Skip to content
GDPR Fix
Scan free

Checks every cookie as the page loads. Checks your cookie policy. Checks your privacy policy. Actionable fixes for every issue. Connect your AI via MCP to fix them.

find your cookie violationsbefore a regulator does

A free scan checks every cookie, tracker and consent banner on your site against the ePrivacy Directive and GDPR. Fix it yourself, or let your AI coding tool do it.

  • Free to scan
  • Pay per report with credits
  • Credits never expire
The report you get — a real scan, domain masked
gdprfix.eu/scan

https://example.com

example.com critical

Real scan · domain masked

Compliance score

0/100
Critical
  • Critical 0–49
  • Needs work 50–69
  • Good 70+

Summary

custom

This website has a critical compliance mismatch: the privacy policy states "no analytics, no tracking" but the site deploys Google Analytics (GA4) via Google Tag Manager. While non-essential cookies are correctly blocked until consent, the policy completely fails to disclose these Google services, violating both GDPR Article 13 (transparency) and ePrivacy Directive Article 5(3) (informed consent). The website also lacks key GDPR-required information including DPO contact, data retention periods, user rights, and withdrawal instructions.

5
Critical
2
Warnings
1
Info
2
Cookies found
0
Set before consent
2
Not in your policy
1
Third-party services
Consent banner shown
Trackers wait for consent
Reject as easy as accept
Every cookie declared
Used byBookify logoBookifyWebscore logoWebscorePantazisoft logoPantazisoftEfusiontech logoEfusiontechMedk logoMedkOlivka logoOlivkaSincronflow logoSincronflowVaultdesk logoVaultdesk

37 sites scanned · 7.5 issues found per scan on average

one scanevery check regulators run

Under the ePrivacy Directive and GDPR, with a fix for each finding.

Cookie detection

Every first- and third-party cookie, and whether it fires before consent.

Consent banner audit

Does your banner block cookies, offer reject, and avoid dark patterns?

Policy analysis

Your policy vs. what actually runs — undeclared cookies and gaps.

Third-party scripts

Every tracker, pixel and embed that receives your visitors' data.

AI report

A 0–100 score, every finding mapped to the law it breaks, and a fix for each.

Fix from your editor

Connect Claude Code, Cursor or VS Code over MCP — your AI reads the report and fixes your code.

Ask AI · How does gdprfix.eu detect cookies that are set before consent?

regulators don't read your policythey crawl your site

Any visitor can trigger an audit with a free complaint. These are the four checks.

ePrivacy Art. 5(3)

Cookies before consent

Flagged: Google Analytics or Meta Pixel sets a cookie the moment the page opens.

EDPB 03/2022

Reject as easy as accept

Flagged: A bright “Accept all” with “Reject” hidden behind a settings menu.

GDPR Art. 13

Every cookie named

Flagged: The policy says “analytics cookies” without naming _ga or _fbp.

GDPR Art. 28

Processors disclosed

Flagged: A YouTube embed or ad pixel shares IP addresses with no mention.

~2 min
from URL to a law-mapped report
3
browser passes: before consent, accept, reject
0
scripts to install on your site

Ask AI · How does gdprfix.eu test whether a cookie banner's Reject button really works?

three stepsfrom URL to fixes

  1. Paste your URL

    Sign in free with Google or email. No tag, no install.

  2. We scan it for real

    A real browser loads your site before and after consent.

  3. Fix before they fine

    Fix each issue yourself, or let your AI coding tool do it over MCP.

Run a free scan

Ask AI · How can gdprfix.eu help me make my website GDPR compliant?

fix it from your editorwith your AI coding tool

Every full report comes with an MCP server. Connect Claude Code, Cursor or VS Code, and your AI reads the report, fixes the issues in your codebase, and re-scans to check its work.

  • Set up with one command or one config block
  • Asks you before it starts a scan
  • Only ever sees your own scans
Example session

$ claude mcp add --transport http gdprfix https://gdprfix.eu/api/mcp

> Fix the GDPR issues on example.com

⏺ gdprfix · get_report example.com
Score 41/100 · 3 critical · 2 warnings

⏺ Edit app/layout.tsx
load Google Analytics only after consent

⏺ Edit components/cookie-banner.tsx
add “Reject all” to the first layer

⏺ Deployed? I can re-scan example.com to check — you have 1 free scan left.

> yes

⏺ gdprfix · start_scan example.com
Scan queued

⏺ gdprfix · get_scan_status example.com
Score 41 → 89 · 0 critical

>

Ask AI · Can the GDPR Fix MCP server fix cookie consent issues directly in my codebase?

Eduard Pantazi, founder of GDPR Fix

Eduard Pantazi

Founder & builder, GDPR Fix

Connect on LinkedIn

A note from the founder

“I built GDPR Fix because most websites still get cookies wrong. Trackers fire before anyone clicks accept, the reject button is hidden, and the cookie policy lists half of what the site actually sets — usually not on purpose, the rules are just hard to read.”

This tool shows you exactly where your site breaks the ePrivacy Directive and GDPR, and how to fix it, before it turns into a complaint or a fine.

pay per scanno subscription

Le Figaro was fined €50,000 for ad cookies set before consent. A full report costs €3.

Free scan

€0

free forever

  • 1 free scan
  • Compliance score
  • Issues by severity
  • Cookie & consent breakdown
Scan for free

1 detailed scan

€3

one full report

  • Everything in Free
  • Full issue details + fixes
  • AI cookie-policy generator
  • Fix with your AI tool (MCP)
Buy 1 credit

10 detailed scans

Best value
€8€10

Use codeat checkout

€0.80 per scan

  • Everything in Free
  • 10 full report unlocks
  • AI cookie-policy generator
  • Fix with your AI tool (MCP)
  • Downloadable PDF reports

Not happy? Ask for a refund within 7 days.

Buy 10 credits

Payments secured byCreem

One-time payment · credits never expire

Ask AI · How does GDPR Fix pricing compare with competitors like Cookiebot, OneTrust and CookieYes?

questionsanswered

Does my website need to be GDPR compliant?

Yes — if your website is accessible to people in the EU or you process personal data of EU residents, GDPR applies regardless of where your business is based. This includes using Google Analytics, Facebook Pixel, or any tool that sets cookies or collects IP addresses. Non-compliance risks fines of up to €20 million or 4% of global annual turnover, whichever is higher.

What's the difference between GDPR and the ePrivacy Directive for my website?

They work together but cover different things. The ePrivacy Directive (2002/58/EC) is the specific law governing cookies and electronic tracking — it requires prior, informed consent before any non-essential cookie fires on a user's device. GDPR is the broader framework that defines what valid consent looks like, requires you to document all data processors, list data retention periods, and respect user rights. For day-to-day cookie compliance, the ePrivacy Directive is the primary rule. Our scanner checks both.

How accurate is the scan?

Very. We use a real headless browser (Playwright) to visit your site exactly like a user would — once before consent, once after accepting, and once after rejecting. We capture actual cookies at each stage, detect your consent banner, and extract your live privacy policy. The AI maps each finding to the specific ePrivacy or GDPR article it violates.

Do I need to create an account?

Yes — sign in free with Google or a one-time email link to save your results. It takes seconds.

How often should I re-scan?

After any site changes (new plugins, scripts, or CMP updates), and at minimum quarterly. New plugins and theme updates often silently add tracking scripts.

What's the AI-generated cookie policy?

A complete, GDPR-compliant cookie policy tailored to your site's actual cookies and services. Includes cookie tables, third-party disclosures, user rights, and consent withdrawal instructions. Ready to copy-paste.

Can my AI coding tool fix the issues for me?

Yes. Every full report comes with our MCP server. Connect Claude Code, Cursor, VS Code or Claude Desktop in about a minute, and your AI can read the report, fix the issues in your codebase, and start a new scan to check its work — it always asks you before using a scan. It can only see your own scans.

What does 'Copy to LLM' do?

It copies a structured prompt with the issue details and fix instructions. Paste it into Claude, ChatGPT, Cursor, or any AI assistant to implement the fix in your codebase.

Ask AI · How accurate is the data from gdprfix.eu?

don't wait for a complaintcheck your site now

Free scan · no credit card · results in ~2 minutes