GPC & consent check

Check a page

Not open yet. Real-site scanning is not switched on in our scanner yet, and the service that runs this checker is not deployed. We would rather tell you that than show you a made-up result, so this form is switched off and nothing you type here is sent anywhere. When it opens, you will be able to check one page, with no sign-up.

Check a page

Page address I own this site or am authorized to test it

Check this page

When this checker is open: the page address you type is sent to our Crawler Watch service, which asks Cloudflare Turnstile (a human check) to confirm you are a person, limits how often one network can use the checker, and hands the page to a scanner on our own hardware. By default the scan report and screenshots are deleted after 72 hours. The privacy page has the details. There is no sign-up and no tracking script on this page.

What it will do

The full check loads the page you name in a real browser four times in a row, each time in a fresh session with no memory of the last: once with the Global Privacy Control signal on, once after choosing Reject on the cookie banner, once after choosing Accept, and once after closing the banner. Each time it records which third-party requests the page made, which cookies were set, and takes screenshots. It then lists what it observed.

This free check runs the first three (Global Privacy Control on, Reject, Accept). One page only, no PDF report. The Apify Actor and the paid checks will add the fourth and a printable evidence report.

What you will see

• Whether third-party requests were observed before any choice, after Reject, and with Global Privacy Control on.
• Whether cookies from third-party requests were set after Reject.
• Whether Google consent defaults were set before tag activity, and what they granted.
• The screenshots the numbers came from. Look at them: a person can see what an automated browser misreads.

Each line is worded as an observation: "Observed", "Not observed" or "Not determined". It never says a site passes or fails.

What it cannot tell you

• It looks at one page, on one visit, from one place, with one browser setting. Other pages, other countries and other visits can behave differently.
• A third-party request is counted only if its host is on the vendor list named in the result. A request to a host that is not on the list is not counted.
• Global Privacy Control is a US-state opt-out signal for the sale or sharing of data. It is not consent under EU rules, and the check does not decide what any law requires.
• If a site's bot protection stops the scan, the result says so. The checker does not get around it.
• If the cookie banner cannot be operated, the result says "couldn't operate banner" and does not guess.

It only checks sites you own or are authorized to test, and you confirm that before you submit. It identifies itself honestly and respects robots.txt: see our scanner's page, which also explains how to opt a site out.