built to be checked
Built to be checked.
Every finding shows what we saw, the rule we read it against, and where that rule comes from. You can check each step yourself.
the four levels
The four levels
- Signal present.
- Is there a consent mechanism at all? A banner, a TCF API, Consent Mode defaults, a GPC read.
- Signal state.
- What did it say before any choice, after Accept and after Reject?
- Behavioural alignment.
- Did the site's requests, cookies and storage match what the signal said?
- Legal interpretation.
- Not ours to make. Whether the behaviour is lawful is for you and your legal adviser. We stop at level three.
the posture
When we can't see, we say so
If a page blocks us, or we find a banner we cannot operate, the result reads "Could not determine". It is shown, and left out of the counts. Every result also shows its coverage, as in "based on N of M checks", so a short list never passes for a complete one.
the sources
Where the rules come from
TakesNo is built from public sources only: every rule links to a public source. The Reject findings rest on these:
- The GDPR, including the accountability principle [S-1, Art. 5(2) and 24]
- The ePrivacy Directive, on storing or reading information on a visitor's device [S-2, Art. 5(3)]
- The EDPB's guidelines on the technical scope of that article [S-3]
- The Article 29 Working Party's opinion on which cookies are exempt from consent [S-301]
- The Open Cookie Database, for which vendor a cookie or request belongs to [S-26]
Each finding in a report links to its source, so you can read it yourself.
the limits
What one check can't tell you
- A check is one visit at one moment. Results can differ by region, time, device and returning visitors, so we record the settings and the UTC time with every check.
- We name the banners and vendors in our published catalogue. Others still show up as traffic, just without a name.
- We test what a visitor's browser can reach. Not your servers, your contracts or your vendors' back ends.
our own site
Our own site
This site sets no cookies and loads nothing from a third party. Scan it.
one scan