Security & SEO

    Cookie Compliance Checks

    Check if your site properly handles cookie consent and tracking scripts.

    Updated 2026-03-16
    2 min read
    cookies
    GDPR
    consent

    Cookie Compliance Checks#

    LemWatch scans your site for cookie consent practices and tracking script behaviour to help you stay compliant with GDPR, CCPA, and ePrivacy regulations.

    What Gets Checked#

  1. Consent banner — Does your site show a cookie consent banner?
  2. Consent tool — Which consent management platform (CMP) is detected (e.g., OneTrust, Cookiebot, CookieYes)
  3. Scripts before consent — Are tracking scripts loading before user consent?
  4. Analytics before consent — Is Google Analytics or similar firing before opt-in?
  5. Tracking script count — Total number of tracking/analytics scripts found
  6. Script load order — Detailed timeline of when scripts load relative to consent

    7. Compliance Issues#

    LemWatch flags specific violations:

  7. ⚠️ Analytics loading before consent — GDPR violation risk
  8. ⚠️ No consent banner detected — Required in EU, UK, and many other jurisdictions
  9. ⚠️ Third-party scripts before consent — Facebook Pixel, Google Ads, etc.
  10. ⚠️ Missing cookie policy link — Consent banners should link to your cookie policy

    11. How to Fix#

  11. Install a CMP — CookieBot, OneTrust, or CookieYes are popular options
  12. Block scripts until consent — Use your CMP's script blocking feature
  13. Audit third-party scripts — Remove unnecessary tracking scripts
  14. Test after fixes — Re-run the LemWatch check to verify compliance

    15. Limitations#

    LemWatch performs a static analysis of your page source. It cannot:

  15. Simulate clicking "Accept" on your consent banner
  16. Verify that scripts are properly blocked after rejection
  17. Check cookie expiration times or categories

    18. For full compliance auditing, combine LemWatch checks with manual testing and legal review.

    Was this article helpful?

    Previous

    SSL & Domain Renewals

    Next

    Domain & WHOIS Monitoring

    Related Articles

    Security Headers Explained

    What security headers are, why they matter, and how to fix them.

    Understanding Your Security Grade

    How LemWatch calculates your overall security grade.

    Carbon Footprint Tracking

    Measure your website's environmental impact and CO₂ emissions.

    Open port scan check

    Weekly scan of the top 20 attack-surface ports (SSH, RDP, MySQL, Redis, MongoDB…) so a forgotten firewall rule cannot silently expose your DB.

    Back to Help Center