Free cookie scanner & cookie audit
Does your cookie banner actually work?
Most cookie checkers only list cookie names. Our free cookie audit opens your site in a real browser, records what tracks visitors before they choose, then clicks 'Reject' to see whether tracking really stops.
What we test
Trackers firing before consent
Analytics and ad tags that load before a visitor has touched your banner.
PECR Reg. 6 · ePrivacy Art. 5(3)
'Reject all' as easy as 'Accept'
Whether rejecting is one click on the first layer, not hidden in settings.
UK/EU GDPR Art. 7(3) & 4(11)
Rejecting really stops tracking
We click 'Reject' and watch for tags that keep firing anyway.
PECR Reg. 6 · ePrivacy Art. 5(3)
Privacy policy names every third party
We compare the trackers we saw with the companies your policy lists.
UK/EU GDPR Art. 13(1)(e)
What your free report shows
Free
- Your Risk Score and risk band
- Pass or fail on each cookie test
- The law each test relates to
- Full detail and fix for 1 lower-risk issue
Paid plans
- Which exact tags and companies fired, and when
- Full detail on serious issues
- Step-by-step fixes for your consent tool
- Screenshot evidence and PDF export
Not just a list of cookies
| Halvus | Typical free checker | |
|---|---|---|
| Runs a real browser | Yes | Often reads the page source only |
| Records tracking before consent | Yes | Rarely |
| Clicks 'Reject' and re-checks | Yes | No |
| Checks your privacy policy matches | Yes | No |
| Consumer law, accessibility, security too | Yes | No |
Questions
Is the cookie scanner free?
Yes. You can scan any website once a day for free with no sign-up. Paid plans unlock full evidence, fixes and regular monitoring.
What's the difference between a cookie scanner and a cookie audit?
A basic cookie scanner lists the cookies it finds. A cookie audit also checks how they behave: whether tracking starts before consent, whether 'Reject' is as easy as 'Accept', whether rejecting actually stops tracking, and whether your privacy policy names every company involved. Halvus does all of these in one free scan.
Can cookies load before a visitor clicks 'Accept'?
Only strictly necessary ones. Under PECR Regulation 6 and the ePrivacy Directive, non-essential cookies and trackers such as Google Analytics, the Meta Pixel or Hotjar must not be set or read until the visitor has given clear consent.
What is ghost tracking?
Ghost tracking is when a visitor clicks 'Reject' on a cookie banner but analytics or advertising tags keep sending data anyway. Halvus detects it by clicking your reject option and watching network activity afterwards.
Does it test what happens before consent?
Yes. We load your site in a real browser and record every tracking request made before the visitor accepts or rejects anything.
Does it check that 'Reject' is honoured?
Yes. We click your banner's reject option and keep watching for analytics or advertising tags that still fire afterwards.
Which laws does it check against?
UK PECR and UK GDPR, the EU ePrivacy Directive and EU GDPR, and Quebec Law 25, depending on the markets you sell to.
Will it tell me my site is compliant?
No. Halvus reports the risks it finds with evidence. It is not legal advice and never certifies a website as compliant.
Halvus reports risks found, not legal advice.