FREE TOOL
Free website cookie scanner
Paste a URL. A real browser visits up to five pages, accepts the consent banner, and reports every cookie, tracker, and script that loaded before anyone agreed. It can take up to five minutes, because a real browser has to load all five pages for real. Free, no signup, no email.
How it works
Three steps, a few minutes.
Paste a URL.
Any website. No account, no email.
A real browser visits the site.
It opens up to five pages and clicks accept all on the consent banner, on purpose, so trackers that hide behind consent have nowhere to go.
You get the full report.
Every cookie, tracker, and script that loaded. Give it up to five minutes on larger sites.
WHAT IT CHECKS
Six things every scan checks.
Cookies set before consent
The ones that fire before anyone clicks accept, where a consent banner cannot cover them.
Consent banner behavior
Whether a banner exists, which CMP it is, and what actually gets stored around it.
Tracker inventory
Google Analytics, Meta Pixel, Hotjar and friends, identified by the evidence they leave.
First-party vs third-party cookies
What the site sets itself versus what other domains drop through it.
localStorage and sessionStorage
Identifiers tucked into browser storage, not just the cookie jar.
Cookie lifetimes and security flags
How long each cookie lives, and whether it is marked Secure and HttpOnly.
No signup, actually
The report is not held hostage.
No account, no email field, and nothing gated behind a paywall. GetFluxly makes cookieless analytics, so a cookie scanner is its natural kind of marketing. Run it, read it, close the tab.
FAQ
Questions, answered.
Is this cookie scanner really free?
Yes. There is no account to create, no email field, and no report held back behind a signup. Rate limits keep the tool fair and available for everyone, but the scan and the full report cost nothing.
How does the cookie scanner work?
A real browser visits up to five pages of the site you enter and clicks accept all on the consent banner on purpose. It records every cookie, localStorage and sessionStorage key, tracking script, and third-party request, then sorts them into a report that flags anything set before consent.
Why do cookies set before consent matter?
A cookie that fires before a visitor agrees cannot claim consent as its legal basis, which is exactly what regulators look at. Read the deeper explainer.
What does Unclassified mean?
It means the scanner recognized the cookie or storage key but does not have a confident purpose for it. We show it as Unclassified rather than guess a category it might not deserve.
My report is almost empty. Is the site really that clean?
Maybe, but a nearly empty report usually means bot protection blocked the scan before it could load anything. A real browser that gets turned away sees very little, so treat a blank result as inconclusive rather than proof the site is clean.
Do you store my report?
Reports are cached for about 24 hours so that repeat scans of the same site come back instantly. After that the cached report expires. The scan is meant to be run and read, not archived.
Read more