Is your website really GDPR compliant?
Eight questions every GDPR audit, legal review, or CMP rollout eventually asks - answered in plain English, with evidence from real browser sessions. Here is what "compliant" actually looks like, and what it costs you if you are not.
The questions a GDPR cookie audit asks
These are the eight things visitors, regulators, and your own legal team actually want to know about your cookie banner.
What's at risk if your cookie banner gets this wrong
A non-compliant cookie banner isn't just a legal technicality - it shows up in your ad accounts, your analytics, and your inbox.
Regulator fines and formal warnings
EU data protection authorities (such as the CNIL in France, the Garante in Italy, or the ICO in the UK) actively investigate cookie banners. Cookies set without consent can lead to a formal warning or a fine of up to 4% of global annual revenue under GDPR.
Restricted Google Ads and Analytics
Since March 2024, Google has required Consent Mode v2 for any site serving ads to EU/EEA visitors. Missing or incorrect signals can limit ad personalization, remarketing audiences, and conversion tracking - even if the rest of your campaign setup is correct.
Skewed marketing data
If cookies fire before consent, or keep firing after Reject All, your analytics include visitors who never agreed to be tracked - inflating traffic numbers and distorting the conversion rates your budget decisions are based on.
Lost trust, complaints, and bad press
"Accept-only" banners and pre-ticked boxes are exactly the kind of dark pattern that privacy-conscious visitors, journalists, and competitors report to regulators - turning a technical oversight into a public one.
Who it's for
Agencies & Consultants
Turn "we think your cookie setup is fine" into a documented cookie compliance audit you can attach to every client report - and a clear way to prove the value of a CMP rollout.
Marketing & Privacy Teams
Stop guessing whether your Google Ads account is at risk. Get a clear pass/fail on Consent Mode v2 and GDPR basics before a campaign launches, not after a warning email.
Developers & Marketing Ops
Run the same audit in staging and production to confirm a CMP update, GTM change, or new tracking pixel did not quietly break your consent setup.
Frequently asked questions
See how the scan works, step by step
Walk through each scenario - before consent, Accept All, Reject All, GPC, and granular consent.