Cookie Scanner

How the check works

Three visitors arrive at your website at the same time. One never touches the cookie banner, one clicks Accept, one clicks Reject — and we write down what each of them sends out.

Check your website

We arrive like a real visitor. A real browser opens your homepage, then one more page.

Before anyone clicks

Google Ads and Meta already get the visit. That's a leak.

  • Google Analytics:cookie-free signal
  • Google Ads:sent before a choice
  • Meta Pixel:sent before a choice

What does this cookie scanner check?

A list of cookies from one visit can't tell you what happens when someone says no. So we look at six things.

  • Your cookie banner

    Whether it shows on the first visit, and whether our visitor could press “Accept” and “Reject”.

  • Before anyone clicks

    Whether Google, Meta and other companies already get the visit — and which tracking cookies are already stored.

  • After “Accept”

    Whether Google hears the visitor's “yes” — on the first page and on the next one.

  • After “Reject”

    Whether tracking really stops. If it doesn't: which companies still get data, and which cookies still land.

  • It also checks whether your analytics and ads count correctly, and whether Google and visitors can reach your site.

Your report is ready

Every problem in one sentence — and for the most common cookie tools, where to fix it.

Real checkExample report · anonymised

17 October 2026 at 17:00 · 3 visits · 2 pages each · took 38 seconds

Serious problems

Microsoft Ads, TikTok pixel, Google Ads and Google Analytics send data before the visitor makes any cookie choice. Microsoft Clarity gets it too.

  • 4 problems
  • 0 to improve
  • 4 passed

Technical details

Where the data went in each of the three visits, and how the score is built

  • Google Analytics:cookie-free signal
  • Microsoft Ads:still sent after Reject
  • TikTok Pixel:stopped

Score 47 out of 100

Each cookie banner check is worth 1–⁠3 points. Things we couldn't check never count against you. The score summarises the checks above — it is not a verdict on the website.

We see what a visitor's browser sends — not what your server sends on its own.

A real check of a real website, run by our robot. The name stays out: we never publish reports about a named site.

How common are cookie banner problems?

More common than most people think. We checked 500 websites in October 2026:

2 in 3

of websites with a cookie banner started tracking before the visitor chose anything.

153 of 231 websites

4 in 10

of websites where we could test “Reject” kept tracking after it.

60 of 146 websites

500 Lithuanian websites, mostly ones that use tracking — so this shows what happens on sites that track, not an average of the whole web. We never name the sites.

Why do so many cookie banners fail?

Almost never on purpose. These four come up again and again:

  • The banner isn't connected to the trackers

    The banner shows up, but the tracking codes were added straight into the theme, by a plugin or in Google Tag Manager — so they never wait for it.

  • “Reject” only switches off some of them

    The cookie tool blocks the trackers it knows about. The pixel a marketing plugin or an agency added later keeps running.

  • Google never hears the answer

    Google Consent Mode isn't switched on, so Google Analytics and Google Ads don't know what the visitor chose.

  • Something changed after launch

    A new plugin, a new pixel, a theme update or a new cookie tool setting — and a banner that worked last month stops working.

Is this about the law?

We show what happens on your site. Whether it's allowed is for a lawyer to say — but here's why people check.

  • In the EU and the UK

    Websites need a visitor's consent before storing cookies or similar trackers on their device, unless they're strictly needed for the site to work. Since 2026 the UK allows a few low-risk uses, like simple visit statistics, if visitors can easily say no. Ad cookies still need consent.

  • In the US

    In California, website owners have been sued over claims that they kept tracking visitors after they clicked “Decline” — for example a proposed class action against Nvidia in October 2025.

  • For advertisers

    Google says that to keep measurement, ad personalisation and remarketing for visitors in the EU (and Norway, Iceland, Liechtenstein), you must collect their consent and pass it on to Google — Google Ads Help.

Where we check from, and how often to check again

From Vilnius, inside the EU

Our robot visits from a server in Vilnius, Lithuania. Some websites show a different cookie banner, or none at all, to visitors outside the EU — so we see what a visitor in the EU sees.

After every change

A new plugin, a new pixel, a theme update or a new cookie tool setting — that is when a working banner breaks. One website can be checked once every 3 days, so fix something today and check it again in three.

Check your website now

  • Free
  • No signup or email
  • Report under 1 minute