Website Cookie Checker — Privacy & Security Audit
A free online cookie scanner that analyzes any website for HTTP cookies, third-party trackers, and privacy risks. Get a detailed breakdown by category, security audit of cookie flags, GDPR/CCPA compliance indicators, and an overall privacy risk score — all in a beautiful visual report.
Audit cookies, trackers, and privacy compliance on any website
Scans are processed server-side and cached for 1 hour. We do not store cookie values or page content.
Features
How to Use the Cookie Checker
- Enter a URL. Type or paste any website address into the search bar. You can enter just the domain (e.g., example.com) or a full URL.
- Click "Scan Cookies". The tool connects to the website, loads the page, and extracts all HTTP cookies and response headers.
- Review the results. Explore the privacy risk score, category breakdown, tracker detection, security audit, and detailed cookie table.
- Export the report. Download the full analysis as JSON or CSV for compliance documentation or further review.
Frequently Asked Questions
What cookies does the scanner detect?
The scanner detects all cookies sent via HTTP Set-Cookie headers, including first-party and third-party cookies from redirects. Cookies created exclusively by JavaScript after page load are not detected as the scan is server-side.
How is the privacy risk score calculated?
The score (0–100) combines several factors: number and type of tracking/marketing cookies, third-party cookie ratio, missing security flags (Secure, HttpOnly, SameSite), cookie expiry durations, number of tracker scripts, fingerprinting detection, and consent banner presence.
Is this tool GDPR compliant to use?
Yes. The tool sends a standard HTTP request to the target website, similar to a regular browser visit. Cookie values are masked and never stored. Results are cached for 1 hour and contain no personal data.
How often should I scan my website?
We recommend scanning after any major update, adding new third-party services, or at least quarterly. Cookie profiles change as third-party scripts update their behavior.
What does "Unknown" category mean?
Cookies classified as "Unknown" are not in our database of 300+ known cookies and could not be categorized by name or domain heuristics. Review these manually to ensure they are documented in your cookie policy.
Can I scan password-protected pages?
No. The scanner sends unauthenticated requests. It scans the publicly accessible version of the page, which is what most visitors see before logging in.
We can — and it's free! Just send us a quick message with your idea. If you'd like to discuss it in detail, leave your email and we'll get back to you. You can stay anonymous.
