{"id":330314,"date":"2026-06-23T10:37:50","date_gmt":"2026-06-23T10:37:50","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/fepo-gdpr-cookie-scanner\/"},"modified":"2026-06-23T10:37:25","modified_gmt":"2026-06-23T10:37:25","slug":"fepo-gdpr-scanner","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/fepo-gdpr-scanner\/","author":23507807,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.1","stable_tag":"1.0.1","tested":"7.0","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"fepo \u2014 GDPR Cookie Scanner","header_author":"fepo","header_description":"Checks whether your cookie banner actually works \u2014 trackers before consent. Powered by fepo.","assets_banners_color":"fcf9f8","last_updated":"2026-06-23 10:37:25","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/fepo.app","rating":0,"author_block_rating":0,"active_installs":0,"downloads":37,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.1":{"tag":"1.0.1","author":"fepo","date":"2026-06-23 10:37:25"}},"upgrade_notice":{"1.0.0":"<p>First public release of the fepo GDPR Cookie Scanner.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3583103,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3583103,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3583143,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3583143,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3583075,"resolution":"1","location":"assets","locale":"","width":1476,"height":939},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3583075,"resolution":"2","location":"assets","locale":"","width":1476,"height":1208}},"screenshots":{"1":"Scan page \u2014 the homepage URL and the \"Check now\" button, in native WP-Admin style.","2":"Scan result \u2014 traffic-light verdict, the detected cookie banner with its setup guide, and the trackers found in the source code."}},"plugin_section":[],"plugin_tags":[16626,185891,154545,131785,5352],"plugin_category":[],"plugin_contributors":[265332,268505],"plugin_business_model":[],"class_list":["post-330314","plugin","type-plugin","status-publish","hentry","plugin_tags-cookie-consent","plugin_tags-cookie-scanner","plugin_tags-dsgvo","plugin_tags-gdpr","plugin_tags-tracker","plugin_contributors-fepo","plugin_contributors-michaelpehl","plugin_committers-fepo"],"banners":{"banner":"https:\/\/ps.w.org\/fepo-gdpr-scanner\/assets\/banner-772x250.png?rev=3583143","banner_2x":"https:\/\/ps.w.org\/fepo-gdpr-scanner\/assets\/banner-1544x500.png?rev=3583143","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/fepo-gdpr-scanner\/assets\/icon-128x128.png?rev=3583103","icon_2x":"https:\/\/ps.w.org\/fepo-gdpr-scanner\/assets\/icon-256x256.png?rev=3583103","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/fepo-gdpr-scanner\/assets\/screenshot-1.png?rev=3583075","caption":"Scan page \u2014 the homepage URL and the \"Check now\" button, in native WP-Admin style."},{"src":"https:\/\/ps.w.org\/fepo-gdpr-scanner\/assets\/screenshot-2.png?rev=3583075","caption":"Scan result \u2014 traffic-light verdict, the detected cookie banner with its setup guide, and the trackers found in the source code."}],"raw_content":"<!--section=description-->\n<p><strong>fepo GDPR Cookie Scanner<\/strong> is a diagnostic plugin that checks whether your cookie consent banner is really effective \u2014 or whether trackers fire before a visitor clicks \"Accept\".<\/p>\n\n<p>It is not a cookie banner. It is a diagnostic tool that audits whatever cookie banner you already have, independent of which cookie management platform you use.<\/p>\n\n<p><strong>What the plugin checks:<\/strong><\/p>\n\n<ul>\n<li>Which Cookie Management Platform (CMP) is active (Cookiebot, Usercentrics, Borlabs, Complianz, CookieYes, and more).<\/li>\n<li>Which third-party trackers (Google Analytics, Meta Pixel, HotJar, \u2026) are present in the page source.<\/li>\n<li>Whether those trackers are visible in the static HTML <em>before<\/em> any consent is given \u2014 a sign that the CMP integration may be misconfigured.<\/li>\n<li>A CMP-specific remediation guide pointing to the vendor's official documentation.<\/li>\n<\/ul>\n\n<p><strong>What the plugin does NOT do:<\/strong><\/p>\n\n<ul>\n<li>It does not install, configure, or modify your cookie banner.<\/li>\n<li>It does not change any files on your site.<\/li>\n<li>It does not collect any data from your visitors.<\/li>\n<\/ul>\n\n<p><strong>Scan modes:<\/strong><\/p>\n\n<p>The plugin uses a PHP-based quick-scan (Stufe A) that works on every WordPress host \u2014 no Headless Chrome, no Node.js, no extra dependencies. For JS-injected trackers (e.g. Google Tag Manager tags) and a full three-phase Reject-Path test, an optional full scan via dsgvochecker.de is available as an upsell.<\/p>\n\n<p>This plugin only diagnoses \u2014 it makes no changes to your site.<\/p>\n\n<h3>External services<\/h3>\n\n<p>The scan itself runs entirely on your own server. The tracker-definition list is\nbundled with the plugin \u2014 no external request is made to perform a scan.<\/p>\n\n<p>The plugin uses one optional external service:<\/p>\n\n<p><strong>dsgvochecker.de<\/strong> (operated by fepo) \u2014 an optional, paid full scan.<\/p>\n\n<p>The result page shows an optional \"Run three-phase scan\" button. The plugin works\nfully without it; nothing is sent unless you click the button.<\/p>\n\n<ul>\n<li>What it is: a deeper cookie\/consent scan (JS-injected trackers + reject-path\ntest) run by dsgvochecker.de.<\/li>\n<li>What data is sent and when: only if you click the button, a new browser tab\nopens at dsgvochecker.de with your site URL passed as a URL parameter, so the\nexternal service can analyse that page. Nothing is sent in the background.<\/li>\n<li>Terms of service: https:\/\/dsgvochecker.de\/agb<\/li>\n<li>Privacy policy: https:\/\/dsgvochecker.de\/datenschutz<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin via \"Plugins \u2192 Add New \u2192 Upload\" or install from the WordPress plugin directory.<\/li>\n<li>Activate the plugin.<\/li>\n<li>In WordPress admin, click \"fepo GDPR Scanner\" in the sidebar.<\/li>\n<li>Click \"Check now\" \u2014 the scan runs on your server.<\/li>\n<\/ol>\n\n<p>No account, no API key, no credit card required.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20the%20plugin%20modify%20my%20website%3F\"><h3>Does the plugin modify my website?<\/h3><\/dt>\n<dd><p>No. This plugin is purely diagnostic. It does not write to any files, install anything, modify CSS\/JS, or change any WordPress settings.<\/p><\/dd>\n<dt id=\"does%20it%20work%20on%20every%20wordpress%20host%3F\"><h3>Does it work on every WordPress host?<\/h3><\/dt>\n<dd><p>Yes. The PHP quick-scan (Stufe A) works on every host \u2014 shared hosting, managed WordPress, VPS, all fine. No external dependencies beyond PHP 7.4.<\/p><\/dd>\n<dt id=\"what%20is%20the%20difference%20between%20the%20quick-scan%20and%20the%20full%20scan%3F\"><h3>What is the difference between the quick-scan and the full scan?<\/h3><\/dt>\n<dd><p>The quick-scan (Stufe A) fetches your homepage's raw HTML via PHP and checks for tracker domains and CMP signatures in the static source. It cannot detect trackers injected purely via JavaScript (e.g. GTM tags). For that, the full scan on dsgvochecker.de uses a headless Chromium and includes a three-phase Reject-Path test.<\/p><\/dd>\n<dt id=\"is%20this%20plugin%20gdpr%20compliant%20itself%3F\"><h3>Is this plugin GDPR compliant itself?<\/h3><\/dt>\n<dd><p>Yes. No visitor data is collected and the scan runs entirely on your own server. The tracker-definition list is bundled with the plugin, so no external request is made to scan. No site URL is transmitted.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Tracker-definition list is now bundled with the plugin \u2014 the scan no longer makes any external request.<\/li>\n<li>Documentation clarified (external services, neutral wording).<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>First public release.<\/li>\n<li>PHP-based quick scan: detects tracker scripts in the raw HTML source before consent.<\/li>\n<li>Cookie banner \/ CMP detection with per-CMP setup guides linking to vendor documentation (13 cookie banners).<\/li>\n<li>Bilingual: English by default + German translation (de_DE).<\/li>\n<li>Optional full three-phase scan via dsgvochecker.de (reject-path test).<\/li>\n<\/ul>","raw_excerpt":"Checks whether your cookie banner actually works \u2014 identifies trackers in the page source before visitor consent.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/330314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=330314"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/fepo"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=330314"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=330314"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=330314"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=330314"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=330314"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=330314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}