Free website privacy scanner
Free website privacy scanner: is your site ready for the Privacy Act?
Scan your website free for cookies, trackers, consent banner and privacy policy gaps. Plain English report, results in 60 seconds.
- Meta PixelFires before consent
- Google Analytics 4Waits for consent
- HotjarNot in privacy policy
- Privacy policy link in footerFound
- Overseas providers named in policyMissing
Why businesses trust Savira
- Australian owned
- Account data and consent records hosted in Australia
- Built for the Australian Privacy Principles
From report to fixed
Five checks, flagged
Step 1: Connect your site
Install the website plugin, paste your licence key and your banner is live. About 10 minutes.
Step 2: Publish your policy
Answer a few questions and publish a privacy policy from an Australian template.
Step 3: Privacy policy
Whether it is easy to find and covers the basics.
What the scan checks
Five checks, one report
Cookies and trackers
What loads, and whether it loads before consent.
Consent banner
Whether you have one and whether it blocks scripts.
Privacy policy
Whether it is easy to find and covers the basics.
Third-party scripts
Analytics, ads and chat tools collecting data.
Overseas data
Tools that send information outside Australia.
Want the full picture?
The scan only sees your website.
Sample report
What your scan report shows
Each finding comes with what it means in plain English and the usual fix. Here is what a typical report for a small business website looks like.
| Finding | What it means | Usual fix |
|---|---|---|
| Tracking runs before consent | Google Analytics and the Meta pixel loaded before the visitor chose anything | Add a banner that blocks these tags until the visitor agrees |
| No consent banner found | Visitors are not asked before cookies are set | Add a banner with accept, reject and change options |
| Privacy policy does not name your trackers | Your policy does not tell people which third parties receive their data | List the tools you use and what they collect |
| No privacy contact | There is no clear way to ask about personal information | Add an email address or form for privacy questions |
| Marketing box ticked by default | A sign-up form assumes consent to marketing | Leave the box unticked so people opt in |
| Missing security headers | Your site does not send headers that help browsers block some attacks | Ask your developer or host to add them |
Each finding is marked good, check or risk, so you can see what to fix first. The report also picks a fix you can do in about five minutes.
Scope
What the scanner checks, and what it does not
The scanner loads your public site the way a first-time visitor would and records what happens before and after a consent choice.
What it checks
- Cookies and tracking scripts, and whether they load before consent
- Whether a consent banner appears and offers a real choice
- Your privacy policy: whether it exists, is easy to find and names a contact and your trackers
- Forms that collect personal information, including pre-ticked marketing boxes
- Basic security headers
What it does not check
- Pages behind a login, such as a client portal or checkout after sign-in
- How you store, secure or share data inside your business
- Whether your privacy policy is accurate for your business
- Apps, email systems and offline records
Nothing is installed or changed on your site and you do not need an account. You get one free scan a day, and results in 60 seconds. If you want the PDF report, add your email at the end and we send it to you. A scan is a starting point, not legal advice.
Fix what it finds
Guides for the most common findings
Most reports flag the same three things: analytics, pixels and the banner. These guides explain each one.
- Google Analytics: Using GA4 with consent in Australia
- Tracking pixels: Tracking pixels and privacy: what the OAIC found
- Your banner: How to test your cookie banner and Do you need a cookie banner in Australia?
- Health websites: OAIC pixel determinations for health sites
How do I check what cookies my website uses?
Run a free scan. The scanner loads your site like a new visitor and lists every cookie and tracking script it finds, with results in 60 seconds.
Does my website track visitors before consent?
The scan shows you. It records which scripts load before a visitor makes a choice, and flags any that should wait for consent.
Is the scan free?
Yes. Three free scans a day, no account needed, and nothing is installed on your site.
Is this a free website privacy audit?
It is a free first-pass audit of what your site shows from the outside. A full audit also covers how you handle data internally.
What happens to my email?
We use it to send your report. We keep it for 12 months, then delete it.