Does your site track visitors before they consent?

We load your homepage in a real browser, click nothing, and list every cookie, storage key and outside domain it reached before anyone could say yes or no.

Free · No sign-up · Results in under a minute · Every report gets a public page you can share

What the report shows

Only what happened before consent. That is the moment the ePrivacy rules care about, and the one a site owner rarely sees, because their own browser said yes months ago.

Cookies

Every cookie set on page load, who set it and how long it lives. Values are never stored.

Outside domains

Each domain the page called. Every one of them received the visitor's IP address.

Browser storage

Keys written to localStorage and sessionStorage, where trackers keep IDs that never show up as cookies.

Consent banner

Whether a banner from a known consent provider loaded, and what ran before anyone answered it.

How a scan works

The report states what was observed, with the date. It never calls a site illegal, because a scan cannot see a site's legal basis, only its behaviour.

  1. 1

    A fresh browser in Germany

    Chromium with an empty profile, from our servers in Germany, so the site shows its EU behaviour.

  2. 2

    No clicks, no consent

    The homepage loads, the network settles, the page scrolls once. Nothing is accepted or declined.

  3. 3

    A public report

    Cookies, domains and storage go on a page at galytics.net/scan/your-domain that anyone can check.