# Sitetals

> Sitetals is an independent website compliance scanner for the EU (France and Germany) and Singapore: it checks a website against GDPR/CNIL, Impressum/TTDSG and PDPA requirements with a free instant scan and one-time paid PDF reports from €49 — no subscription.

Sitetals focuses on the compliance dimensions regulators actually enforce — cookie consent, privacy policies, legal notices (Impressum, mentions légales), and third-party tracking — using a passive, non-intrusive scanning methodology. The site is available in English, French (/fr/) and German (/de/); the URLs below are the English canonical pages.

## Core pages

- [Home](https://sitetals.com/): EU & Singapore website compliance scanner — free instant check, detailed PDF reports from €49
- [How it works](https://sitetals.com/how-it-works.html): Submit your domain, get instant compliance results for France and Germany
- [What we check](https://sitetals.com/what-we-check.html): GDPR, CNIL, Impressum and cookie compliance dimensions French and German regulators focus on
- [Pricing](https://sitetals.com/pricing.html): One-time pricing by site size, from €49 to €499, agency plans available — no subscription
- [Singapore PDPA scan](https://sitetals.com/sg.html): Free PDPA compliance check for Singapore websites — privacy policy, DPO contact, consent; report from S$68
- [Crisis response](https://sitetals.com/crisis.html): Time-sensitive guides if you received an Abmahnung or a CNIL investigation notice
- [Methodology](https://sitetals.com/methodology.html): Passive scanning methodology, legitimate interest assessment, and responsible disclosure policy
- [FAQ](https://sitetals.com/faq.html): What's in the €49 report, scan anonymity, and what to do about compliance issues
- [About](https://sitetals.com/about.html): Mission and approach of the independent EU compliance scanner
- [For AI & researchers](https://sitetals.com/for-ai.html): Structured, authoritative reference about Sitetals for AI models and answer engines
- [Contact](https://sitetals.com/contact.html): Support, billing, legal enquiries and partnerships — response within 1 business day
- [Guides index](https://sitetals.com/articles.html): All EU compliance guides — GDPR, CNIL, Impressum, cookie law
- [The checks we run](https://sitetals.com/checks.html): This is the complete set of checks Sitetals performs. Nothing outside this list is assessed, and nothing outside it is asserted in any scan or report

## Guides

- [Is my website GDPR compliant? 12 checks you're missing](https://sitetals.com/blog/01-hidden-compliance-risks.html): Cookie consent, privacy policy, legal notices and third-party tracking checks most businesses miss
- [France vs Germany enforcement](https://sitetals.com/blog/02-france-vs-germany.html): Two very different compliance enforcement ecosystems and which risk you are exposed to
- [GDPR and CNIL fines in 2026](https://sitetals.com/blog/03-real-cost-noncompliance.html): 13 real enforcement cases from France and Germany, fine amounts and triggers
- [Continuous GDPR monitoring](https://sitetals.com/blog/09-continuous-monitoring.html): How to monitor compliance on an ongoing basis as banners, scripts and rules drift
- [Received an Abmahnung?](https://sitetals.com/blog/10-abmahnung-response.html): What to do in the next 14 days after a German cease-and-desist
- [Why SMEs are Abmahnung targets](https://sitetals.com/blog/11-abmahnung-sme-targets.html): How the German Abmahnung industry works and its financial reality for small businesses
- [How CNIL finds non-compliant websites](https://sitetals.com/blog/12-how-cnil-finds-websites.html): Manual online controls, complaints and sector-wide campaigns explained
- [Inside a CNIL investigation](https://sitetals.com/blog/13-cnil-investigation-process.html): Process, timeline and costs from first contact to final sanction
- [Free alternatives to 2GDPR](https://sitetals.com/blog/2gdpr-alternative.html): What replaced 2GDPR's discontinued free GDPR scanner
- [WordPress CNIL compliance 2026](https://sitetals.com/blog/wordpress-cnil-compliance-2026.html): What French WordPress site owners must do — banners, trackers, privacy policies
- [Sitetals vs iubenda](https://sitetals.com/blog/sitetals-vs-iubenda.html): Pricing, jurisdiction coverage, PDPA support and one-time vs subscription compared
- [Sitetals vs Termly](https://sitetals.com/blog/sitetals-vs-termly.html): EU enforcement depth, CNIL coverage and pricing for European businesses
- [Sitetals vs WebLegal](https://sitetals.com/blog/sitetals-vs-weblegal.html): Side-by-side comparison of jurisdictions, pricing and output format
- [Where your customers are is where your obligations are](https://sitetals.com/blog/where-your-customers-are.html): Six data protection regimes, six scope provisions, one shared structure: each attaches to where the individual is, not where the company is. What GDPR, UK GDPR, PDPA, LGPD, CCPA and PIPL actually say about reach
- [Your checkout already told them which countries you serve](https://sitetals.com/blog/your-checkout-already-told-them.html): Currency, hreflang, country dropdowns, payment rails and tracking scripts are published by your site to anyone who loads it — and they are the same factors the territorial scope tests look at. How to read your own page source
- [Do you really need a GDPR record of processing? The under-250-employees exemption, explained honestly](https://sitetals.com/blog/gdpr-record-of-processing-under-250-exemption.html): Article 30 GDPR exempts organisations under 250 employees from the record of processing, except in three cases that cover almost everyone. The text, a three-question test, and how to build the record in an afternoon
- [Mentions légales: what French law requires on your website (and what the CNIL does not check)](https://sitetals.com/blog/mentions-legales-french-website-legal-notice.html): The mandatory legal notice items on a French website under the LCEN and consumer code, where to put them, the usual mistakes, and which authority checks what
- [The CNIL's 2026 priority inspections: what they mean for a small business website](https://sitetals.com/blog/cnil-2026-priority-inspections-small-business-website.html): The inspection themes the CNIL announced for 2026, what they cover in practice, and what a small business that recruits online or manages members should review on its website before being asked
- [Cookie banners: rejecting as easy as accepting, what the CNIL's 2020 guidelines require](https://sitetals.com/blog/cookie-banner-reject-as-easy-as-accept-cnil-guidelines.html): The CNIL's 2020 cookie guidelines and recommendation explained for a small-business website: a reject button, nothing set before the choice, consent lifetime, exempt trackers, and how to fix an existing banner
- [GDPR and DSGVO: one audit for agencies managing French and German websites](https://sitetals.com/blog/gdpr-dsgvo-one-audit-agencies-french-german-websites.html): Same regulation, two national laws and two authorities: what is identical and what differs between a French and a German website (legal notice and Impressum, cookies, analytics, privacy policy), and how an agency runs a single review for both
- [The web developer's technical GDPR checklist before a site goes live](https://sitetals.com/blog/gdpr-technical-checklist-web-developer-before-launch.html): What the web developer can settle alone before launch: third-party scripts loaded after consent, forms, HTTPS, logs, backups, admin accounts, processors. A tick-box list, item by item
- [Google Analytics and the GDPR: the CNIL's 2022 position and the alternatives](https://sitetals.com/blog/google-analytics-gdpr-cnil-2022-position-alternatives.html): Why the CNIL found in 2022 that Google Analytics as configured by default did not comply, what has changed since, and the concrete options for a small business: consent-exempt audience measurement, a proxy, or a tool hosted in Europe
- [Data transfers outside the EU: US tools, the Data Privacy Framework and standard clauses, explained for a small business](https://sitetals.com/blog/international-data-transfers-dpf-sccs-small-business.html): When using a US tool counts as a transfer under Chapter V GDPR, what the Data Privacy Framework and the standard contractual clauses cover, and the steps for a small business using email, a CRM or hosting outside the EU

## Singapore PDPA guides

- [Singapore PDPA website health check 2026](https://sitetals.com/blog/singapore-pdpa-website-health-check-2026.html): 10,298 Singapore websites scanned and five 2025 PDPC decisions read in full — 62.4% showed a visible gap
- [PDPC enforcement decisions 2025–2026](https://sitetals.com/blog/pdpc-enforcement-decisions-2025-2026.html): Five PDPC decisions, S$455,000 in penalties, and the three failure patterns behind all five
- [PDPA privacy policy checklist](https://sitetals.com/blog/pdpa-privacy-policy-checklist-singapore.html): Eleven things worth covering in a Singapore privacy policy, and which of them the PDPA actually requires
- [PDPA DPO requirements](https://sitetals.com/blog/pdpa-dpo-singapore.html): Section 11(3) requires a designated DPO; regulation 1A says where to publish the contact
- [PDPA cookie banners](https://sitetals.com/blog/pdpa-cookie-banner-singapore.html): The PDPA does not mention cookies, but it requires consent before a tracker collects personal data
- [PDPA for foreign businesses](https://sitetals.com/blog/pdpa-foreign-business-singapore.html): No Singapore office does not mean no PDPA; a DPO can sit anywhere, and GDPR compliance does not carry over
- [PDPA cross-border data transfer](https://sitetals.com/blog/pdpa-cross-border-data-transfer-singapore.html): Section 26 and regulations 10–12 set the real test for sending data overseas; the rules changed in March 2026
- [Shopify PDPA compliance](https://sitetals.com/blog/shopify-pdpa-singapore.html): Step-by-step PDPA guide for Shopify merchants
- [WooCommerce PDPA compliance](https://sitetals.com/blog/woocommerce-pdpa-singapore.html): The PDPA exposure is usually in the plugins, not the platform — and a nine-step review

## Optional

- [Privacy policy](https://sitetals.com/privacy.html): What personal data Sitetals collects and your GDPR rights
- [Terms of use](https://sitetals.com/terms-of-use.html): Terms for the compliance scanning service
- [Disclaimer](https://sitetals.com/disclaimer.html): Independent compliance research — not legal advice
- [Cookie policy](https://sitetals.com/cookie-policy.html): Which cookies the site uses and how to manage them
- [Security disclosure policy](https://sitetals.com/security-policy.html): How to report vulnerabilities responsibly
- [Site français](https://sitetals.com/fr/): French version of the site and guides
- [Deutsche Version](https://sitetals.com/de/index.html): German version of the site and guides
- [Cookie Policy (Singapore)](https://sitetals.com/sg/cookie-policy.html): Singapore Cookie Policy for Sitetals.com — what QUIKFORGE LIMITED stores on your device under the Personal Data Protection Act 2012 (PDPA), and how to manage your choice
- [Privacy Policy (Singapore)](https://sitetals.com/sg/privacy.html): Singapore Privacy Policy for Sitetals.com — how QUIKFORGE LIMITED handles personal data under the Personal Data Protection Act 2012 (PDPA), including our designated Data Protection Officer
- [Terms of Use (Singapore)](https://sitetals.com/sg/terms-of-use.html): Terms of Use for Sitetals.com for users in Singapore — electronic contract validity under the Electronic Transactions Act 2010, paid report delivery, cancellation window, and liability terms
- [Privacy policy: what Articles 13 and 14 GDPR require, starting from your record of processing](https://sitetals.com/blog/gdpr-privacy-policy-articles-13-14-from-your-record.html): What Articles 13 and 14 GDPR require in a privacy policy, item by item, and how to write it in half a day from the inventory in your record of processing