What privacy laws expect
Rules such as GDPR, the ePrivacy Directive, UK GDPR and the Indian DPDP Act expect websites to tell visitors what personal data they collect, to get consent before non-essential cookies and trackers, and to link to a privacy policy.
What this scan reports
It looks for analytics, advertising and session-recording tools, consent-management tools, privacy and cookie policy links, forms that collect personal data without a notice, third-party embeds, Google Fonts loaded from Google, and cookies missing Secure, HttpOnly or SameSite flags.
Frequently asked questions
Is this legal advice?
No. It is a quick screening of what is visible in the page source. Ask a qualified adviser about your obligations.
Why were no trackers found when I know I use some?
Tools added after consent by a tag manager are not in the page source, so the scan cannot see them.
Do I need a cookie banner?
If you use non-essential cookies or trackers and have visitors in regions with consent rules, usually yes.
Read-only: we request public pages the way a visitor would. Private and internal addresses are blocked, and nothing you enter is stored.
Want this running on every page, every day?
UrKavach monitors security, uptime, speed and SEO for every website you manage.