Privacy risk advisories (Free)

These checks report only. Nothing is ever blocked or rewritten.

• Tracking pixels and session replay: one finding per vendor (Meta, TikTok, Hotjar, Clarity, FullStory, LinkedIn, X, Pinterest, Snapchat, Matomo Cloud).
• Third-party content: Google Fonts, maps, video and public CDNs, which expose visitor IP addresses on page view.
• Consent banner with no Reject: refusing must be as easy as accepting.
• Legal pages: privacy policy, cookie policy and, for German-language or .de/.at sites, an imprint.
• Do Not Sell or Share link: homepage presence, hedged because thresholds depend on your business.
• Consent Mode teaser: a Google tag with no visible Consent Mode default.

Static analysis cannot see tag managers or a consent platform's later updates, so these messages say what they cannot verify. Treat them as prompts to check, not verdicts.