Do I need to install anything on my website?

No. The scanner loads your page from the outside, exactly the way a first-time visitor does. There is no tag to add, no plugin, and no DNS change — so there is nothing to remove afterwards either.

Does scanning change anything on my site?

No. The scan is read-only. It loads your page, records the cookies that page sets, reads your public policy documents and stops there. Your visitors, analytics and content are untouched.

Which pages does the scanner check?

It scans the URL you give it, including every cookie set by third-party scripts running on that page. Because most tracking loads sitewide, your homepage is usually the most representative page to start with.

Why is my compliance score lower than I expected?

The score is a weighted average — privacy policy 35%, cookie policy 35%, terms of service 30% — and a document the scanner cannot find scores zero for its whole section. The most common cause of a surprisingly low score is a cookie policy that exists but is not linked from the page that was scanned.

What does an "unclassified" cookie mean?

It means we have not yet matched that cookie to a known vendor in our database, so we will not guess at its purpose. Treat unclassified cookies as your first action item: each one is a cookie you cannot accurately describe to visitors in a consent notice.

Can I export or share the report?

Yes. Every report has a Download as PDF button, and the report itself lives at a stable URL you can send to colleagues, your DPO or outside counsel.

Does a high score mean my website is legally compliant?

No, and we would rather say so plainly. The scan is a technical diagnostic, not a legal opinion. It tells you what your site is doing and where your documentation has gaps — useful evidence for a compliance conversation, but not a substitute for advice from a qualified privacy professional.

Free scan · no account needed

Your website is setting cookies you have never seen

Paste a URL. In about a minute our scanner reports every cookie your site drops, who it belongs to and how long it lives — then grades your privacy policy, cookie policy and terms of service against 23 compliance criteria.

Scan my website free See the full platform

Opens scanner.secureprivacy.ai · no card, no signup

No account required
Results in about a minute
Works on any public URL
Export the report as PDF

scanner.secureprivacy.ai

Scan Report your-website.com

40%

Cookies0%
Cookie Policy—
Privacy Policy43%
Terms of Service83%

Illustrative report. Your own numbers will differ.

Your report

What you get back, section by section

One compliance score on the front page, then four graded sections underneath it. Every finding is written in plain English, with the reasoning shown — not just a number.

40%

Sample compliance score

One weighted number across all four sections, so you can tell at a glance whether this is a tidy-up or a rebuild.

Full inventory
Cookies
Every cookie the page sets, grouped by category and explained one by one.
- Cookie name and the provider that set it
- First-party or third-party, and the exact source domain
- Expiry date, or session-only
- Plain-English description of what it does
35% of score
Cookie Policy
Seven criteria covering whether your cookie notice actually tells visitors what they need to know.
- Are cookie types and purposes spelled out?
- Is third-party sharing disclosed?
- Are duration and expiry stated?
- Can a visitor act on it — control and withdraw consent?
35% of score
Privacy Policy
Eight criteria on collection, use, sharing, rights, security and retention.
- What data you collect and why
- Who you share it with
- How visitors exercise their rights
- How long you keep it and how you secure it
30% of score
Terms of Service
Eight criteria on clarity, liability, dispute resolution and how you notify users of changes.
- Are responsibilities and acceptable use clear?
- Is the liability position readable, not just present?
- How are account termination and user content handled?
- Do you tell users when the terms change?

How scoring works

No black box. Here is the whole rubric

Your score is a weighted average of three documents. Each document is scored across its own criteria, and each criterion comes back with a written explanation of what the scanner found. Nothing is hidden behind a paywall.

Privacy Policy

8 criteria

Weight35%

1Clarity and transparency
2Data collection
3Purpose of data use
4Data sharing
5User rights and controls
6Security
7Data retention
8Compliance with legal requirements

Cookie Policy

7 criteria

Weight35%

1Clarity and transparency
2Types of cookies and purposes
3Third-party cookies and data sharing
4Cookie duration and expiry
5User control and consent
6Compliance with legal requirements
7Policy changes and user notifications

Terms of Service

8 criteria

Weight30%

1Clarity and accessibility
2User responsibilities and acceptable use
3Account management and termination
4User content and intellectual property
5Limitations of liability and disclaimers
6Dispute resolution and governing law
7Compliance with legal requirements
8Policy changes and user notifications

Every criterion is scored out of 100 and weighted into its document score. 79% and above reads green, 50–78% amber, below 50% red. A missing document scores zero for that section. 23 criteria in total.

Classification

Every cookie, sorted and explained

You cannot ask for consent to something you cannot name. The scanner matches each cookie against our vendor database and files it into one of nine categories — and tells you honestly when it cannot.

Essential
Strictly necessary for the site to work — security, session, load balancing. These are the only cookies you may set before consent.
Advertising
Track visitors across websites to build profiles and target ads. The highest-risk category, and usually the largest.
Targeting
Placed by ad networks to remember that you visited and share that with other organisations.
Analytics
Report how visitors interact with the site — popular pages, navigation paths, errors.
Site analytics
First-party behaviour measurement: visit frequency, time on page, journey through the site.
Performance
Collect aggregate usage and error data without identifying the visitor.
Functional
Remember choices such as username, language or region to provide enhanced features.
Preferences
Store settings that change how the site looks or behaves for that visitor.
Unclassified
Not yet matched to a known vendor. Every unclassified cookie is a consent notice you cannot write accurately — start here.

Example rows from a Secure Privacy cookie scan report
Name	Provider	Purpose	Expiry	Type
`__qca`	quantcast.com	Audience segmentation and targeted advertisingadvertising	13 months	Third party
`OptanonConsent`	your-domain.com	Stores which cookie categories the visitor consented toessential	12 months	First party
`_chartbeat2`	chartbeat.com	Distinguishes new visitors from returning onesanalytics	13 months	Third party
`sato`	your-domain.com	No description availableunclassified	Session	First party

Sample rows from a real scan report

How it works

Three steps to a full report

Nothing to install, nothing to configure, nothing to undo afterwards. The scan runs entirely from the outside.

1
Paste your URL
Any public page on your domain. No tag to add, no plugin to install, no DNS change.
5 seconds
2
We load your site like a visitor
The crawler opens the page as a first-time visitor would, records every cookie, tracker and pixel it sets, then looks for your policy documents and reads them.
about a minute
3
Read your report
A compliance score, the full cookie inventory and a written review of all three policy documents. Export the whole thing as a PDF.
instant

Rescan any domain once every 24 hours — free, forever

Scan my website free

Free scan vs platform

The scan finds it. The platform fixes it

Capability	Free scan	Secure Privacy
Cookie inventory	One-off snapshot	Rescanned automatically, every day
Compliance score		Tracked over time, with history
Policy review	23 criteria, AI-reviewed	Review plus generated policy templates
Alerts on new cookies		Email the moment one appears
Blocking before consent		Auto-blocks scripts until a visitor opts in
Consent banner		Branded banner covering 55+ privacy laws
Consent records		Audit-ready proof for every visitor
Account needed		Free plan available