Which trackers does your website set — without your knowledge?
Plugin updates, CMS changes, or marketing tools constantly introduce new trackers. Our scanner finds them all — including the hidden ones.
Why Tracker Detection Is Essential
Unknown trackers = violation
Every tracker not listed in your privacy policy is a GDPR violation. Even if you didn't embed it intentionally.
Trackers come and go
WordPress plugin updates, Google Tag Manager changes, or new widgets can add new trackers at any time.
Privacy policy must be current
Your privacy policy must list all active trackers. Compliso can update it automatically.
35+ Trackers We Detect
From Google Analytics to TikTok to Hotjar — sorted by category and GDPR risk.
Analytics & Ads
Captures user behavior, page views, events. Particularly critical since the Schrems II ruling due to US data transfer.
Dynamically loads additional scripts. Can inject extra trackers without the site owner's knowledge.
Tracking pixel for conversion measurement. Sets cookies and sends data to Google servers.
Captures user behavior and sends it to Meta. CNIL already imposed fines in 2022.
Social Media Trackers
Relatively new tracker that sends data to ByteDance in China. Particularly sensitive from a data protection perspective.
Tracks page visits and links them to LinkedIn profiles. Often overlooked in GDPR audits.
Conversion tracking for Pinterest campaigns. Sets cookies and tracks user behavior.
Session Recording Tools
Records mouse movements, clicks, and scroll behavior. May accidentally capture form contents.
Free Hotjar alternative from Microsoft. Records session replays and sends data to Microsoft.
Captures complete user sessions including DOM snapshots. Particularly high GDPR risk.
Heatmaps and session replays. Sets cookies and captures detailed user behavior.
Additional session recording tools with similar risk profiles.
External Resources
Transmits IP address to Google on every page load. German courts have already awarded damages of 100 EUR per visitor.
Video embeds load trackers and set cookies — even if the visitor doesn't play the video.
Like Google Fonts — loads typefaces from external servers with IP transmission.
jQuery from cdnjs, Bootstrap from jsdelivr — each load transmits the visitor's IP address.
4 Detection Methods
Our scanner uses four different methods to reliably find even hidden trackers.
Third-Party Request Analysis
All outgoing HTTP requests are captured and matched against a database of known tracker domains.
Cookie Analysis
Cookies are classified by name and domain. Known tracking cookies are automatically detected and assigned to their provider.
LocalStorage Scanning
localStorage and sessionStorage are also checked for known tracking patterns (e.g. _ga, _fbp, _hjSession).
Script Analysis
The scanner identifies embedded scripts by their URLs and maps them to known tracking providers.
Scanner finds trackers. Compliso solves the problem.
Detection
All trackers are found and assigned to their provider — with GDPR risk assessment.
Banner integration
The Compliso cookie banner automatically blocks detected trackers until the user consents.
Privacy policy
New trackers are automatically added to your privacy policy.
Notification
You are immediately notified by email about new or unknown trackers.
Find all trackers on your website
Start a free demo scan and find out which trackers your website sets without your knowledge.