Keep your cookie banner. Check that it works
Every claim links to where we read it · checked 25 Oct 2026
You don’t need to replace CookieYes, Cookiebot, OneTrust, Usercentrics or Complianz. untick is not a consent tool. It visits your site like a new visitor, clicks your banner’s own Reject and Accept buttons, and records which trackers still load. If something slips through, you fix it in the tool you already have.
Your banner and untick do different jobs
A consent tool shows the banner, stores the choice and holds back scripts until a visitor agrees. untick checks from the outside that all of this happened. It never changes your banner or your settings.
| Job | Your consent tool | untick |
|---|---|---|
| Show the banner and save the choice | Yes | No. untick never touches your banner. |
| Hold back scripts until consent | Yes, when it is set up for each script | Checks whether it worked, request by request |
| Test that Reject stops tracking | Their docs describe a manual test in your browser | Clicks Reject, reloads and records what still fires, with screenshots |
| Test withdrawal of consent | Gives visitors a way to change their mind | Accepts, withdraws through your settings link and checks again |
| Keep checking after site changes | Rescan settings vary by tool | Automatic checks every 30 days on Free, weekly on Starter and daily on Pro and Agency, with an email when something new fires |
| Explain the fix | Its own help pages | Setup steps for Cookiebot, CookieYes, Didomi, OneTrust and Usercentrics in each report |
Why a good banner can still leak
Blocking depends on setup, and setups change. The tools say so in their own docs:
- Cookiebot: anything that loads before the Cookiebot script can set cookies without consent, and the script must not load with defer or async. Cookiebot docs.
- OneTrust: auto-blocking must load synchronously, and OneTrust says to validate it in a testing environment before going live. OneTrust docs.
- Usercentrics: the Smart Data Protector blocks a list of supported technologies, and Usercentrics suggests checking the page after you deny consent. Usercentrics docs.
- Complianz: the Script Center is for scripts its plugin and service integrations don’t cover. Complianz docs.
- CookieYes: its test asks you to clear site data, hard refresh and check that only strictly necessary cookies are set until you accept. CookieYes docs.
A new theme, an app install or a tag added in Tag Manager can undo a setup that worked last month. A test after every change is how you find out.
What untick tests on a site with a banner
- Before a choice: which trackers and cookies load before anyone clicks. The rule.
- After Reject: we click your banner’s own Reject button, reload and record what still fires. The rule.
- The settings layer: a new visitor opens it and reads which categories are switched on by default. The rule.
- After Accept, then withdraw: we accept, then change our mind through your cookie settings link and check again. The rule.
- Google Consent Mode: what your Google tags report before a choice, after Reject and after Accept. Free checker.
- Global Privacy Control: when ad trackers load without a choice, a visitor with GPC on checks they stop. The rule.
What the consent tools’ own docs say, and when we read them
- Elements that load before the Cookiebot script can set cookies without consent; the script must not use defer or async.Cookiebot: How does auto blocking workChecked
- OneTrust Auto-Blocking must load synchronously and should be validated in a testing environment before going live.OneTrust: Cookie Auto-BlockingChecked
- The Smart Data Protector blocks a list of supported technologies; test it by denying consent and checking the page.Usercentrics: Test the Smart Data ProtectorChecked
- The Script Center is for scripts that plugin and service integrations don’t cover.Complianz: IntegrationsChecked
- To test blocking: clear site data, hard refresh, and only strictly necessary cookies should be set until you accept.CookieYes: Test cookie blockingChecked
Spotted something out of date? Write to hello@untick.io and we’ll re-check it and update the date.
Questions
Do I need to remove my consent tool to use untick?
No. untick only visits your site from the outside. It works with any consent tool, or none.
Which consent tools does untick work with?
Any banner a visitor can click. Reports name the tool when we recognise it, with setup steps for Cookiebot, CookieYes, Didomi, OneTrust and Usercentrics.
My consent tool already scans for cookies. Why test again?
A cookie scan lists what your site sets. untick clicks Reject like a visitor and shows what still loads after that choice, with the exact requests.
Does a clean untick scan mean my banner is legal?
No. It means we saw no problems in the pages we visited. It is evidence, not legal advice.
Not sure? Run it on your homepage.
The free scan takes about a minute and shows the evidence. No signup.