How it works Pricing For agencies About Free Scan →
FAQ

Frequently asked questions

Straight answers to what buyers ask most — what's in the paid report, whether the scan is private, and what to do if your site shows issues.

What does the paid compliance report include?

The detailed PDF report — from €49, or from S$68 if you selected Singapore — includes:

  • Cookie and consent check — which tracking scripts the page source loads, and whether a consent mechanism is present in it, assessed against the consent requirements of the jurisdiction you select. Where that jurisdiction requires refusing to be as easy as accepting, and the banner's buttons appear in the page source, we also check for a refuse option; a banner drawn by a consent platform's JavaScript is recorded as present and is not tested further. We read the page source; we do not load your site in a browser, so we do not observe which cookies are actually written
  • Privacy policy check — whether a privacy policy or personal-data notice is reachable from the pages we read. For France we also read its text and record which of the items a privacy notice must state we found and which we did not; for Germany and Singapore we check that it exists and not what it contains
  • Legal notices — whether the operator-identification page required in the jurisdiction you select is reachable from the pages we read: mentions légales in France, where we also read the page and record which of the required mentions we found and which we did not; Impressum in Germany, where we check that it exists and not what it contains. Singapore has no equivalent requirement, so this check does not run on a Singapore report
  • Trackers — Google Analytics flagged with compliance status
  • Overall risk level with line-by-line remediation notes

After payment you receive an access key by email. You start the report yourself from the report page; generation takes as long as your site takes to read, and we email you the PDF when it is ready.

Is my scan private? Do you store my website's data?

Yes — the scan is anonymous by default. Sitetals does not require an account, email, or login to run a free scan. We scan your URL like any web crawler would.

If you purchase a report, checkout collects the billing details needed to issue a compliant invoice — your name, company, billing address and, where you have one, your VAT number — together with the email address the report is delivered to and the optional purchase-order and cost-centre references you choose to enter.

Full details: Privacy Policy.

My scan shows issues — what happens next? Am I at risk of a fine?

Non-compliance is common, especially for small sites built before 2020 or using plugins that set cookies without consent. Finding issues on a scan is normal — it means Sitetals is doing its job.

Enforcement context: In France the CNIL, and in Germany the state data protection authorities (Landesdatenschutzbehörden), generally prioritise enforcement around complaints and larger operators. Many small sites address identified issues without enforcement action. This is general information for context only — not a legal-risk assessment of your specific situation; see our disclaimer or consult a qualified adviser.

What to do:

  1. Purchase the detailed report — from €49, or from S$68 if you selected Singapore — with specific remediation steps for your domain
  2. Fix items in priority order (cookie consent first — it's what regulators check first)
  3. Re-scan to confirm the findings are resolved

The report is the fastest path from uncertainty to a documented, prioritised fix plan.