Disclaimer
Automated check, not legal advice.
Each result comes from one automated visit in a headless Chromium browser, run from a datacenter in Europe, or in the United States when that location is picked.
Results can differ for real visitors
- Other countries, devices, browsers, logged-in visitors and earlier choices on the same site can all change what loads.
- Ad auctions, A/B tests and tag rules change from one page load to the next.
- Some sites treat automated visits differently, or block them - when we can tell, the report says the site blocked the test.
What a result means
Findings are technical observations about what the page did during that one visit. Whether something breaches the GDPR or the ePrivacy rules depends on context that only you and your legal advisers can judge. No finding does not mean a site is compliant.
UK sites and the statistical exemption
Since 5 February 2026 the UK's PECR (amended by the Data (Use and Access) Act 2025) exempts from consent cookies used solely for statistics to improve a site, if they don't significantly affect visitors and visitors get clear information and a simple way to object. Advertising and cross-site tracking still need prior consent. For sites that look aimed at UK visitors, analytics and testing tools sending data before consent are reported as High instead of Critical, with a note that the exemption may apply; GA4 stays Critical when the test sees it sharing data with Google Ads (Google Signals, audience hits, Ads tags), and ad and social pixels are unchanged. Until the ICO publishes guidance on the exemption this applies only to analytics-class tools and is wording and severity, not a separate UK rule set.