Free SEO tool
GDPR Website Check
Checks 22 technical privacy aspects of a website in seconds: Google Fonts, analytics, cookie banners, tracking and external resources. With a grade from A to F.
No sign-up, the result appears right here on this page. The request runs through our server (AWS Frankfurt); URLs and results are not stored. Privacy policy
Note: technical analysis only, not legal advice.
...
What the GDPR check covers
The General Data Protection Regulation has applied since May 2018 to every website that can be visited by EU citizens. Many websites carry privacy issues their owners are not even aware of: externally loaded Google Fonts, analytics without consent, missing cookie banners, embedded YouTube videos without a two-click solution, or session recording tools like Hotjar that are not mentioned in the privacy policy. Since the 2022 Google Fonts ruling of the Regional Court of Munich, the legal risk is real, and the same GDPR logic applies across the whole EU.
The check detects the most common issues automatically: Google Fonts, Google Analytics and Tag Manager, Facebook Pixel and TikTok tracking, Google Maps and YouTube embeds, reCAPTCHA, external CDNs and social media embeds. Positive signals count too, such as Matomo instead of Google Analytics, self-hosted fonts or OpenStreetMap instead of Google Maps. Every finding comes with a concrete recommendation.
The grades A to F
AVery good: no privacy-relevant issues detected.BGood: minor notes, a solid setup overall.CNeeds improvement: some points to review, usually easy to fix.DProblematic: several privacy-relevant issues found.FCritical: several critical issues, prompt fixes recommended.
Frequently asked questions
What does the GDPR Website Check test?
The check analyses 22 technical aspects of a website: Google Fonts, analytics, cookie banners, social media tracking, external resources, SSL encryption, legal notice, privacy policy and more.
Is the check really free?
Yes, completely free and without registration. You just enter the URL and get an instant result. No email address, no account required.
Do you store my data?
The URL you enter is fetched through our server (AWS, Frankfurt) so the analysis also works on sites with CORS restrictions. The GDPR evaluation itself then runs in your browser. We store neither URLs nor results; request logs are deleted automatically after 30 days at most.
What do the grades A to F mean?
A = very good (no issues), B = good (minor notes), C = needs improvement, D = problematic (several issues), F = critical (several critical issues detected).
Does the check replace legal advice?
No. The check examines technical aspects and points out possible issues. For a legal assessment, talk to a data protection officer or a specialised lawyer.
What should I do when issues are found?
Every issue comes with a concrete recommendation. The most common fixes: self-host Google Fonts, set up a cookie banner, and load analytics only after consent.
How often should I check my website?
After every major change to your website and at least once per quarter. New plugins, widgets or tracking codes can change the privacy status of your site.
Do I need a cookie banner?
If your website uses tracking services (Google Analytics, Facebook Pixel and so on) or non-essential cookies, you need a consent tool. If your site uses none of these, no cookie banner is required.
How is this different from the Google Fonts Checker?
The Google Fonts Checker only tests whether Google Fonts are loaded externally. The GDPR Website Check is broader: it covers 22 aspects including Google Fonts, analytics, cookie banners, tracking services and external resources.
Can I send the result to my web designer?
Yes. Use the PDF export to download the result, or the share button to copy a link to the result. Your web designer will see exactly which points need attention.