Frequently Asked Questions

GDPR Scanner analyzes your website for tracking scripts, cookies, and third-party requests that load before a user gives consent. We detect analytics tools (Google Analytics, Meta Pixel), advertising trackers, session recording tools, and fingerprinting scripts that may violate GDPR requirements.

We visit your website using a real browser, without clicking any cookie consent banner. This simulates a first-time visitor who hasn't interacted with your consent banner yet. We then capture all network requests, cookies set, and scripts executed, showing you exactly what data is collected before consent.

Website trackers are invisible scripts or technologies on websites that collect data about your online activities, like pages visited, clicks, and time spent, to build user profiles for purposes like personalized ads, analytics, or improving site features, using methods such as cookies, pixels, and browser fingerprinting to follow you across sites and devices.

We store scan results (score, detected trackers, cookies) to provide history and comparison features. We do NOT store the actual content of your pages, user data, or any sensitive information.

Thousands, including Google Analytics, Google Tag Manager, Meta Pixel (Facebook), TikTok Pixel, LinkedIn Insight Tag, Hotjar, FullStory, Mixpanel, HubSpot, and many more. Our database is continuously updated as new trackers emerge and are classified.

Your score starts at 100 and decreases based on detected violations. Each tracker category has a penalty score based on severity of the GDPR violation. We use service-based deduplication (multiple requests from the same service count once).

Our scoring is based on objective detection of pre-consent tracking. If you believe a detection is incorrect (e.g., a script that's actually consent-gated), contact us with details. We continuously improve our detection logic and appreciate feedback.

Any website that collects, processes, or stores personal data from individuals in the European Union (EU) must be GDPR compliant, regardless of the website's physical location, size, or whether it has an EU presence.

Yes! While GDPR is EU legislation, many countries have similar privacy laws (CCPA in California, LGPD in Brazil, POPIA in South Africa). Our scanner works for any website worldwide and the privacy best practices we check are universally applicable.

The key is ensuring your Consent Management Platform (CMP) actually blocks scripts until consent is given, not just displays a banner.

Without an account you get 3 scans a day, and a free account gives you 10, both with your full Privacy Score and top 3 issues shown. PRO unlocks 100 full scans a day, full scan details, downloadable PDF reports, and detailed breakdowns of every tracker and cookie detected.

Sites scoring 100/100 can display our "GDPR Compliant" trust badge. This badge is verified in real-time: if your score drops, the badge reflects this. Trust badges have been shown to increase checkout conversion by 5-15% as customers feel more confident.