Home › Guides › Cookie banner check
Is your cookie banner actually blocking trackers?
In short: a banner is only a message. What matters is whether pixels, chat and session-replay tools wait until the visitor says yes. In our scans, sites with a banner often still load trackers in the background before any click.
The 4 most common failures
1. The banner is set to show only in Europe
Many consent tools default to GDPR mode: European visitors see a banner, U.S. visitors see nothing and every tracker loads. For CIPA risk, the U.S. visitor is the one that matters.
2. "Notice only" mode
The banner says "We use cookies" with an OK button, but scripts are never blocked — they load before the click, and declining changes nothing.
3. Tag manager bypass
The banner blocks scripts on the page, but Google Tag Manager loads and fires the Meta Pixel, TikTok or Clarity without checking consent. Each tag needs consent settings, or GTM needs Consent Mode configured.
4. Hard-coded pixels and app embeds
A pixel pasted into the theme years ago, a Shopify app that injects its own script, or a WordPress plugin with "tracking" built in — none of them ask the banner for permission.
The 2-minute test anyone can do
- Open your site in a private / incognito window.
- Press F12 → Network tab → tick Preserve log.
- Reload and don't touch the banner. Wait 10–15 seconds.
- Type each of these in the filter:
facebook,google,tiktok,clarity,hotjar, and the name of your chat tool. Anything that shows up fired before consent. - Click Accept and check that those tools appear only now.
Prefer not to dig through developer tools? Our free scan does exactly this from a U.S. browser and lists every tool with a plain-English risk level. You can double-check any result with independent tools like Blacklight by The Markup.
What "fixed" looks like
| Before consent | After "Accept" |
|---|---|
| Banner visible to U.S. visitors. No ad pixels, chat or session replay. Google tags only send cookieless pings via Consent Mode. | Everything the visitor agreed to loads normally. Marketing keeps working for people who said yes. |
Test your banner in 15 seconds
Free, no signup. If trackers fire early, we fix it for $149 — banner, blocking, Consent Mode and a clean re-scan.
Common questions
Which free cookie banner actually blocks scripts?
Several do when configured correctly — for example CookieYes, Complianz (WordPress) or Shopify's built-in banner. The setting that matters is automatic or manual script blocking, plus showing the banner to U.S. visitors.
Is "Opt-out" enough in the U.S.?
Opt-out banners usually let trackers load until someone objects — exactly the "before consent" pattern in CIPA claims. For high-risk tools, opt-in (wait for yes) is the safer technical setup. Not legal advice.
We passed the test. Are we done?
Re-test after every new app, plugin or tag. New tools are the most common way trackers come back.