on user consent. Our free Cookie Manager tool allows you to control which cookies and providers are loaded, ensuring that only approved cookies are activated on your website by user consent.

How accurate are cookie scanners in detecting all active cookies?

While cookie scanners are essential tools for website audits and privacy compliance, no scanner can guarantee 100% accuracy in detecting every single cookie on all websites.

Cookie scanners typically work by "crawling" your website, simulating user interactions (like scrolling and clicking) to trigger cookies, and then comparing what they find against a Cookie Database of known cookies.
A cookie scan is a crucial starting point, not a final, definitive audit. It's best used to identify the majority of your site's cookies, which you should then supplement with a manual review, especially of pages with special forms, protected user logins, and hidden pages.

Does the scanner check for cookies set by embedded third-party tools or plugins?

Yes, absolutely. This is one of the most important functions of a cookie scanner. As third-party services load, they attempt to set their own cookies. The scanner detects these cookies and includes them in its report. This is critical because many website owners are unaware of the specific cookies their installed plugins are setting.

Can I schedule regular scans or automate cookie detection?

Yes automated scanning is a core feature of our Consent Management Platform (CMP) and is essential for maintaining compliance over time.

Why is Automated Scanning Necessary?

Websites are constantly being updated with text, new features, plugins, and third-party plugins. These changes can introduce new cookies and trackers that you might not be aware of, instantly making your existing Cookie Declaration and consent banner inaccurate.

To stay compliant with laws like the GDPR and ePrivacy Directive, you must always inform users about all used cookies.

Do I need technical knowledge to use a cookie scanner?

No, not usually.

What you need to do:

  • Enter your website URL (e.g., www.yourwebsite.com).
  • Click "Scan."

We handle the complex process of crawling your site and detecting all the cookies, trackers, and scripts. The results are presented in a straightforward report, with automatic categorization and descriptions to guide you toward compliance.

While a development team might be needed to initially implement the consent banner code snippet on your website, the ongoing scanning and review of the results are simple enough for anyone to manage with a liitle bit of interest. 

Can a cookie scanner detect cookies on pages behind a login or restricted area?

No, a standard cookie scanner cannot detect cookies on pages that are protected by a login or are otherwise restricted.

This is because the scanner works by simulating a public visitor and crawling publicly accessible URLs. If a page requires authentication (like a username and password) to be viewed, the scanner cannot access that content.

 

What you need to do:

  • You will need to manually review any protected pages (e.g., user dashboards, checkout screens, admin areas) for cookies that are set after login.
  • Once identified, you must manually add these cookies to your Consent Configuration to ensure your Consent Banner and Cookie Declaration accurately cover every cookie on your site.

 

What should I do after finding new or unknown cookies on my site?

When our scanner detects a new or unknown cookie, it is a critical alert that requires immediate action to maintain compliance.

You must take the following steps:

  1. Identify and Classify: Go into our CMP dashboard and identify the new cookie. We will likely suggest a category (e.g., Marketing, Analytics, or Unclassified), but you must verify its purpose, the service that set it, and its duration.
  2. Update Your Consent Configuration: Edit your cookie declaration and consent banner to include the accurate details for the new cookie (purpose, provider, category, etc.).
  3. Set a New Revision Version: Once the changes are complete, you must set a new Revision Version in your Consent Configuration. This action signals that your cookie policy has changed.
  4. Re-prompt Users: Because the policy has changed, all existing users who previously gave consent must be prompted to opt-in to the new, changed version when they next visit your site. This ensures their consent remains informed and valid, which is key to continuous compliance.
Florian Eibisberger

Still have questions?

Can’t find the answer you’re looking for? Feel free to contact us.