Free tool · 32 checks
Free cookie and GDPR audit: do you measure right and stay compliant?
Enter your website URL and in about a minute you will know whether your cookie banner really works, what loads before visitors consent and whether Tag Manager, Google Analytics 4, the Meta Pixel and Google Ads are set up correctly.
- 32 GDPR and tracking checks
- Free, no sign-up
- Results in ~1 minute
- Real pre-consent test
- Connecting to the website
- Detecting banner, GTM, GA4 and pixels
- Checking cookies, third parties and legal texts
- Loading the site without consent with Google
- Calculating the score
Results for
Consent and cookies
Nothing is measured and no cookies are set before the visitor agrees.
Analytics and Tag Manager
GTM and GA4 are installed correctly and measure without duplicates.
Advertising pixels
Meta, Google Ads, LinkedIn, TikTok and other campaign tags.
Privacy and third parties
External services that receive data from your visitors.
Legal texts
Legal notice, privacy and cookies: that they exist and tell the truth.
Want ARTIC to set it up properly?
Our tracking team goes through this report with you and leaves measurement and consent as they should be: banner, Consent Mode, Tag Manager, GA4, pixels and conversions. You stay compliant without losing campaign data.
- Report review with someone from the team
- Plan prioritised by legal risk and data loss
- No-obligation quote
What this audit cannot see (and ARTIC does)
From outside we see what the site loads and shows. Knowing whether measurement is reliable requires access to the accounts.
What happens on accept or reject
We test the banner both ways and check what fires in each case.
GTM configuration inside
Tags, triggers, variables and Consent Mode set up within the container.
Google Ads and Meta conversions
Each lead reaching each platform once, with its value (and via conversions API).
GA4 data quality
Key events, internal traffic filters, domains and correctly attributed channels.
Consent records
Proof of every consent given, as GDPR requires.
Every page
This audit looks at the URL you enter; forms, cart and thank-you pages may carry their own tags.
Why it matters: fines and lost data
EU ePrivacy rules and data protection authorities require prior, informed consent that can be refused as easily as given for any non-essential cookie.
On the business side, since March 2024 Google requires Consent Mode v2 to use European user data in Google Ads. Without it, audiences, remarketing and modelled conversions are lost.
A good consent setup achieves both: it complies with the law and measures everything the law allows.
What the audit checks: all 32 points
Grouped into five blocks. What loads and which cookies are set before consent is measured by loading the site with Google PageSpeed without touching the banner; the rest by our server on the HTML, headers and legal texts.
Consent and cookies 8
- Consent management platform (cookie banner)
- Google Consent Mode v2
- Tags outside consent control
- Nothing is measured before consent
- No third-party cookies before consent
- The server sets no tracking cookies
- Server cookies are protected
- Consent can be changed
Analytics and Tag Manager 8
- Google Tag Manager
- A single GTM container
- GTM in the <head>
- GTM noscript snippet
- Server-side tagging
- Google Analytics 4
- No Universal Analytics
- GA4 not duplicated
Advertising pixels 4
- Google Ads tag
- Meta Pixel
- Meta Pixel not duplicated
- Tag inventory
Privacy and third parties 7
- Google Fonts loaded from Google
- Cookie-free YouTube videos
- Google Maps without consent
- Google reCAPTCHA
- Third-party services loaded
- Encrypted forms
- Privacy information on forms
Legal texts 5
- Privacy policy linked
- Cookie policy linked
- Legal notice or terms
- The cookie policy matches reality
- Minimum privacy policy content
Cookie and GDPR audit FAQs
What does this cookie audit check?
Whether the site has a consent tool, whether cookies are set or Google Analytics, Meta or other services load before consent, whether Google Consent Mode v2 is active, how Tag Manager, GA4, the Meta Pixel and Google Ads are installed, which third parties receive data, and whether the legal texts exist and mention the tools used.
How do you know what loads before consent?
We load the site with Google PageSpeed (Lighthouse) in a clean browser without touching the banner and see which third-party services run and which cookies are set. It is exactly what a new visitor experiences before deciding.
What is Google Consent Mode v2?
It is how Google tags adjust their behaviour to the user's consent. Since March 2024 Google requires it to use EEA user data in its advertising services.
Does this audit replace legal advice?
No. It is a technical diagnosis of what the site does. Drafting legal texts and assessing each case is a job for a legal professional.
Why does GA4 show a warning if I have it installed?
If GA4 is configured inside Google Tag Manager, from outside we only see the container. The PageSpeed test helps confirm it; a full review needs access to GTM and GA4.
What do you do with the URL I analyse?
We only use it to run the audit. We keep the result for 24 hours so the analysis is not repeated if you come back. We do not store personal data unless you fill in the form.
ARTIC partner
Francesc Beumala
Founder, partner and CEO of ARTIC
Who is behind ARTIC
“An industrial company does not need more noise: it needs the right buyer to find it on Google and in AI, and a system that turns those visits into real opportunities.”
Francesc Beumala is the founder, partner and CEO of ARTIC, a B2B digital marketing agency specialised in industrial companies. A computer engineer, he has spent more than 15 years helping companies grow online: he was a senior developer and project manager at Gestinet and a digital marketing consultant and lead developer of Editions Lefebvre Sarrut’s European Magento stores. He leads the business and the agency’s technology area, with a focus on artificial intelligence applied to business, and designs SEO, SEO for AI, Paid Media and automation strategies for manufacturers, engineering firms and service companies. He hosts Negociem, an entrepreneurship podcast featuring founders and business leaders.
With the rest of the team
Other free audits
- Free GEO auditFree 100-point GEO and SEO audit: find out whether Google, ChatGPT, Claude, Gemini and Perplexity can read, understand and cite your website. Results in a minute, no sign-up.
- Free accessibility auditFree 50-point web accessibility audit: WCAG 2.2 AA and the European Accessibility Act. Find out what stops people with disabilities from using your site. Results in a minute, no sign-up.
- Free website maintenance auditFree 26-point audit: is your website up to date? Outdated WordPress, plugins, PHP and libraries, certificate, security headers, email SPF and DMARC, and signs of neglect. No sign-up.
- Free Google Business Profile auditFree 22-point audit of your Google Business Profile: category, hours, photos, reviews, consistency with your website and comparison with nearby competitors. No sign-up.
- Free complete website auditFree 185-point complete website audit: SEO and GEO, accessibility (WCAG 2.2), cookies and GDPR, and maintenance and security. One report with a score for each area. No sign-up.
- Free competitor comparisonFree website comparison: we analyse your site and up to three competitors across 185 checks of SEO, AI visibility, accessibility, cookies and GDPR, and maintenance. See where they beat you. No sign-up.