Critical
Marketing trackers load before consent
Observed evidence
connect.facebook.net, analytics.tiktok.com
Fix: Block scripts by default in the CMP.
Sample report
shop-demo.example
Representative fictional data. Every conclusion is linked to evidence and can become a verifiable task.
GDPR score
46/100
Major
Rejecting is not as easy as accepting
Observed evidence
No reject button visible at the first level
Fix: Add “Reject all” at the same level.
Major
Retention periods are missing
Observed evidence
Policy analyzed: 2,840 words, no duration found
Fix: Add a retention table by purpose.