Bannerproof – GDPR Cookie Consent Scanner

A cookie banner plugin is not the same thing as a working cookie banner. Caching plugins, theme updates, and marketing plugins can all quietly break what your CMP (Complianz, Real Cookie Banner, CookieYes, or any other) is supposed to be blocking — without changing how the banner looks.

Bannerproof scans this site the way a real visitor (or a data protection regulator) would: a clean, unauthenticated browser session, watching exactly which trackers fire and which cookies get set before any consent choice is made.

This plugin is admin-only — it adds nothing to your site’s public-facing pages, no scripts, no stylesheets, no runtime overhead for your visitors. It’s a thin client to the Bannerproof scanning service at bannerproof.app; the scan itself runs on Bannerproof’s own servers.

Free, no account needed:

• One-off check of this site, right from your WordPress admin
• Clear yes/no: were any trackers found firing before consent?

Connect a Bannerproof account (from \$11/month) for:

• Automatic weekly re-scans
• 3-month scan history
• An always-current compliance certificate
• Email summary after every scan

Get an account and your API token at bannerproof.app.

External services

This plugin connects to the Bannerproof API (bannerproof.app) to scan this site for trackers and cookies that fire before cookie consent is given, and to show the status of a connected monitoring account. This is the plugin’s entire purpose — a thin client to the Bannerproof scanning service, which runs the scan itself on Bannerproof’s own servers.

Requests are only made when you take an explicit action on the plugin’s own “Bannerproof” admin page (never on your site’s public-facing pages, and never in the background):

• Clicking “Scan this site for free” sends this site’s own domain to start a one-off scan, and the plugin then polls for that scan’s result.
• Clicking “Save & Validate” to connect an account sends your Bannerproof API token, to verify it and retrieve your account’s plan and domain list.
• Opening the connected “Bannerproof” admin page re-sends your stored API token to refresh your account and domain status if the locally cached copy is stale.

No data from your site’s content, visitors, or users is ever sent — only the domain being scanned and, if you’ve connected an account, your own API token.

This service is provided by Bannerproof: Terms of Service, Privacy Policy.