RGPDScan est-il vraiment gratuit pour tester ?

Oui. L'essai TEST FOR FREE permet 1 scan complet sans carte bancaire. Vous voyez le score global et les 2 problèmes critiques avec recommandations détaillées. Pour débloquer le rapport complet : audit unique à 49€ ou abonnement Pro à 39€/mois.

Combien de cookies et trackers RGPDScan détecte-t-il ?

RGPDScan détecte plus de 300 patterns de cookies et 400 services de tracking (Google Analytics, Meta Pixel, Hotjar, Mixpanel, Segment, etc.) avec leur catégorie, finalité, durée, et transfert hors UE.

RGPDScan génère-t-il une politique de confidentialité conforme ?

Oui, dès le plan Pro 39€/mois. Documents générés par IA (NVIDIA Nemotron 70B) avec articles RGPD précis (Art. 13, 14), AI Act, Data Act, CNIL 2020-091, et clauses sectorielles spécifiques.

Comment se compare RGPDScan à Cookiebot et OneTrust ?

Cookiebot et OneTrust sont des CMP (bannières) à partir de 9€/mois et 15-80k€/an. RGPDScan combine scanner complet (300+ cookies, 400+ trackers, dark patterns IA), audit accessibilité+SEO, générateur de documents IA, et bannière personnalisable — pour 0 à 99€/mois.

Le scan détecte-t-il les dark patterns CNIL ?

Oui. RGPDScan utilise NVIDIA Llama pour détecter les dark patterns dans les bandeaux de consentement : refus plus difficile que l'acceptation, couleurs trompeuses, manque d'information, cookies déposés avant consentement. Référence : Délibération CNIL 2020-091.

What is a GDPR compliance scan?

A GDPR compliance scan (also called RGPD audit in French) is a comprehensive analysis of a website's compliance with the General Data Protection Regulation. RGPDScan automatically checks cookies, trackers, dark patterns, data transfers, security headers, user rights and legal basis.

Qu'est-ce qu'un audit RGPD ?

Un audit RGPD est une analyse complète de la conformité d'un site web au Règlement Général sur la Protection des Données. RGPDScan vérifie automatiquement les cookies, trackers, dark patterns, transferts de données, en-têtes de sécurité, droits des personnes et base légale du traitement.

How does the GDPR scanner work?

Our GDPR scanner uses a headless Chrome browser to simulate a real user visit. It detects cookies set before consent, analyzes cookie banners for dark patterns, maps non-EU data transfers, and checks compliance across 30+ GDPR checkpoints in under 60 seconds.

Is the GDPR scan free?

Yes, RGPDScan offers a free plan with 5 scans per month. You get GDPR, SEO, accessibility and visibility compliance scores. The Pro plan at €49/month gives access to detailed results, PDF reports, embeddable cookie banner and 200 scans/month.

What is the difference between RGPD and GDPR?

RGPD (Règlement Général sur la Protection des Données) is the French name for GDPR (General Data Protection Regulation). They refer to the same European regulation protecting personal data. RGPDScan supports both French and English-speaking users.

How is RGPDScan different from Cookiebot?

RGPDScan goes beyond cookie scanning by offering a complete 4-pillar audit: GDPR compliance, SEO analysis, WCAG accessibility audit, and social media visibility check. We use AI to detect dark patterns, analyze 400+ trackers, and provide an embeddable cookie consent banner with real-time analytics.

Quelle est l'alternative gratuite à Axeptio ?

RGPDScan propose une alternative gratuite à Axeptio avec bannière cookies conforme CNIL, scan RGPD (5 scans/mois), et générateur de documents juridiques. Contrairement à Axeptio, RGPDScan inclut aussi un scanner complet de dark patterns et trackers.

What is the best alternative to OneTrust for small businesses?

RGPDScan is the best OneTrust alternative for SMBs. It offers a complete GDPR audit platform — cookie scanner, dark pattern detection, AI document generator, and compliant cookie banner — starting at €0/month, compared to OneTrust's €15,000+/year pricing.

Comment éviter une amende CNIL ?

Pour éviter une amende CNIL : 1) Installez une bannière cookies avec bouton 'Tout refuser' aussi visible que 'Tout accepter'. 2) Ne déposez aucun cookie avant consentement. 3) Mettez à jour votre politique de confidentialité. 4) Documentez vos transferts hors UE. RGPDScan vérifie ces 30+ points automatiquement en 60 secondes.

Does RGPDScan work for German websites (DSGVO)?

Yes, RGPDScan works for all EU websites including German sites under DSGVO (Datenschutz-Grundverordnung). DSGVO is the German name for GDPR. RGPDScan detects DSGVO compliance issues including cookies, trackers, data transfers, and dark patterns.

Tarteaucitron est-il une bonne alternative à Cookiebot ?

Tarteaucitron est une bonne CMP open-source gratuite, mais nécessite un développeur pour l'installation. Il ne fait pas de scan RGPD complet, pas de génération de documents ni d'analytics. RGPDScan est une alternative tout-en-un qui inclut bannière cookies, scan RGPD et documents juridiques IA.

Shopify and GDPR: The 5 Settings to Enable Immediately

Shopify is not GDPR compliant by default. Customer Privacy, Meta Pixel, data retention: 5 settings in your Shopify admin can prevent a CNIL formal notice. Here's exactly where to click.

The 5 Essential Settings

Enable Customer Privacy (native consent banner)

Settings > Customer Privacy > Enable privacy banner

Configures consent mode to block marketing pixels (Google Analytics, Meta Pixel, TikTok Pixel) before the Accept click. REQUIRED for stores targeting EU customers.

Configure Meta Pixel channel in Conversions API mode

Marketing > Sales channels > Facebook & Instagram > Data sharing settings

Select 'Maximum' to enable server-side Conversions API. This reduces exposure to client cookies while maintaining conversion measurement. Enable Restricted Data Use (RDU) for EU customers.

Configure data retention periods

Settings > Customer Privacy > Data retention

Enable automatic anonymization request for inactive customers after 3 years (CNIL recommendation). Billing data is retained 10 years (accounting obligation) but marketing data can be anonymized.

Sign and customize the Shopify DPA

Settings > Legal > Data Processing Agreement

Accept the Shopify DPA and download it (keep timestamped copy). Add an amendment if you process special category data (health, minors). This DPA covers Shopify as a sub-processor.

Update the privacy policy

Settings > Legal > Privacy Policy

Complete the Shopify template with: list of each third-party app (Klaviyo, Omnisend, etc.) + purpose + country + legal mechanism. Mention DPF for transfers to Shopify USA. Add customer rights (access, erasure, portability) with contact address.

Verify your Shopify pixels are blocked before consent

Even after Customer Privacy configuration, some scripts may still fire. RGPDScan checks in 60 seconds.

Riskiest Shopify Apps for GDPR

KlaviyoHigh

JS tracker depositing cookies before consent if Customer Privacy not configured

OmnisendModerate

DPA available, but configure integration with Customer Privacy mode

HotjarHigh

Session recording = profiling. Must block via cookie banner

Google & YouTubeHigh

Official Shopify channel deposits cookies before consent if not configured

StripeLow

DPF certified, DPA available, EU servers available

Going Further

Frequently Asked Questions

Is Shopify GDPR compliant by default?

No. By default, Shopify enables analytical and marketing tracking before any consent. The Customer Privacy feature must be manually activated in Settings > Customer Privacy. Without it, Google Analytics and Meta Pixel cookies are deposited before consent.

Is Shopify GDPR certified?

Shopify Inc. is a Canadian company with servers in the USA and Canada. Shopify offers an Art. 28-compliant DPA (accessible in Settings > Legal > Data Processing Agreement). Canada has an EU adequacy decision for PIPEDA. Shopify is also DPF-certified for EU-USA transfers.

Can Meta Pixel be used on Shopify in France?

Yes under conditions: enable Customer Privacy to block the Pixel before consent, use server-side Conversions API to reduce client fingerprinting, sign the Meta DPA. Without these configurations, the Pixel fires before consent — CNIL violation.

How long does Shopify retain customer data?

By default, Shopify doesn't automatically delete inactive customer data. CNIL recommends 3 years of inactivity before deletion. Configure in Settings > Customer Privacy > Data anonymization request. Or export then manually delete.

Is the privacy policy generated by Shopify sufficient?

Not completely. The Shopify generator creates a base but doesn't list your specific third-party apps (Klaviyo, Omnisend, Gorgias...). Customize by adding each sub-processor with its purpose, country, and transfer mechanism.

Should unused Shopify apps be uninstalled for GDPR?

Yes. Every installed app can access customer data even if inactive. Uninstalling unused apps = reducing risk surface. Check regularly in Settings > Apps and remove residual access.