Online cookie scanning tool
Scan any website's cookies and trackers in 30 seconds with the free online cookie scanner trusted for GDPR, ePrivacy, and CCPA compliance work. No signup, no install — instant shareable report.
No credit card required ? Instant insights
The CookieInspector cookie scanner crawls any public URL and records every cookie, tracking pixel, third-party script, and remote domain a real browser would touch — before and after the visitor interacts with your consent banner.
Unlike a static cookie list pasted into a policy, the cookie scanning tool replays an actual session so you see what your site really drops, not what you think it drops.
Privacy regulators (GDPR, ePrivacy, CCPA, LGPD) hold the operator responsible for every cookie set without a lawful basis — including ones added by tag managers or marketing teams without engineering review.
A free online cookie scanner gives compliance, legal, and DevOps teams the same source of truth: a timestamped list of cookies, domains, and trackers categorised by consent status, so the next audit doesn't catch anyone by surprise.
Enter a URL, hit scan, and CookieInspector launches a headless Chromium that loads the page, waits for the banner, captures pre-consent activity, then accepts and captures post-consent activity in the same session.
You get a free, shareable report inside 30 seconds: every cookie name, domain, expiration, third-party host, GDPR category, and risk flag — no signup, no install, no plugin.
Cookie policies drift fast. Marketing teams add tags, partners change SDK versions, and consent banners stop blocking the things they're configured to block. A regular cookie check catches the drift before regulators or customers do.
Because the scanner works from the cloud on any publicly reachable URL, you can check a client domain during an audit or benchmark a competitor's homepage without an extension, an account, or access to the site.
Each finding is matched to a lawful basis, with the category, lifespan, and responsible domain named — the evidence data protection officers need before publishing a cookie policy or signing off a DPIA.
One pass covers GDPR Article 7, ePrivacy Article 5(3), and CCPA opt-out expectations, and it surfaces the surprises that matter most: marketing cookies that fire before anyone consents.
How we differ
Most online cookie scanners only list cookies. CookieInspector also captures the third-party scripts that drop them, separates pre-consent from post-consent activity, and gives you a downloadable PDF auditors will accept.
Yes. The CookieInspector cookie scanner is free to run on any public URL — no signup, no install, no credit card. Paid plans add monitoring, exports, and team seats but the scan itself is free forever.
We launch a real headless Chromium browser, load the URL you submit, wait for the consent banner, capture every cookie set before consent, then accept and capture every cookie set after consent. The result is a structured report listing each cookie's name, domain, expiration, and risk category.
Cookies (first- and third-party), local storage entries, scripts loaded from third-party domains, tracking pixels, fingerprinting signals, the presence and behaviour of a consent banner, and whether any of that fired before the visitor consented.
Any publicly reachable URL. Some sites behind authentication or geo-restrictions may render differently — CookieInspector captures what a typical visitor from our crawler's region sees.
Paste the URL into CookieInspector, click scan, and within 30 seconds you'll see every cookie the site sets — names, domains, expirations, categories, and whether each fired before or after consent.
Yes — you can check cookies on any publicly accessible site. Many teams use it on client domains during audits and on competitor sites for benchmarking.
A GDPR cookie scan inspects every cookie and tracker a website loads, classifies them by lawful basis, and flags anything fired before consent — the evidence GDPR Article 7 requires you to be able to produce on demand.
GDPR, ePrivacy Directive Article 5(3), CCPA/CPRA, Brazil's LGPD, and Quebec's Law 25 — all of which require lawful basis or opt-out evidence the scan captures in one pass.
Related tools & guides