Cookie consent monitoring — catch the tracker that loads before anyone said yes.
Relvato's cookie consent monitoring visits your site the way a first-time visitor from the EU does: a fresh browser, no cookies, nothing clicked. It records every cookie the site sets and every request to advertising and analytics services such as Google Analytics, Meta Pixel or TikTok. Then it opens a second fresh browser, clicks Reject on your banner and records again. A tracker that loads before any choice, or keeps loading after a Reject, is reported as an issue — so the plugin update that quietly put a pixel back in your header is caught that week, not by a regulator.
- ✓Tracking cookies set before the visitor has made any choice
- ✓Requests to advertising and analytics services — Google Analytics and Ads, Meta Pixel, TikTok, Clarity, Hotjar and others — before any choice
- ✓Trackers loading on a site that shows no consent banner at all
- ✓Trackers that keep loading after the visitor clicks Reject
- ✓A banner with no “Reject” or “Only necessary” option on its first layer (reported as a warning)
- ✓Banners from common consent tools recognised: Cookiebot, OneTrust, Complianz, CookieYes, Borlabs, Usercentrics, iubenda, Didomi and others
- ✓Strictly necessary cookies and your own first-party analytics left out, so they don't add noise
A consent banner is only as good as what happens behind it. A marketing plugin update adds a pixel to the page head, a theme switch drops the script that held tags back, a new version of the consent tool renames the category your analytics waited for — and trackers start loading before anyone has said yes. In the EU, storing or reading non-essential information on a visitor's device needs consent first — and in the UK advertising and third-party tracking still do — and regulators test exactly this: in September 2025 France's CNIL fined Shein €150 million, in part because advertising cookies were set before any choice and after visitors clicked “Refuse all”. The banner looks the same either way; only a test that watches what the browser receives notices.
Test your cookie banner now — free
Enter a page: Relvato visits it from Europe and shows what loads before a choice and after Reject. Relvato cookie consent checker →
What the law asks before a website sets cookies or loads trackers — in the EU, Germany, France and the UK — and where the recent fines landed.
- Relvato opens your home page — plus a product page on a shop — in a fresh browser in Europe, with no cookies and nothing clicked, and lets it settle. It records every cookie set and every request to known advertising and analytics services: Google Analytics and Google Ads, Meta Pixel, TikTok, Microsoft Clarity and Bing UET, Hotjar, LinkedIn, Pinterest, X, Snapchat, Criteo and others.
- It looks for a consent banner from the common consent tools — Cookiebot, OneTrust, Complianz, CookieYes, Borlabs, Usercentrics, iubenda, Didomi and others — and checks whether a “Reject” or “Only necessary” option is on the first layer. Then, in a second fresh browser, it clicks Reject and records again.
- Trackers before any choice, trackers on a site with no consent banner, and trackers still loading after Reject are reported as issues and alert you; no Reject option on the first layer is a warning. It runs weekly and after WordPress, theme, plugin and WooCommerce updates; on other sites, weekly and whenever you start a run.
Does a clean result mean my cookie consent is valid?
No — and no automated test can tell you that. Whether consent is valid also depends on what your banner says, how the choices are presented, which legal basis you rely on and what your vendors do with the data; that needs a person, often a lawyer. Relvato tests the part a browser can observe: what loads before a choice and what still loads after Reject. That is where recent large fines have landed, and it's what an update can change without anyone noticing.
Why does it visit as an EU visitor?
Because EU and UK rules are opt-in: non-essential cookies and trackers wait until the visitor agrees. Many consent tools show a different banner — or none at all — depending on where a visitor is, so Relvato runs from Europe and sees what an EU visitor gets.
Will it flag my own analytics or the cookies my shop needs?
No. Cookies the site needs to work — the cart, the session, the login, the stored consent choice — are strictly necessary and aren't flagged. Neither is first-party analytics the site runs itself. What it reports are the third-party advertising and analytics services that consent rules are mostly about. Whether your own analytics needs consent depends on the country and how it's set up.
Why is a missing Reject button only a warning?
EU regulators expect refusing to be as easy as accepting. The EDPB's cookie banner taskforce found that most authorities treat a banner with an Accept button but no reject option on the same layer as an infringement, and France's CNIL asks for a “Refuse all” button at the same level as “Accept all”. Relvato reports it as a warning rather than an issue because a banner can offer an equally easy refusal in other ways — a person should look.
Does it need the WordPress plugin?
No. It tests the public pages of any website. With the WordPress plugin connected it also runs after WordPress, theme, plugin and WooCommerce updates, and the plugin doesn't switch your tracking off for this visit, so Relvato sees what a real visitor gets. On the Free plan you run it yourself or weekly; Pro also re-runs it after updates.
Put this monitor on autopilot.
Free forever on one site — 100 runs a month, started by you or weekly, no card. Pro re-runs your monitors by itself after every update.