DO YOU KNOW WHAT YOUR WEBSITE IS TRACKING?

Start scan

How it works

Patented deep-scanning technology detects all of the first- and third-party cookies and trackers and third-party requests active on your site. Then it checks them against Canadian, U.S., EU, and other global privacy regulations to identify potential privacy compliance risks.

After you enter your website address the tool scans it and detects all cookies and trackers in use.

The tool categorizes the cookies based on their purpose, provider, and data collection.

Done! Privacy compliance risk is evaluated and the detailed report is generated and emailed to you.

Start scan
  • Instant scan and report: A comprehensive audit report generated and emailed in under two minutes.
  • Detailed cookie and tracker data: Every detected cookie and tracker identified by purpose, provider, and data type.
  • Automatic categorization: Cookies and trackers classified into necessary, functional, analytics, performance, and advertising categories.
  • Regulatory mapping: Results checked against major Canadian, U.S., EU, and global privacy regulations to flag privacy risks.
  • No installation required: Runs entirely in the browser. No code, no setup, no technical expertise needed.
  • Know exactly what your site collects: Stop guessing what's running on your website and see the full picture in minutes.
  • Understand your compliance risk: See where your site may have gaps in privacy compliance with global laws, or litigation risks, before regulators and plaintiffs do.
  • Build a foundation for consent: Know what cookies and trackers need consent, the first step in protecting your growing business and giving visitors control over their data.
  • Strengthen visitor trust: Demonstrate that you take visitors’ data privacy seriously with active control over your data practices.
  • Actionable insights: The audit report gives you a clear starting point: what to address, what to keep, and what to discuss with your legal or dev team.
Various illustrations of dashboards and graphics

Frequently asked questions

Checking cookies on a website is essential to help meet the varying requirements of data privacy laws around the world, including those in Canada (PIPEDA, Quebec Law 25), the U.S., EU, UK, and many others.

Yes. Under PIPEDA, organizations must obtain meaningful consent before collecting personal information through cookies and trackers. Québec's Law 25 goes further, requiring prior, express consent for non-essential cookies and mandating that websites publish a privacy policy disclosing their data collection practices. 

Running a cookie scan is the first step to understanding what your website collects and whether your current consent setup meets these requirements.

Cookiebot CMP’s cookie checker offers advanced scanning capabilities, automatic categorization, and helps meet the requirements of global data privacy regulations with Cookiebot Consent Management Platform (CMP). The cookie audit report provides a comprehensive foundation for cookie transparency and control.

 

The Cookiebot CMP’s cookie scanner will find the following types of cookies and tracking technologies:

  • HTTP/JavaScript (Important note: the scanner will also find dynamic cookies being set during a user's interaction with the website and not just static cookies set when the site is launched)
  • HTML5 local storage
  • Flash local shared object
  • Silverlight Isolated Storage
  • IndexedDB
  • Pixel tags
  • Ultrasound beacons

Cookie consent requirements vary by jurisdiction, but most major privacy laws share a common set of obligations for websites that use cookies and tracking technologies.

For example, in Canada, PIPEDA requires organizations to obtain meaningful consent before collecting personal information through cookies, and to explain clearly what data is being collected and why. Quebec's Law 25 goes further, requiring prior, express consent for non-essential cookies and separate consent for each purpose.

In the EU, the GDPR requires that consent be freely given, specific, informed, and unambiguous. Visitors must take an active action to consent — pre-ticked boxes do not qualify — and must be able to withdraw consent as easily as they gave it.

In the United States, requirements vary by state. California's CCPA and CPRA give consumers the right to opt out of the sale or sharing of their personal information, including data collected through cookies. Other U.S. state laws follow similar opt-out frameworks.

Across jurisdictions, websites are generally expected to:

  • Disclose which cookies and trackers are in use, their purpose, and who operates them
  • Obtain visitor consent before activating non-essential cookies, where required
  • Enable visitors to withdraw or change their consent at any time
  • Maintain records of consent for audit purposes

Cookiebot CMP helps websites work toward meeting these requirements by automating cookie scanning, consent collection, and banner management across multiple regulatory frameworks.

To assess whether your website's use of cookies and trackers aligns with the requirements of PIPEDA and Quebec Law 25, use a cookie and website tracker scanner like Cookiebot CMP's cookie scanner for detailed cookie checks.

Best practices recommend obtaining valid, informed consent from website visitors before allowing non-essential cookies to fire.

Use the free cookie checker tool by Cookiebot™. Enter your website's URL, and it will scan and generate a detailed cookie audit report. Then, obtain visitor consent for non-essential cookies and trackers in use, in line with the requirements of applicable data privacy laws.

To help meet the cookie use requirements of applicable regulations, use Cookiebot Consent Management Platform (CMP) or Cookiebot's WordPress plugin.

  1. Install the Cookiebot CMP or plugin: Set up Cookiebot CMP on your website or install via plugin, e.g., for WordPress, Shopify, or Wix.
  2. Configure settings: Customize your consent banner to match your site design, and your cookie policy to notify visitors about your website's use of cookies.
  3. Obtain consent: Display the consent banner to website visitors and obtain their consent before any cookies are activated.
  4. Manage consents: Keep track of visitor consents and provide an easy way for visitors to change their preferences.