Privacy scanner

What does this page load on visitors?

PrivacyWatch fetches any public URL over HTTPS, inventories every cookie it sets and every third-party script it loads, classifies known trackers, and emails you a compliance summary. No JavaScript is executed on the target — you will always see exactly what we see.

Run a scan

Paste a public HTTPS URL and an email to receive the report. We email the same report you see below.

HTTPS only. We do not execute JavaScript on the target.

Need to re-run a scan? Scan a different URL

No scan yet

Paste a URL above and we will surface every cookie and third-party script this page drops on visitors.

Cookies

Every Set-Cookie header on the initial page load, including the flag set (Secure, HttpOnly, SameSite) and the observed domain scope.

Third-party scripts

Every external and inline <script> tag, with its host, the async / defer flag, and the module-type.

Tracker matching

A hand-maintained list of cross-site trackers — analytics and advertising networks — is matched against every observation, with a per-script occurrence count.

What this scanner does NOT do

  • It only fetches the static HTML. Post-hydration cookies set withdocument.cookie = ... are not observed; a full headless browser would be required for those.
  • It does not render the page, click anything, or fill out forms — it is not a crawler.
  • It does not evaluate legal compliance. The report surfaces observations and recommended actions; adopting any compliance position is your responsibility and counsel’s.