Free
Cookie and tracker scanner
Επικολλήστε ένα URL: ο σαρωτής διαβάζει την πρώτη απόκριση HTTP και επισημαίνει cookies και ιχνηλάτες που υπάρχουν ήδη πριν από οποιοδήποτε κλικ.
Paste the address of a public page. StackLégal requests it once, with no consent cookie, and reads the Set-Cookie headers plus the HTML: scripts, iframes and pixels, matched against a list of known trackers.
A static scan does not see a script injected later by JavaScript, or what happens after a click on Accept. A custom measurement domain (a proxy) is not in the list. The consent notes follow public CNIL guidance. This is not a CNIL decision about this site, and it is not legal advice.
The scanned address and the IP address are not stored. The IP is used only for an in-memory cap, as a hash, for the length of the window. Parameters that look like an email or a secret are removed before the request. A result page is not indexed.
Why trust this scan
- It is a static read: one HTTP request, then the HTML and Set-Cookie headers of the first response. The page’s JavaScript is not executed.
- The requested address and the IP address are not stored. The IP is used only for an in-memory cap, as a hash, for the length of the window.
- A tracker is reported only when it is in the scanner catalog: known hosts and patterns, the same list for everyone.
- Grades A to E follow the bands listed on this page, with the points for each signal.
How the score is calculated
Start at zero. Each signal on the first load adds points. The letter follows the total.
- A — 0 points
- B — 1 to 2 points
- C — 3 to 5 points
- D — 6 to 10 points
- E — 11 points or more
- Advertising or session replay, active script: 3 points.
- Analytics, tag manager, product analytics, chat, or an active third-party video: 2 points.
- Remote font, delayed video, or a tool whose consent depends on configuration: 1 point.
- Cookieless measurement (default Plausible): 0 points.
- Advertising cookie in Set-Cookie: 3 points.
- Analytics cookie in Set-Cookie: 2 points.
- Unrecognised persistent cookie: 1 point, capped.
- Consent-based items, and no known banner: +2 points.
- Known banner, but those items still ship with the HTML: +1 point.
Συχνές ερωτήσεις
Τι διαβάζει ο σαρωτής;
Ένα αίτημα HTTP, έπειτα το HTML και τις κεφαλίδες Set-Cookie της πρώτης απόκρισης. Η JavaScript της σελίδας δεν εκτελείται.
Κενή σάρωση σημαίνει ότι ο ιστότοπος συμμορφώνεται;
Όχι. Μια ήσυχη πρώτη απόκριση δεν καλύπτει ετικέτες μετά το κλικ, το banner ή την απόδειξη συγκατάθεσης.
Το αποτέλεσμα είναι νομικός έλεγχος;
Όχι. Είναι τεχνική ένδειξη για ό,τι υπάρχει ήδη πριν από τη συγκατάθεση. Την κατάταξη των cookies την κάνετε εσείς.
Name these tools in your documents
The scanner flags trackers. The pack drafts the legal notice, privacy policy, DPA and sub-processor list for the tools you tick. The templates need a human read. This is not legal advice.