last round today 00:16 UTC 1697 live 6 in the graveyard next round in —
TrueTier
Trust & security · free tool · no signup

Cookie & tracker check

Loads the page like a first-time visitor who has clicked nothing, and lists every tracker script and every cookie that is already there. Under EU ePrivacy rules that is exactly what needs consent first.

20 of 20 free runs left this hour. Used them up? An extra run is $1.49 and works for every tool here, no account needed.

How it works

  1. We request the page once, with no cookies and nothing clicked — the state of a brand-new visitor.
  2. The HTML is searched for known tracker snippets and third-party scripts; the response headers for Set-Cookie.
  3. We look for a consent banner or a consent-management script, and check whether the trackers are wired to wait for it.
  4. Each finding says what it is and what to do — usually "load this only after consent".

Questions people ask

Why does loading a tracker before consent matter?

The ePrivacy rules (implemented in every EU country) require consent before non-essential cookies or trackers are set. Analytics and advertising pixels are the textbook examples, and data-protection authorities have fined sites for exactly this.

Is a cookie banner enough?

Only if the trackers actually wait for the click. Many sites show a banner while Google Analytics has already fired — the banner is decoration. This tool sees the page the way the crawler does, before any click.

Which cookies are fine without consent?

Strictly necessary ones: the session cookie, a CSRF token, a cart, the cookie that remembers the consent choice itself. Analytics, advertising and most chat widgets are not.

The tool found a tracker but I use a consent tool. Why?

Some setups load the tracker script and only block the data hit; others load it in "consent mode". We can only see what the HTML loads; if your consent tool holds the script back until consent, the snippet is usually not in the initial HTML at all.

Can it see cookies set by JavaScript?

No — we read the HTTP response, not a running browser. Cookies set by scripts after load are not visible here, but the scripts that set them are, and those are what we report.

Free, no signup. Runs on our servers, nothing is installed. Want all of it at once? The full site check runs 30+ tests in one go.