Cookie Scanner
Enter your website URL and get an instant report of all cookies being set — categorised by type (strictly necessary, analytics, marketing) with GDPR and ePrivacy compliance notes.
Tool details
About this tool
Paste any website URL and get a server-rendered report of every cookie set on the page, categorised by purpose (strictly necessary, functional, analytics, marketing) with first-party / third-party split and estimated expiry.
What you'll get
- A full cookie inventory for the scanned URL.
- A per-cookie category and a plain-English purpose.
- First-party vs third-party classification and expiry duration.
- A pre-filled cookie policy snippet you can paste into your site.
How it works
- The scanner loads the page in a headless browser, applies no consent (so the full cookie set drops), and reads the resulting cookie jar.
- Each cookie is matched against our cookie database (10,000+ entries) and categorised by vendor + purpose.
- Scanner-created cookies (Cookiebot/Osano/Iubenda detectors, the TruePrivacy scanner cookie) are stripped from results so you only see your site's cookies.
Based on
- GDPR Article 7 (consent) + Recital 32.
- ePrivacy Directive 2002/58/EC, Article 5(3).
- ICO guidance on cookies and similar technologies.
This is a simulated scan for demonstration purposes. Results shown are representative examples.
Frequently asked questions
Does the scanner respect my robots.txt?+
Yes. If the target URL is disallowed to the scanner user-agent, the scan is skipped with a clear message. The scanner uses TruePrivacyScanner/2.0 as its User-Agent.
Will the scan trigger analytics in my dashboards?+
Yes — it loads the page like a real browser. If you want to exclude the scan, add the scanner IP range to your analytics suppression list.
What about localStorage, sessionStorage and IndexedDB?+
The scanner reports web storage keys alongside cookies with a dedicated storage type column, so trackers that use localStorage (Amplitude, Mixpanel, PostHog) show up too.
How often should I rescan?+
Weekly if your marketing stack is still changing, monthly otherwise. A regression check after every release is the right cadence for a mature site — TruePrivacy handles this on autopilot.
Need more than a free tool?
TruePrivacy is a full privacy operations platform. Automate DSRs, consent, vendor risk, and breach response.
Free 14-day trial · No credit card required · Setup in minutes