What runs on a website before consent.

Limits of the scan

• The home page: other pages on the website are not checked and may behave differently.
• One country: the country the scan ran from appears in the result. Websites may apply different rules from one country to another.
• The first few seconds: the scan captures cookies and requests that appear while the page is open. Those triggered later or by visitor actions do not appear.
• No interaction: the scanner does not click on the banner, so it does not check what happens after accepting or refusing.
• Classification: it uses our own list and does not replace an analysis of each cookie.
• Nature of the result: it is a technical observation, not a legal assessment or a confirmation of compliance.

The applicable rules are covered in our articles on cookie banners, advertising pixels and cookie fines in Romania.

Data processed

To apply the limit of 2 scans in 24 hours, we calculate a cryptographic code (hash) from your IP address. The scanner does not store the IP address itself, only this code, on Cloudflare's infrastructure, and deletes it automatically no more than 24 hours after the first scan. Cloudflare acts as our processor; transfers outside the European Economic Area are covered by its data processing agreement.

The legal basis is our legitimate interest in protecting the service against abuse (Article 6(1)(f) GDPR). You may object to this processing at any time by writing to [email protected]. Our details and your other rights are set out in our website privacy notice.