Free CCPA / CPRA Compliance Scanner

The scanner checks your public pages for advertising and sharing tags, cookies, scripts, and third-party technologies that may load before a visitor can opt out. It identifies potential CCPA / CPRA compliance gaps, maps findings to relevant obligations, and marks them as pass, fail, or needs review. The scan is designed to help you identify and prioritize technical issues that may require attention.

Yes. The CCPA / CPRA scanner is free and does not require an account or credit card. Enter your website address and email to scan publicly accessible pages. Your full report includes scan findings, a risk score, and prioritized remediation guidance and is delivered as a PDF by email.

CCPA generally gives consumers the right to opt out of the sale or sharing of their personal information. Depending on your business and applicable requirements, your website may need a clear way for visitors to exercise this right, such as a "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" link. The scanner can help identify whether relevant opt-out elements are present on the public pages it checks.

Where applicable, businesses must honor valid Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information. The scanner can identify advertising and sharing technologies that load before or around the opt-out flow, but automated scanning may not be able to fully verify server-side or first-party GPC handling. Findings that require additional verification are marked as needs review. Learn how ConsentX can help implement GPC support.

Advertising and cross-site tracking technologies can create greater CCPA / CPRA compliance concerns because they may transmit information to advertising or other third-party platforms. Examples can include advertising pixels, retargeting scripts, and other sharing technologies. The scanner identifies tags and technologies that execute on your website and highlights those that may load before a visitor can exercise an applicable opt-out. Review the findings and prioritize unnecessary advertising or sharing technologies that should be prevented from loading before the appropriate privacy signal.

The report provides a risk assessment, scan findings, compliance gaps, and prioritized remediation guidance based on the technical issues identified during the scan. It is not a legal audit or legal advice and cannot guarantee complete CCPA / CPRA compliance. Use the report as a technical compliance triage tool to identify issues that may need further review and remediation.