Can an automated tool guarantee 100% GDPR compliance?

No automated scanner can certify full legal compliance. Automated tools inspect observable browser artifacts like cookies, CMP DOM elements, and network requests. However, full GDPR/DSGVO/RGPD compliance requires organizational measures: maintaining a Record of Processing Activities (ROPA), executing Data Processing Agreements (DPAs) with vendors, conducting Data Protection Impact Assessments (DPIAs), and configuring consent databases.

What is the difference between first-party and third-party cookies?

First-party cookies belong directly to the domain of the website you are visiting (e.g. priygop.com). They are typically used for session management, login state, and cart persistence. Third-party cookies are set by external domains (e.g. google.com, facebook.com, doubleclick.net) embedded on the page, commonly used for cross-site behavioral tracking and advertising profiling.

Why is setting analytics cookies before consent problematic under EU law?

Under the ePrivacy Directive (Article 5(3)) and EDPB Guidelines 05/2020, storing or accessing non-essential data on a user's device requires prior consent. Unless analytics cookies qualify under specific national exemption criteria (such as CNIL-exempted audience measurement that does not track cross-site), they must remain inactive until the user clicks an affirmative consent button.

What is considered a Dark Pattern in cookie banners?

Dark patterns include deceptive UI designs that manipulate users into accepting cookies. Examples include omitting a direct 'Reject All' button on the first layer, hiding the reject option behind a low-contrast text link, pre-checking non-essential categories in the settings modal, or requiring multiple clicks to decline while allowing one-click acceptance.

How does the scanner protect user privacy and sensitive tokens?

The scanner operates in an isolated, temporary headless browser context that is immediately destroyed upon scan completion. All cookie values are masked as '[REDACTED_COOKIE_VALUE]', and query strings containing authorization tokens, API keys, or session identifiers are strictly redacted before reporting.

Which Consent Management Platforms (CMPs) are recognized?

The engine includes specialized detection signatures for OneTrust, Cookiebot, Usercentrics, Didomi, Klaro, Axeptio, Complianz, Tarteaucitron, and Quantcast Choice, alongside generic banner heuristic detection across English, German, and French keywords.

GDPR / DSGVO / RGPD Website Privacy Scanner

Audit cookies, third-party tracking scripts, CMP banners, and legal policy disclosures online. Inspect observable tracking signals under GDPR, German DSGVO / TDDDG, and French RGPD / CNIL regulations.

Client-Side Privacy Free Forever Mobile & PC

Technical Privacy EngineDual-Context Headless Browser

GDPR / DSGVO / RGPD Website Privacy Scanner

Analyze observable cookie behavior, third-party network transmissions, CMP banners, and policy disclosures.

Active Regulatory Framework: General Data Protection Regulation (GDPR / ePrivacy) (Regulation (EU) 2016/679 & Directive 2002/58/EC (ePrivacy))

European Union / European Economic Area

What is Automated Website Privacy & Cookie Scanning?

An automated website privacy scanner inspects a website by loading its pages inside a real headless browser sandbox. It monitors and logs observable client-side behaviors: which cookies are created in browser storage, which third-party hosts receive network requests, what consent management platforms (CMPs) are deployed, and whether non-essential tracking scripts fire before a user has actively granted consent.

Understanding European Privacy Frameworks: GDPR, DSGVO, and RGPD

While the European General Data Protection Regulation (Regulation EU 2016/679) establishes the overarching privacy benchmark across the EEA, national transpositions and regulatory authorities impose specific enforcement priorities:

GDPR (European Union): Governs the processing of personal data (Article 6 legal bases, Article 7 conditions for consent, Article 13 transparency). Paired with the ePrivacy Directive (2002/58/EC), it requires prior informed consent for non-essential local storage and cookie placement.
DSGVO & TDDDG (Germany): Under § 25 of the Telecommunications-Telemedia Data Protection Act (TDDDG, formerly TTDSG), storing information in user equipment requires explicit, freely given consent unless technically indispensable. German courts and Data Protection Conferences (DSK) strictly penalize unauthorized US font downloads and asymmetrical banner layouts.
RGPD & CNIL (France): The Commission Nationale de l'Informatique et des Libertés (CNIL) enforces strict guidelines (Deliberations 2020-091 & 2020-092) mandating that refusing cookies must be as simple as accepting them ("Tout refuser" on the primary screen layer) and that cookies must not exceed recommended validity periods (6 to 13 months).

Dual-Context Scanning Methodology: Pre-Consent vs Post-Consent

To determine whether tracking signals are compliant with the prior-consent principle, this scanner evaluates two distinct browser contexts. Context A (Baseline) accesses the target URL in a clean, incognito session without clicking any banner buttons to observe what cookies and requests occur natively.Context B (Interaction) loads the page in a fresh session and attempts to trigger the detected consent control to observe what additional cookies and third-party trackers are activated post-consent.

Technical Scope & Regulatory Limitations

This scanner performs an automated client-side technical inspection. It cannot observe:

Backend server-to-server tracking APIs (e.g. Meta Conversions API or Google Server-Side Tag Manager).
Internal organizational data access policies, retention procedures, and security controls.
Signed Data Processing Agreements (DPAs) or Standard Contractual Clauses (SCCs) on file with vendors.
Individual consent databases or offline consent audit logs.

Therefore, this tool provides technical diagnostic assistance and does NOT constitute formal legal compliance certification.

Our Tool Features

Why developers and engineers prefer this tool for everyday development workflows.

Cross-Device Compatibility

Works seamlessly on all modern desktop, tablet, and mobile browsers including Chrome, Firefox, Safari, Edge on Windows, macOS, Linux, Android, and iOS.

Fast In-Browser Execution

Processes your data in real-time directly inside your browser. No queue wait times, no network round-trips, and zero latency.

100% Client-Side Privacy

Your code, tokens, passwords, and files are never transmitted to any external server or saved in logs. Everything runs locally in memory.

Instant File & Clipboard Input

Supports one-click sample loading, file drag-and-drop, and pasting directly from your clipboard (Ctrl + V) for effortless workflows.

Strict Standards Compliant

Built strictly according to official specifications (RFCs, W3C, ISO, and standard cryptographic algorithms) ensuring accurate output every time.

Unlimited Free Usage

No registration, no accounts, no subscriptions, and no hidden daily quotas. Use this tool as many times as you need without restrictions.

Recent Updates & Improvements

Continuously maintained and improved based on developer feedback.

Client-Side Speed & Performance UpgradeRecent Update

Optimized processing algorithms with Web Workers and native browser APIs (SubtleCrypto, Canvas 2D) for instantaneous zero-latency execution.

Clipboard Paste & Drag-and-Drop AddedFeature Added

Added instant clipboard pasting (Ctrl + V) and drag-and-drop file support to accelerate developer productivity without manual downloads.

Enhanced Mobile & Touch Device ExperienceUI/UX Update

Redesigned responsive touch controls, flexible copy buttons, and camera preview framing for mobile and tablet browsers.

How To Use GDPR / DSGVO / RGPD Privacy Scanner Online?

Follow these quick steps to get instant, accurate results in seconds.

Enter website URL and select regulatory profile

Provide the target domain and select GDPR (EU), DSGVO (Germany), or RGPD (France).

Accepts standard HTTP and HTTPS web addresses.
Choose GDPR for European Union baselines, DSGVO for German TDDDG rules, or RGPD for French CNIL criteria.
Toggle Context B consent interaction testing in advanced options if desired.

Domain Entry & Profile SelectionClient-Side

https://example.com
Profile: 🇪🇺 GDPR (EU)  |  [ Scan Privacy ]

Instant ExecutionReady

Isolated dual-context browser inspection

The engine launches headless Chromium to monitor storage and network traffic.

Context A captures pre-consent cookies, third-party network transmissions, and DOM banners.
Context B simulates consent interaction to observe tracking differences.
Detects CMP providers, button parity, and locates privacy and cookie policy links.

Browser Multi-Context ExecutionClient-Side

Phase 3 of 6: Intercepting Network Requests & Extracting Pre-Consent Cookies
Status: Context A Baseline Complete

Instant ExecutionReady

Review findings, audit checklist, and export report

Inspect categorized cookies, identify risk points, and download machine-readable data.

Review cookies filterable by category (Necessary, Analytics, Advertising).
Inspect identified risk findings with actionable remediation advice.
Use the localized manual audit checklist with your legal team or DPO.
Export full JSON reports or copy Markdown summaries for sprint planning.

Technical Findings & RemediationClient-Side

[ CRITICAL ] Pre-Consent Analytics Cookies Placed
Evidence: _ga, _gid set before user interaction
Recommendation: Gate Google Analytics tag firing behind CMP consent.

Instant ExecutionReady

Supported Formats & Syntax Examples

Common input data types and real-world representations supported by this tool.

GDPR (European Union Baseline)

Regulation (EU) 2016/679

Core European privacy baseline combined with the ePrivacy Directive (2002/58/EC). Focuses on explicit consent, transparency, and data minimization.

Example Syntax

Framework: GDPR / ePrivacy
Scope: EU / EEA Data Subjects
Priorities: Pre-consent cookie gating, valid consent criteria, DPA verification.

Standard assessment for cross-border European websites and SaaS applications.

DSGVO & TDDDG (Germany)

§ 25 TDDDG / TTDSG

Strict German telemedia legislation and Federal Data Protection rulings (DSK). Emphasizes zero pre-consent storage, equal banner prominence, and local font hosting.

Example Syntax

Framework: DSGVO & § 25 TDDDG
Jurisdiction: Germany
Key Checks: US CDN transfers, local Google Fonts, symmetrical 'Ablehnen' controls.

Mandatory standard for commercial entities operating in the German market.

RGPD & CNIL (France)

Délibérations CNIL 2020-091

French national framework enforced by the CNIL. Requires that refusing cookies be as straightforward as accepting them ('Tout refuser' on tier 1).

Example Syntax

Framework: RGPD & CNIL Guidelines
Jurisdiction: France
Strict Rules: Tier-1 'Tout refuser' button, max 13-month tracker lifetime, 6-month consent validity.

Specialized for French public organizations and private commercial websites.

Frequently Asked Questions

Related Tools

Explore all 40+ tools →

SQL Query Performance Analyzer

Analyze SQL queries for MySQL, PostgreSQL, and SQLite. Detect non-sargable functions, missing indexes, filesort risks, and inspect execution plans.

WCAG / RGAA Accessibility Checker

Scan websites for WCAG 2.2, 2.1, and RGAA accessibility compliance. Detect missing alt text, form labels, low contrast, ARIA issues, and broken landmarks.

OpenAPI & Swagger Validator

Validate OpenAPI 3.1, 3.0, and Swagger 2.0 specifications in JSON or YAML. Detect syntax errors, broken references, security warnings, and explore endpoints.

Frequently Asked Questions