A cookie scanner that keeps looking
Consent Studio finds where your setup is not doing what your banner says it does, names the page it happens on, and tells you what to change. A short list worth acting on, not an inventory to read.
- Every page, every week
- Alerts on what changed
- On every plan
From €10 a month. No credit card, no per-visitor billing.
An inventory goes out of date the week you take it
The first scan is genuinely useful and it is not the point. What it cannot tell you is anything about next month.
Somebody adds a tag
A marketing team runs a campaign, an agency installs a pixel to measure it, and nobody tells the person who owns the consent configuration. The tag is in a category the banner has never heard of, so nothing gates it.
A vendor changes what they load
A script you already approved starts pulling a second one from a different host after an update. You approved the first party, not everything it decides to call, and the change arrives without a release note.
A page nobody looks at goes wrong
The homepage is checked constantly. The 2019 landing page with the old embedded video is not, and it is still indexed and still serving. Coverage has to mean every page rather than a sample.
Nothing on your own site looks wrong
None of this breaks anything. There is no error, no alert and no drop in traffic, so a site can be out of compliance for months while every dashboard says it is healthy.
What the crawl reports
Cookies set before consent
Every cookie written on a page load with no consent given, with the name, the host that set it and the page it happened on. This is the finding that matters most, because it is the one a regulator can reproduce.
- Name and host
- Page by page
- Before and after consent
Third party calls
Requests leaving your site for somebody else’s server, including the ones a script you approved made on its own behalf. Knowing which vendor pulled in which other vendor is usually the surprise.
- Every request
- Who called whom
- New hosts flagged
What changed since last week
The report leads with the difference rather than the total. A list of ninety cookies is unreadable. Three new ones since Tuesday is a thing somebody can act on this afternoon.
- Difference first
- Weekly by default
- Alerts by email
Coverage of every reachable page
Every page we can reach, not a sample and not just the templates. Old landing pages are where findings hide, precisely because nobody has opened one in two years.
- Every reachable page
- No page limit
- Unlimited domains on request
How the scan gets going
Register the domain
Add the site. The crawl starts on its own, so there is nothing to schedule.
Read the first report
This is the inventory, and it is usually the one that surprises people. Expect to recognise about two thirds of it.
Fix or categorise
Anything firing early either gets gated by the tag manager or gets removed. Both are decisions somebody has to make.
Watch the difference
From then on the report is short, because it leads with what changed rather than with everything that is there.
The scan is not a separate product
Monitoring is on every plan alongside the banner and the tag manager, because a site that cannot see what changed cannot stay correct. There is no tier where checking your work costs extra.
Essential
€10/month
For a single site that has to be compliant, and stay that way.
- Unlimited pages and displays
- 200,000 consent actions a month
- The full stack, not a starter tier
Professional
€36/month
For growing teams that run on data, and the agencies serving them.
Try Professional for FreeEnterprise
From €250/month
For a volume, or an obligation, a standard plan cannot answer.
Explore EnterpriseAgencies & Resellers
Buy at a partner rate and resell client sites at your own price.
Discover Partner ProgrammePublic Sector
Government, healthcare and education run on Enterprise.
See Enterprise
Scanning sites like these every week
Other things people are working out
Questions about scanning
How often does the scan run?
Weekly by default, on every plan, and it starts by itself once the domain is registered. Enterprise setups can run more often. Weekly is deliberate rather than a limit: it is frequent enough that a change is caught while somebody still remembers making it, and infrequent enough that the report stays worth opening.
Does it scan every page or a sample?
Every page the crawler can reach. Sampling is what makes most scanners miss things, because the pages that go wrong are the old landing pages nobody has looked at in two years, and a sample weighted toward what is linked from the homepage will never include them.
What is the difference between this and a cookie declaration?
A declaration is a list you publish. A scan is a check on whether that list is still true. Plenty of sites publish an accurate declaration and are still non-compliant, because the declaration describes the configuration and the scan describes the behaviour.
Will it find things on pages behind a login?
Not by default, because the crawler visits the site the way an anonymous visitor does. That is usually the right scope, since the consent obligation bites hardest on the pages anybody can reach. Enterprise customers with a members area can talk to us about covering it.
What do I do with a finding?
Either gate it or remove it. If the tag is one you want, put it in a category so the tag manager holds it until consent covers it. If nobody can say what it is for, that is usually the answer, and a surprising number of findings are campaign pixels that outlived their campaign.
What does Consent Studio cost?
Ten euro a month per domain, with no limit on pages and no billing per visitor. That covers the banner, the tag manager and the weekly scan together, because all three are on every plan. Agencies and organisations running many domains have a partner rate, and organisations outside the fair use range have an Enterprise plan.
Where is our consent data stored?
In Amsterdam, on infrastructure owned and operated by Scaleway, a French company. That matters beyond the map pin: Scaleway is independently French rather than a European subsidiary of a US parent, so neither they nor we fall under the US CLOUD Act. Consent Studio itself is built and owned in the Netherlands by Vallonic.
Get Started with the Full Consent Stack
Everything you need in one bundle. Consent Studio provides you with a consent banner, scanner and client-side tag manager that guarantees no data ever gets transferred overseas.
Read the documentation
Our help center walks through every integration, plugin and template step by step, with screenshots. It is written and kept current by the people who build Consent Studio.