Cookie Compliance Checks

Check if your site properly handles cookie consent and tracking scripts.

Cookie Compliance Checks

LemWatch scans your site for cookie consent practices and tracking script behaviour to help you stay compliant with GDPR, CCPA, and ePrivacy regulations.

What Gets Checked

• Consent banner — Does your site show a cookie consent banner?
• Consent tool — Which consent management platform (CMP) is detected (e.g., OneTrust, Cookiebot, CookieYes)
• Scripts before consent — Are tracking scripts loading before user consent?
• Analytics before consent — Is Google Analytics or similar firing before opt-in?
• Tracking script count — Total number of tracking/analytics scripts found
• Script load order — Detailed timeline of when scripts load relative to consent

Compliance Issues

LemWatch flags specific violations:

• ⚠️ Analytics loading before consent — GDPR violation risk
• ⚠️ No consent banner detected — Required in EU, UK, and many other jurisdictions
• ⚠️ Third-party scripts before consent — Facebook Pixel, Google Ads, etc.
• ⚠️ Missing cookie policy link — Consent banners should link to your cookie policy

How to Fix

1. Install a CMP — CookieBot, OneTrust, or CookieYes are popular options
2. Block scripts until consent — Use your CMP's script blocking feature
3. Audit third-party scripts — Remove unnecessary tracking scripts
4. Test after fixes — Re-run the LemWatch check to verify compliance

Limitations

LemWatch performs a static analysis of your page source. It cannot:

• Simulate clicking "Accept" on your consent banner
• Verify that scripts are properly blocked after rejection
• Check cookie expiration times or categories

For full compliance auditing, combine LemWatch checks with manual testing and legal review.