Continuous GDPR monitoring for your websites

Prior consent for non-essential cookies and trackers, transparency about recipients and transfers, and consent that is as easy to refuse as to give.

General Data Protection Regulation — Regulation (EU) 2016/679; ePrivacy Directive 2002/58/EC

What PrivacyRadar detects

Analytics and advertising cookies set before any consent interaction
Tracking scripts and requests that still fire after Reject (consent bypass)
Reject buttons that do not work — the banner exists, the refusal does not
Consent withdrawal that does not stop trackers or delete their cookies (Art. 7(3))
No functional path to withdraw consent after it was given
No auditable consent record persisted after a choice (Art. 7(1) proof of consent)
Session replay and fingerprinting without detectable policy disclosure
Personal data (email, phone) transmitted to third parties in URLs or payloads
Vendors in countries without adequacy decisions receiving tracking data
Server-side tagging endpoints that may bypass client-side consent (advisory)
Privacy policy missing, unreachable, or drifting away from observed behavior

Why continuous beats annual

EU regulators and NGOs (noyb, et al.) file complaints based on automated site scans. Your consent implementation is retested by outsiders weekly; PrivacyRadar retests it for you first, on every deploy.

Every finding carries its statute reference, concrete remediation, and hashed evidence artifacts. Findings describe observed technical behavior — PrivacyRadar does not provide legal advice.

Start monitoring for GDPR today.

Enable the rule pack in settings; findings appear on your next scan.

Start monitoring Try a free scan