Free tool · no signup
Analytics privacy checker
Enter any public URL. We fetch the page’s HTML once and list the trackers, cookies, consent platforms and third-party scripts we can see in it — an educational report for GDPR and LGPD conversations.
How the checker works
We request the URL once from our server, with the user agent AnalisaPrivacyChecker/1.0, following at most three redirects. Then we look at the HTML for script, iframe and pixel addresses and inline code that match known trackers (Google Analytics 4, Universal Analytics, Google Tag Manager, Google Ads, Meta Pixel, Hotjar, Microsoft Clarity, TikTok, LinkedIn, HubSpot, RD Station and others), for consent platforms (OneTrust, Cookiebot, CookieYes, Didomi, Usercentrics, AdOpt…) and for the Set-Cookie headers in the response.
We don’t store the pages we fetch. Results are cached for 10 minutes so repeated checks don’t hit the site again.
What GDPR and LGPD say about analytics cookies
Under the ePrivacy rules in Europe, storing or reading cookies that aren’t strictly necessary — analytics and advertising cookies included — requires the visitor’s prior consent. Brazil’s LGPD requires a legal basis for processing personal data, and the ANPD’s cookie guidance treats consent as the expected basis for most advertising and tracking cookies.
- Advertising pixels (Meta, TikTok, Google Ads, LinkedIn) share browsing data with ad networks — they almost always need consent.
- Session replay (Hotjar, Clarity, FullStory) records interactions on the page and needs care with forms and personal data.
- Cookie-based analytics (Google Analytics) sets identifiers that persist for months.
The cookieless alternative
Analisa measures traffic, sources and conversions without cookies or persistent identifiers, and anonymizes IP addresses on arrival — so the analytics itself doesn’t need a consent banner. See how Analisa handles GDPR and LGPD and how it compares to Google Analytics.
Frequently asked questions
Is this checker a GDPR or LGPD compliance audit?
No. It is an educational snapshot of what a page loads in its initial HTML. Compliance depends on your consent flow, contracts, data retention and more — talk to a privacy professional for an assessment.
Why didn’t it detect a tracker I know is on my site?
Trackers loaded by Google Tag Manager, by another script or only after the visitor accepts cookies are not in the initial HTML, and we don’t execute JavaScript. In that case the report shows the tag manager, not what it loads.
Does Google Analytics need a cookie banner?
In the EU and in Brazil, Google Analytics sets identifier cookies and sends data to Google, so the usual reading is that it needs prior consent. Cookieless tools that don’t store identifiers on the device generally don’t.
Do you store the URLs I check?
We keep the result in a short-lived cache (10 minutes) to avoid fetching the same page repeatedly. We don’t keep a history of checked URLs.
Can I check pages behind a login or on my local network?
No. The checker only fetches public pages on the standard ports, and refuses private, local and cloud-metadata addresses for security.
Analytics without the banner
Analisa gives you sources, campaigns, goals and funnels without cookies. Free up to 10K events a month.
Start freeMore free tools
Web Vitals checker
Real-user LCP, INP and CLS (CrUX) plus a Lighthouse lab score for any public page, mobile or desktop.
UTM builder
Tag campaign links with utm_source, utm_medium and utm_campaign — with presets, QR code and bulk mode.
Conversion rate calculator
Visitors and conversions in, conversion rate out — with a confidence range and value per visitor.