Is your site GDPR compliant?

It loads your public pages in a real browser, lists the cookies and trackers that fire before a visitor consents, and maps each finding to a GDPR obligation, prior consent, equal reject, provable records, withdrawal and data-subject rights, as pass, fail or needs review.

Yes. It is free and needs no account. We scan public pages only, and the full report (with PDF) is emailed to you.

No tool can. The scan definitively flags trackers and cookies firing before consent (the most common violation) and surfaces the remaining obligations for a human to verify. Treat the result as a prioritized starting point, not legal advice.

It fetches your homepage and key policy pages and inspects security headers, cookies set before consent, the consent management platform (CMP) in use, third-party domains, advertising and analytics tags, and whether your privacy and cookie policies are linked, then maps it all to GDPR obligations with evidence.

Yes. It fetches your linked privacy and cookie policy pages and checks whether the text mentions items like data retention, lawful basis, consent withdrawal and data-subject rights. It reads public pages only and is indicative triage, not a legal audit.

Yes. Non-essential cookies and trackers need freely given, specific, informed prior consent before they run.

No. Refusing must be as easy as accepting, and non-essential categories must not be pre-selected.

ConsentX stores a tamper-evident receipt with the policy version and hash for each consent, exportable on demand.