fepo — GDPR Cookie Scanner
fepo GDPR Cookie Scanner is a diagnostic plugin that checks whether your cookie consent banner is really effective — or whether trackers fire before a visitor clicks “Accept”.
It is not a cookie banner. It is a diagnostic tool that audits whatever cookie banner you already have, independent of which cookie management platform you use.
What the plugin checks:
- Which Cookie Management Platform (CMP) is active (Cookiebot, Usercentrics, Borlabs, Complianz, CookieYes, and more).
- Which third-party trackers (Google Analytics, Meta Pixel, HotJar, …) are present in the page source.
- Whether those trackers are visible in the static HTML before any consent is given — a sign that the CMP integration may be misconfigured.
- A CMP-specific remediation guide pointing to the vendor’s official documentation.
What the plugin does NOT do:
- It does not install, configure, or modify your cookie banner.
- It does not change any files on your site.
- It does not collect any data from your visitors.
Scan modes:
The plugin uses a PHP-based quick-scan (Stufe A) that works on every WordPress host — no Headless Chrome, no Node.js, no extra dependencies. For JS-injected trackers (e.g. Google Tag Manager tags) and a full three-phase Reject-Path test, an optional full scan via dsgvochecker.de is available as an upsell.
This plugin only diagnoses — it makes no changes to your site.
External services
The scan itself runs entirely on your own server. The tracker-definition list is bundled with the plugin — no external request is made to perform a scan.
The plugin uses one optional external service:
dsgvochecker.de (operated by fepo) — an optional, paid full scan.
The result page shows an optional “Run three-phase scan” button. The plugin works fully without it; nothing is sent unless you click the button.
- What it is: a deeper cookie/consent scan (JS-injected trackers + reject-path test) run by dsgvochecker.de.
- What data is sent and when: only if you click the button, a new browser tab opens at dsgvochecker.de with your site URL passed as a URL parameter, so the external service can analyse that page. Nothing is sent in the background.
- Terms of service: https://dsgvochecker.de/agb
- Privacy policy: https://dsgvochecker.de/datenschutz