Privacy Check

Checks the homepage for the most common GDPR and cease-and-desist risks. For many operators "security" is abstract — a warning letter over Google Fonts is very concrete. This check makes exactly those risks visible.

Check	What is checked
Google Fonts	Are fonts loaded remotely from fonts.googleapis.com / fonts.gstatic.com? That transmits the visitor's IP to Google in the US — the cease-and-desist classic (Munich Regional Court I, case 3 O 17493/20).
Tracking services	Known trackers/analytics services in the source (Google Analytics, Meta/Facebook Pixel, Hotjar, Matomo Cloud, LinkedIn, TikTok, Clarity, Hubspot).
Third-country transfer	Resources loaded from servers in typical third countries (especially US CDNs).
Cookies before consent	Cookies the server sets on the very first visit — before any consent.
Consent banner (CMP)	Detects common consent tools (Cookiebot, Usercentrics, Borlabs, Complianz, OneTrust, Klaro …).

Static analysis — communicated honestly

Vernax loads the homepage and the linked CSS files and searches the source for the mentioned patterns (Google Fonts are often included via @import in CSS — that is captured). Limits: resources loaded only via JavaScript and cookies set only through interaction are invisible to a static analysis. For a complete assessment, a look with the browser dev tools (network and application tabs) rounds out the picture.

Not legal advice

This check is a technical analysis, not legal advice. It does not replace a data protection review. When in doubt, consult a data protection officer or specialist lawyer.