Free website privacy audit
See what a first-time visitor’s browser gets: your consent banner, trackers that load before a choice, policy pages, the “Do Not Sell or Share” link and Global Privacy Control. Score and fixes in seconds.
Free, no sign-up. We read the public home page and privacy policy only.
Consent banner
Is there one, and which tool runs it.
Trackers before consent
Analytics, ad pixels, fonts and embeds that load before anyone agrees.
Policy pages
Privacy, cookies, terms and accessibility, and what your privacy policy covers.
Opt-out and GPC
A “Do Not Sell or Share” link and support for Global Privacy Control.
What we check
Ten checks, and why each one matters
Each check is scored by how much it matters. Required items count most; best practice counts less.
-
Consent banner
Whether the site shows one and which tool runs it. EU and UK visitors must be asked before non-essential cookies are set, and US opt-out laws expect a clear way to say no. GDPR cookie banner for WordPress
-
Trackers before consent
Analytics, advertising pixels and session recorders that load as soon as the page opens. These are what privacy lawsuits and regulators look for first. Google Consent Mode v2 for WordPress
-
Privacy policy
A link from the home page, and whether the policy covers the basics: what you collect, why, who you share it with and visitors’ rights. California and most states require one. California Online Privacy Protection Act (CalOPPA)
-
“Do Not Sell or Share” link
Required in California once a site sells or shares personal information, which includes running most advertising pixels. “Your Privacy Choices” with the state’s icon also counts. CCPA opt-out banner for WordPress
-
Global Privacy Control
Signs that the site honors the GPC signal from a visitor’s browser. California and a growing list of states require it. Global Privacy Control for WordPress
-
Cookie policy
A page that lists the cookies and trackers the site uses and why. Expected wherever a banner asks for consent.
-
Terms & Conditions
The rules for using the site. Not a privacy law requirement, but it limits your liability.
-
Accessibility statement
How visitors can get help and how you work toward accessibility. Best practice that shows good faith.
-
Secure connection (HTTPS)
Whether the site encrypts what visitors send, such as form entries.
-
Fonts and embeds
Google Fonts, maps and videos loaded from other companies before a choice. They send visitors’ IP addresses to those companies, which matters for EU visitors.
FAQ
Questions, answered
Is the audit free?
Yes. No sign-up and no limit beyond a few audits an hour per connection. Enter any public website address.
What does the audit read?
The public home page and the privacy policy it links to, the way a first-time visitor’s browser receives them. It doesn’t log in, fill in forms or click anything.
Why might my consent tool score lower than expected?
The audit reads the page code without running scripts. A consent tool that holds tags back in the browser may be doing better than the code shows. GoConsent Pro’s evidence scan tests in a real browser, before any choice, after Reject, after Accept and with Global Privacy Control.
Does a good score mean my site is compliant?
No. It’s a checkup of what a website shows visitors. Compliance also depends on how your business collects, uses and shares data. Have a lawyer review your setup.
Does it work on sites that aren’t WordPress?
Yes, the audit reads any public website. The one-click fixes come from GoConsent, which is a WordPress plugin.
Fix every item in WordPress, free
Install GoConsent free from WordPress.org. No account, no visit limits, and nothing about your visitors leaves your site.
