fepo — GDPR Cookie Scanner

fepo GDPR Cookie Scanner is a diagnostic plugin that checks whether your cookie consent banner is really effective — or whether trackers fire before a visitor clicks “Accept”.

It is not a cookie banner. It is a diagnostic tool that audits whatever cookie banner you already have, independent of which cookie management platform you use.

What the plugin checks:

• Which Cookie Management Platform (CMP) is active (Cookiebot, Usercentrics, Borlabs, Complianz, CookieYes, and more).
• Which third-party trackers (Google Analytics, Meta Pixel, HotJar, …) are present in the page source.
• Whether those trackers are visible in the static HTML before any consent is given — a sign that the CMP integration may be misconfigured.
• A CMP-specific remediation guide pointing to the vendor’s official documentation.

What the plugin does NOT do:

• It does not install, configure, or modify your cookie banner.
• It does not change any files on your site.
• It does not collect any data from your visitors.

Scan modes:

The plugin uses a PHP-based quick-scan (Stufe A) that works on every WordPress host — no Headless Chrome, no Node.js, no extra dependencies. For JS-injected trackers (e.g. Google Tag Manager tags) and a full three-phase Reject-Path test, an optional full scan via dsgvochecker.de is available as an upsell.

This plugin only diagnoses — it makes no changes to your site.

External services

The scan itself runs entirely on your own server. The tracker-definition list is
bundled with the plugin — no external request is made to perform a scan.

The plugin uses one optional external service:

dsgvochecker.de (operated by fepo) — an optional, paid full scan.

The result page shows an optional “Run three-phase scan” button. The plugin works
fully without it; nothing is sent unless you click the button.

• What it is: a deeper cookie/consent scan (JS-injected trackers + reject-path
  test) run by dsgvochecker.de.
• What data is sent and when: only if you click the button, a new browser tab
  opens at dsgvochecker.de with your site URL passed as a URL parameter, so the
  external service can analyse that page. Nothing is sent in the background.
• Terms of service: https://dsgvochecker.de/agb
• Privacy policy: https://dsgvochecker.de/datenschutz