Home / Services / Cookie audit
Service · 09 / 12

Cookie audit.

We review which cookies and tracking scripts run on your site, how they are declared and how users consent to them. The result: a full cookie map, a compliance report and a working Consent Management Platform (CMP) banner.

Starting at
€800
Timeline
1–4 weeks
Tech
11 tools
Included

A cookie map and compliance.

You receive a technical cookie audit, a full list of the cookies and tracking tools in use, a properly configured Consent Management Platform (CMP) and a Google Consent Mode v2 implementation. We look beyond the text of the cookie notice: we check what the tags, scripts and data transfers actually do before and after the user makes a choice. We classify each cookie as strictly necessary, statistics or marketing, and document its purpose, its provider and its retention period. We connect the CMP to Google Tag Manager, Google Analytics 4, Google Ads, Meta Pixel and the other measurement or advertising tools you use. We choose between basic and advanced Consent Mode according to your legal assessment and your analytics needs. If your Google property meets the required conditions, modelled data on users who did not give consent may become available in the system. We prepare the technical information for the cookie declaration and set out the points where the site does not meet GDPR and consent management requirements. In the cookie audits we have carried out, we find problems on an average of 30% of the sites we audit. An audit substantially reduces the risk of a fine for GDPR non-compliance.

Technologies used
Cookiebot OneTrust Termly CookieYes Google Tag Manager Google Analytics 4 Google Consent Mode v2 Google Ads / Meta Pixel ePrivacy GDPR WCAG AA
  • Full inventory of cookies and trackers (first- and third-party)
  • Compliance with GDPR, the ePrivacy directive and the data protection authority's requirements
  • Cookie declaration and privacy policy in the language of your site
  • CMP setup — Cookiebot, OneTrust, Termly or a custom banner
  • Google Tag Manager Consent Mode v2 configuration
  • Google Analytics 4 / Meta Pixel consent integration
  • A report for management — what is happening, what to change, what risks a fine
  • A re-scan after 6 months to confirm nothing has broken
Process

How it works.

01
Scanning
Automated inventory of cookies and third-party scripts across the whole site.
02
Classification
Every cookie is assigned a category: necessary, statistics, marketing.
03
Implementation
We set up the CMP, Consent Mode, the declaration and the policy.
04
Verification
A re-scan after 30 and 180 days to confirm everything works.
FAQ

Frequently asked.

Most banners are set up incorrectly — scripts load before consent, the categories don't match the actual cookies, or declining changes nothing. That is exactly what complaints and inspections target.
The choice between Basic and Advanced Consent Mode depends on your legal assessment and analytics needs. In Basic mode, Google tags do not load before consent; in Advanced mode, they may load with storage denied and send cookieless pings. Modelled data may be available only if the Google property meets Google’s requirements.
For smaller sites Cookiebot or a custom banner is often enough. For large organisations with several sites OneTrust fits better. We recommend based on your situation, not on partner agreements.
Yes — the cookie declaration and privacy policy, aligned with what actually happens on the site.
That is exactly why we include a re-scan after 6 months. A new marketing script is the most common reason compliance quietly disappears.