Free tool · No signup
Is your Consent Mode v2 clean — or burning conversions?
Enter a URL, start the scan: in seconds you see which trackers your site loads, whether a cookie banner is detectable and whether Consent Mode v2 sits right per signal — with a grade A to F and the concrete consequences for your Google Ads account, not just the compliance angle.
- 1 Mio. €+ Werbebudget verantwortet
- Ex-Google Performance-Berater
- 120+ Kunden im DACH-Raum
The public HTML source of your homepage is checked. When you start the scan, the URL and result are transmitted to me — so I can reach out if there are critical findings. No public directory, no sharing.
Methodology
What the scan checks
Tags & pixels
GTM, GA4, Google Ads, Meta, TikTok, LinkedIn, Pinterest, Hotjar and Clarity — trackers embedded directly in the source are detected and classified.
Cookie banner (CMP)
Detection of 16 common consent tools — from Cookiebot and Usercentrics to Borlabs and Finsweet. Trackers without a CMP are the biggest warning risk.
Consent Mode v2
Is gtag("consent","default") set? Per signal — ad_user_data, ad_personalization, ad_storage, analytics_storage — I show you the default state. Missing v2 means your Google Ads account loses modeled conversions.
Consent Mode v2
The four signals your Google Ads account needs
Since March 2024 Google requires Consent Mode v2 in the EEA for remarketing
and conversion measurement. Your tag setup must tell Google, before any tracking, whether consent was given —
via four signals in the gtag("consent","default", …)
call. If they are missing, that is not just a compliance issue: your account loses the signals Google uses to
model missing conversions. These are exactly the four signals this check reads per state.
ad_user_data Mandatory since 03/2024 Allows Google to process user data — the basis for enhanced conversions. If it is missing, your conversion uploads and data matching run empty.
ad_personalization Mandatory since 03/2024 Decides whether a person may enter remarketing and personalised audiences. Without this signal your lists stop filling — remarketing quietly starves.
ad_storage Conversion attribution Controls the ad cookies Google uses to link click and conversion via GCLID. If it defaults to "granted" before consent, tracking fires too early — a warning risk and distorting.
analytics_storage Measurement Controls the GA4 cookies. Must default to "denied" before opt-in; afterwards GA4 delivers the reach and behaviour data your reporting relies on.
gtag("consent","update", …).
If a signal starts on "granted" it fires before consent — if it is absent entirely, your setup reports nothing to Google.
Both cost conversions. For Webflow & co. there is my free
Finsweet Consent Mode v2 template.
Staying honest
What a static scan cannot see
This check reads the source of your homepage. That is enough to find the most common mistakes — but the decisive behaviour only happens at runtime. Honestly, a few things stay invisible:
- Does the CMP set the consent defaults via JavaScript? Then v2 is not in the HTML but still applies — only a live test shows what Google actually receives.
- Do the tags in GTM really fire only after opt-in? What happens inside the container is invisible to any source scanner — only preview mode and the network tab before the banner click reveal it.
- Do your Google Ads conversions count once, twice or not at all? Deduplication, enhanced conversions and server-side setups only show in the real data flow.
- Is call tracking running for your phone leads — often the most valuable and most invisible channel of local accounts?
That is exactly what I do in the personal tracking audit: I load your site in the browser, click through the banner and measure which tags fire before and after consent — including GA4, Google Ads and server-side checks. In the end you know how many conversions your setup really loses and what to do about it.
Book a free intro callFAQ
Frequently asked questions about the tracking check
What exactly does the tracking check analyse?
Is this legal advice?
Why can a static analysis not see everything?
What is Consent Mode v2 and why is it mandatory?
What do ad_user_data and ad_personalization mean?
What does a wrong consent setup cost my Google Ads account?
Can I check Consent Mode v2 myself?
What happens to the scanned URL and the result?
Grade worse than you hoped?
In most audits I find tracking that fires before consent, missing Consent Mode v2 or conversions that count twice or not at all. All fixable — usually within a few days.