Skip to content
Cookie scanning in a real browser

Your website is telling somebody else about your visitors.

Most sites load tracking scripts before anyone agrees to anything — usually without the owner knowing which ones. Find out which ones yours loads.

Scans the first 5 pages in a real browser. No account needed — the full report comes by email.

  • Free plan, no card
  • 58 trackers named
  • Google Consent Mode v2
app.cookieray.com · scan report Sample
A typical website
6 pages · real browser · before consent
4 trackers loaded before the visitor agreed to anything
  • Analytical 2
  • Marketing 2
  • Strictly Necessary 1
CompanyCookieCategoryLoaded
Google Analytics _ga Analytical Before consent
Meta Pixel _fbp Marketing Before consent
DoubleClick IDE Marketing Before consent
Hotjar _hjSessionUser_… Analytical Before consent
CookieRay cookieray_consent Strictly Necessary Allowed
– trackers loaded before the visitor agreed to anything
  • Cookies found–
  • Pages scanned–

We recognise
58 tracking companies by name

Google Analytics Meta Pixel DoubleClick Hotjar TikTok Pixel LinkedIn Insight Optimizely Twitter / X Intercom Segment Amplitude Criteo Snap Pixel Pinterest Tag Mixpanel
Why it matters

Consent you cannot prove is consent you did not get.

A banner is not the point. The point is being able to answer one question, months later, about one visitor. Most sites cannot — and the reason starts in the first second of every page view.

One page view · in the order things loadexample
  1. 1 Your page HTML and styles Page
  2. 2 Google Analytics sets _ga Before consent
  3. 3 Meta Pixel sets _fbp Before consent
  4. 4 Hotjar sets _hjSessionUser_… Before consent
  5. 5 TikTok Pixel sets _ttp Before consent
  6. 6 Cookie banner appears Asks now
Four trackers had already sent data by the time the visitor was asked.
  1. 01

    The tags fire first.

    Analytics and ad pixels load with the page. By the time your banner appears, the data has already gone — the banner is asking a question that has been answered for it.

  2. 02

    Your site changes without you.

    A marketing team adds a pixel. A theme update ships a new script. Nobody tells the person responsible, and the site that was compliant in March is not in September.

  3. 03

    Somebody will ask.

    A visitor using their rights, a client’s legal team, a partner’s review. It arrives months after the visit, and the question is always the same one.

“Show me what this person agreed to, and when.”

If the answer is a screenshot of your banner, you do not have one.

What it does

A cookie banner is the easy half. The hard half is proving it worked.

CookieRay does four jobs. Each one is a screen in your dashboard you can open and check — not a promise on a pricing page.

Cookie scanner

Finds what is really running.

We open your pages in a real browser and watch every request, instead of reading your HTML and guessing. Each cookie comes back with who set it and what it is for.

CookieSet byCategoryBefore consent
_ga Google Analytics Analytical Yes
_fbp Meta Pixel Marketing Yes
IDE DoubleClick Marketing Yes
_hjSessionUser_… Hotjar Analytical Yes
cookieray_consent CookieRay Strictly Necessary Allowed
Example scanCookie Inventory
Blocking

Holds trackers until visitors agree.

Choose Strict and scripts wait for the categories the visitor actually accepted.

Log only Records choices, lets trackers run. The default, so a first install never breaks your site.
Strict — block until consent Nothing in a category runs until it is accepted.
Consent records

Keeps the proof.

Every answer is stored with what was shown, what was chosen and when — ready as a PDF receipt or a CSV. Free and Starter keep a year; Growth and above keep two.

Consent receiptExample
Answer
Custom
Page
/checkout
Banner version
4
Recorded
12 Oct 2026, 14:02
Categories
Strictly NecessaryAnalyticalMarketing
Languages

Speaks your visitor’s language.

On paid plans the banner follows the visitor’s browser language when a translation exists. On Free it is English only.

  • English EN
  • Deutsch DE
  • Français FR
  • Español ES
  • Italiano IT
  • Polski PL
  • Nederlands NL

Built in, no translation files to upload. Any other language falls back to English.

See it work

The product, recorded — not a stand-in.

Twenty-two seconds of the real dashboard: the score, the cookies a scan found, the banner, the consent log and the install check.

  1. 01 Dashboard and score
  2. 02 Cookie inventory
  3. 03 Banner and consent logs
  4. 04 Scans and install
How it works

Paste one tag. Scan the site. Switch on Strict.

No DNS record and no file to upload. The tag tells us the site is live; everything after that happens in your dashboard.

  1. 1

    Paste the tag

    Add your domain, copy the tag from Install and put it in <head>, as high as you can.

    Installyourwebsite.com
    <script src="…/cmp.js" data-site="YOUR_SITE_ID"></script>
    WaitingConnected after the first page view
  2. 2

    Run the first scan

    Press Scan now. A real browser opens your pages and records every cookie and third-party script.

    Scans · exampleCompleted
    Pages crawled6
    Cookies found9
    Set before consent4
  3. 3

    Turn the banner on, choose Strict

    The banner stays off until you switch it on, so installing the tag never changes your site by surprise.

    SettingsBanner
    Show cookie consent banner
    Consent modeStrict ▾

Then the dashboard scores your setup against seven checks and tells you the next thing to fix.

If you look after other people’s sites

Twenty clients. One login, one bill.

Most tools in this market price per domain, so your twentieth client costs the same as your first. CookieRay prices the account instead.

  • One number that does not move Business covers 15 sites for $59 a month; Scale covers up to 100 for $99. Winning the next client does not change the bill.
  • You hear about it before the client does Every site is rescanned on a schedule. A new cookie on a site you have not touched in a year shows up in your dashboard.
  • Each banner can match its client Paid plans add your logo and custom CSS, so every banner follows that client’s colours and type.
WebsitesExample agency account
Scale
New cookie on harbour-dental.com_ttp from TikTok, found in this week’s scheduled scan
  • harbour-dental.com weekly 1 new
  • northside-bakery.co.uk weekly Strict
  • vandenberg-law.nl daily Strict
  • alpine-gear.de weekly Strict
  • studio-lumen.fr monthly Log only
20 sites in this accountOne bill · $99/mo
Pricing

Priced per account, not per website.

Most consent tools bill you per domain. The banner and blocking are included on every plan — you pay for depth, proof and scale.

Free

One small website, or a look before you commit.

  • 1 website
  • 50 pages per scan
  • 1 year of consent records
  • No visitor limits
Start free

Free for as long as you like

Included

  • Cookie banner and design
  • Blocking before consent
  • Cookie inventory
  • Consent logs
  • Google Consent Mode v2

Premium

Recommended

A handful of websites — a freelancer, a studio, or a company with a few brands.

$29/mo
or $290/yr, 2 months free
Plan size

Growth · 5 websites

  • 5 websites
  • 1,000 pages per scan
  • 2 years of consent records
  • 1,000,000 rows per CSV export
Start with Growth

Card checkout is coming soon. We switch your plan by hand within a day.

Everything in Free, plus

  • Scheduled scans
  • Geo targeting
  • Your logo and custom CSS
  • Trust badge
  • GTM, Meta and Adobe integrations
  • 6 more languages (DE, FR, ES, IT, NL, PL)

List prices in US dollars, excluding VAT.

Questions

What people ask before they start.

Not answered here? Write to us, or read all questions.

Is the free plan a trial?

No. The banner and blocking stay on the free plan for ever, on one site. You turn the banner on in Settings — a first install does not start blocking until you say so.

Can I pay by card today?

Not yet. Card payments are being connected separately. Until then we move an account onto a paid plan by hand after you write to us.

What does the free scan actually check?

Inside a free account, after the tag is installed, it opens up to 50 pages in a real browser and records every cookie set and every request to a known tracking company before consent is given. A site with little to crawl can come back as one page. The form on the home page is a shorter version: the first 5 pages, no account needed, with the full report sent by email. In an account, a scan will not start until the tag has been seen on the domain.

Will the banner slow my site down?

It is about 10 KB, served from our CDN. Put it in the head so it is running before anything else loads.

Does installing the banner block every tracker automatically?

Tag-manager tags, yes. Scripts you pasted into the HTML yourself, no — the browser fetches those before the banner can stop them. The Install page shows how to mark those tags so they stay inert until a visitor accepts.

You still do not know what is on your site.

Everything above is an argument. A scan of your own site is evidence — about your site, not a typical one.

The first 5 pages, in a real browser. No account needed — the full report comes by email.