Bannerproof – Cookie Consent Checker & GDPR Audit

A cookie banner plugin is not the same thing as a working cookie banner. Caching plugins, theme updates, and marketing plugins can all quietly break what your CMP (Complianz, Real Cookie Banner, CookieYes, or any other) is supposed to be blocking — without changing how the banner looks.

Bannerproof scans this site the way a real visitor (or a data protection regulator) would: a clean, unauthenticated browser session from the EU, watching exactly which trackers fire and which cookies get set before any consent choice is made.

It works with any consent tool — Complianz, CookieYes, Cookiebot, Real Cookie Banner, Borlabs Cookie, Usercentrics, iubenda or a custom banner — because it checks what the browser actually receives, not the plugin’s settings.

This plugin is admin-only — it adds nothing to your site’s public-facing pages, no scripts, no stylesheets, no runtime overhead for your visitors. It’s a thin client to the Bannerproof scanning service at bannerproof.app; the scan itself runs on Bannerproof’s own servers.

Free, no account needed:

• One-off check of this site, right from your WordPress admin
• A compliance score and a clear yes/no: were any trackers found firing before consent?

The full report (one-off €19, or included with monitoring) shows:

• every tracker and cookie that fired before consent, with the exact request as evidence
• whether the banner has “Reject all” on the first layer, and what still fires after Reject
• Google Consent Mode v2 state per signal (ad_storage, analytics_storage, ad_user_data, ad_personalization)
• the IAB TCF consent string, and cookies your cookie policy doesn’t mention
• a concrete fix and the legal reference for each issue, as a web report and PDF

Connect a Bannerproof account (from €11/month) for:

• Automatic weekly re-scans
• 3-month scan history
• An always-current compliance certificate
• Email summary after every scan

Get an account and your API token at bannerproof.app/wordpress.

External services

This plugin connects to the Bannerproof API (bannerproof.app) to scan this site for trackers and cookies that fire before cookie consent is given, and to show the status of a connected monitoring account. This is the plugin’s entire purpose — a thin client to the Bannerproof scanning service, which runs the scan itself on Bannerproof’s own servers.

Requests are only made when you take an explicit action on the plugin’s own “Bannerproof” admin page (never on your site’s public-facing pages, and never in the background):

• Clicking “Scan this site for free” sends this site’s own domain to start a one-off scan, and the plugin then polls for that scan’s result.
• Clicking “Save & Validate” to connect an account sends your Bannerproof API token, to verify it and retrieve your account’s plan and domain list.
• Opening the connected “Bannerproof” admin page re-sends your stored API token to refresh your account and domain status if the locally cached copy is stale.

No data from your site’s content, visitors, or users is ever sent — only the domain being scanned and, if you’ve connected an account, your own API token.

This service is provided by Bannerproof: Terms of Service, Privacy Policy.