Site check

The site check shows what your website really loads. It combines three sources.

#1. Read my page

Privacyboard reads your page code and lists the known services it contains, with the exact tag change needed when a tag is written in the page. It does not see tools added after the page loads, for example by a tag manager.

#2. Open it in a real browser

Privacyboard opens your home page in a real browser three times: untouched, after Reject all and after Accept all. It reports which other websites the page contacted and which cookies were set in each case. This shows what runs before consent and whether refusal works. It checks one page: a spot check, not a full crawl.

#3. What visitors' browsers report

Once your banner is live, it reports from a sample of real visits which other websites the page contacted and which cookies were present, once per visit, about five seconds after load. No cookie values, no addresses and no visitor identifier are included. "Before choice" means before the visitor answered the banner.

#Reading the results

• Found on your site. Services detected but not yet declared. Add them to your declaration with a category.
• Before choice. Websites contacted or cookies set before the visitor chose. Anything in a category that needs consent shows as a warning.
• After reject. Anything still loading after a refusal.

#Automatic weekly check

Once your banner is published, Privacyboard checks your site in a real browser about once a week. You are emailed only when something is new compared with the previous check, for example a new tool loading before consent.

#FAQ

#Does the check log into my website?

No. It opens public pages only.

#Why does the scan not see my tag manager tags?

Tags a container loads are not visible in the page code. The real-browser check and visitor reports show them once they run.

#Does the banner send anything before the visitor chooses?

It loads its own settings from Privacyboard, which is needed to show the banner. About five seconds after load it reports names of third-party websites and cookies it saw, with no values, no addresses and no visitor identifier. The visitor's choice itself is logged only when they make it.