Skip to main content
Free CIPA-oriented tracking check

Free CIPA Website Scanner

Check the trackers, cookies, scripts and third-party activity observable when your public website first loads.

Start with a free automated scan aligned to CIPA-related technical questions. Receive a PDF summary by email, without providing website admin access or a credit card.

  • Free initial scan
  • No credit card required
  • Technical PDF report by email

No code changes. No backend access. Public website behavior only. See what the scanner checks.

Automated first-load observation only. Not a legal CIPA determination, a consent-state audit or an allegation-specific forensic review.

Start your free CIPA website scan

Enter your public website URL and email address. The free scan reviews observable initial website activity; it does not test Accept/Reject interactions.

We will send your PDF report to this address.

The selected framework determines the scan region and technical checks in your report. It does not determine which laws apply to your website.

Not sure which framework to select? Use the Compliance Framework Finder

Free No card No login required

Automated initial/no-interaction scan of publicly accessible website activity. No website changes are made.

What the free CIPA scanner can help you see

The scan observes an initial, publicly accessible browsing state. These are technical signals to investigate, not findings that a law was violated.

Pixels and third-party scripts

Identify observable scripts and tracking-related technologies that load during the scanned session, where detectable.

Cookies and storage signals

Review cookies and browser-storage activity observed during the initial public-page visit.

Third-party connections

See initial requests and external domains detected by automated browser observation, subject to report coverage.

Initial consent indicators

Observe available consent-related signals without clicking Accept, Reject or changing preferences.

Availability of individual observations depends on the website, testing conditions and free-report coverage. Learn about our audit methodology and limitations.

A free scan is a starting point, not your response strategy

A CIPA demand letter may allege that a pixel, chatbot, analytics tool or another third party received particular information. A basic scan can reveal some current activity, but cannot reconstruct an earlier session or resolve the legal allegations.

Before changing the website

Keep the letter, attachments, response dates and existing technical records. Coordinate preservation and any site changes with your attorney, particularly when the alleged behavior could change after a plugin, tag or consent-banner update.

Read our CIPA demand-letter evidence guide

How the free scan works

Three straightforward steps, from your website URL to an initial technical report.

1. Submit your website

Enter a publicly accessible website URL and your email address in the existing secure scan form. The CIPA framework is preselected.

2. Automated initial review

Auditzo runs a browser-based observation of initial website activity using the framework's configured test region.

3. Review your PDF

Receive an email with your free technical report and decide whether additional testing is warranted.

Free scanner vs. manual CIPA-related evidence review

A free scan is useful for awareness. An allegation-specific investigation may require controlled browser states, user journeys and preserved evidence. Manual services are separately scoped.

Review activity Free scan Manual evidence review*
Initial public-page activityIncludedIncluded when in scope
Cookie, script and third-party request observationsBasic automated visibilityDeeper review when scoped
Accept / Reject consent comparisonsNot includedAvailable when scoped
Search, forms, chat and checkout journeysNot includedAvailable when scoped
Downloadable HAR / raw evidence packageNot includedAvailable when scoped
Human verification of findingsNot includedIncluded for scoped findings

*Manual deliverables depend on the agreed scope. Neither review provides legal advice, legal certification or a finding of liability.

Explore manual CIPA tracking evidence review

California CIPA update: SB 690 (signed September 30, 2026)

SB 690 is scheduled to take effect January 1, 2027. It changes who may bring certain civil actions involving website and app conduct alleged under California Penal Code §638.51; it does not amend §631. Its applicability to a particular letter or case, including the retroactivity provision, requires qualified legal review. Read the chaptered bill text.

Know what was observed, and what wasn't

Auditzo distinguishes initial automated observations from human-reviewed browser evidence. A detected tracker does not prove what was transmitted in every session, and a clean first-load scan does not establish that a site is free of CIPA-related issues.

Documented methodology

Review our approach to test scope, environment, verification and coverage limitations.

See methodology

Technical case study

See how a law firm used scoped browser and request-level evidence for website-tracking review.

View law firm case study

Manual escalation path

When allegations require specific user journeys or preserved requests, define a focused manual scope.

Explore counsel support

Free CIPA scanner FAQs

Yes. The initial automated scan is free, with no credit card or account required. Enter your public website URL and email address to receive the generated PDF report.

No. It can identify observable technical signals that may deserve review. Determining legal applicability, consent, liability or defenses requires a qualified attorney and, where appropriate, additional technical evidence.

No. It observes the initial website state without clicking Accept or Reject. Consent-state comparisons are available through a separately scoped manual review.

You can use it for preliminary technical awareness and share it with counsel. It is not an allegation-specific forensic report, does not establish what happened in an earlier visitor session and does not replace evidence preservation.

No. Website behavior may vary by page, device, region, session, user action and prior consent. A first-load automated scan cannot cover all of those states.

Request a scoped manual tracking and consent audit. Those deliverables and tests can be included when agreed in advance; they are not part of the free scan.

See what your website is doing on first load

Run the free initial CIPA-oriented scan, review the technical observations, and choose deeper testing only if your situation requires it.