What the check detects
We load the HTML of the page and look for traces of more than 30 well-known services: analytics tools such as Google Analytics, Matomo or Hotjar, ad pixels from Meta, Google, LinkedIn and TikTok, externally loaded fonts such as Google Fonts, embedded videos and maps, and common cookie banners. We also list every third-party server the page loads scripts, images or fonts from, and the cookies the server sets on the first visit.
What the check cannot see
We do not run JavaScript. Services that only load after consent in the cookie banner or through Google Tag Manager therefore do not appear. That is a good thing: it is exactly how it should be. For a complete check, open your browser’s developer tools (F12), switch to the “Network” tab and reload the page without giving consent.
Why this matters
Under the GDPR, personal data such as IP addresses may only be passed to third parties with a legal basis. For tracking and advertising, that is usually prior consent. In 2022, a German court ruled that loading Google Fonts directly from Google’s servers without consent was unlawful, and thousands of website owners in Germany and Austria then received demand letters. This check is not legal advice, but it shows you where to take a closer look.
More on this and how to get rid of third-party services: Google Fonts, Analytics and co. the privacy-friendly way.
Frequently asked questions: Tracker Check
How do I check whether my website loads Google Fonts externally?
Enter your address into the tracker check. If “Google Fonts (loaded externally)” appears, fonts are loaded from fonts.googleapis.com or fonts.gstatic.com. If you host the fonts on your own server instead, the entry disappears.
Does this check replace a GDPR audit?
No. It shows which known services are embedded in the HTML of your page. Whether your website is legally compliant depends on many other points. For that, please consult a professional.
Why does the check not find every tracker?
We read the HTML without running JavaScript and without accepting the cookie banner. Services that only load after consent or through Google Tag Manager therefore do not appear. That is exactly how it should be.