Skip to content
Mostly MarketingCompliance Check

Free · 15 seconds · No signup

Is your website putting you at risk?

Privacy, cookies, accessibility, forms and marketing claims — scored in one pass.

See an example report (PDF, opens in new tab)
Legal pagesCookie consentForm dataThird partiesAccessibility (WCAG 2.2)Claims & image rights

The compliance method

Seven checks, in order

Every scan follows the same review a careful pre-launch auditor would run for a business owner. Each finding tells you what was found, where, the risk, and the usual fix — in plain language.

  1. 1

    Legal pages

    Privacy policy, terms, cookie policy and accessibility statement: present, reachable, linked from the footer, and free of placeholder text.

  2. 2

    Cookies & consent

    Which trackers load (analytics, ad pixels) and whether a consent banner actually blocks them until the visitor agrees.

  3. 3

    Forms & data

    Every field has a label, only necessary data is required, a purpose statement and privacy link sit by the button, no pre-ticked opt-ins.

  4. 4

    Third parties

    Embedded videos, maps, fonts and outside scripts: who receives your visitors' data, and whether it loads before consent.

  5. 5

    Accessibility

    WCAG 2.2 AA basics: image descriptions, page language, one main heading, named buttons, zoom allowed, skip-to-content link.

  6. 6

    Claims & rights

    Superlatives, guarantees and credentials you must be able to prove, star-rating data, and images borrowed from other sites.

  7. 7

    Jurisdiction

    Which rules likely apply (US, UK/EU, Canada, Australia), stated as an assumption for you to confirm.

Results are grouped as Critical (fix before going live), Should fix, Needs your answer (only you can confirm) and Passed. Data security (databases, keys, server endpoints) is a separate audit and is not scored here.

What the quick scan checks

  • Home page, privacy policy and up to 3 key pages (contact, about, quote/booking, services)
  • Privacy, terms, cookie and accessibility pages — linked, loading, no placeholder text
  • Known trackers (Google, Meta, Hotjar, TikTok, LinkedIn…) vs. a consent banner
  • Every form: labels, privacy link, purpose line, pre-ticked boxes, required phone
  • Image descriptions, page language, headings, unnamed buttons, zoom, skip link
  • YouTube/Maps embeds, outside scripts, bold claims, star ratings, borrowed images

What it may miss

  • Pages beyond the ones listed — blog posts, product pages, checkout
  • Trackers that load only after clicks, scrolling or a consent choice
  • Colour contrast, keyboard-only navigation and screen-reader testing
  • Whether your consent banner actually blocks trackers in practice
  • Content of your policies — we check they exist, not that they're legally sufficient
  • Data security, hosting, emails and anything behind a login

Need a deeper dive?

A full human-led audit covers every page, real-browser tracking, contrast and keyboard testing, and a policy review.

Request a deeper audit

Integrity & Acceptable Use

Mostly Marketing, Inc. only supports legitimate local and regional service businesses. We reserve the right to refuse any website, scan, or lead that appears to promote criminal, pornographic, political, hateful, violent, fraudulent, or suspicious activity. Every submission is screened automatically against domain reputation, content signals, and keyword patterns; flagged entries are reviewed before any audit or communication is sent. This protects our team, our clients, and the quality of our data. Read more in our Terms of Service (opens in new tab) and Privacy Policy (opens in new tab).

Disclaimer

Not legal advice. This scan is an automated, practical review for information only. It does not create a lawyer–client relationship and is not a substitute for advice from a qualified attorney in your jurisdiction. Confirm anything material with counsel before relying on it.

No guarantee of compliance. A high score does not mean a site is compliant with any law (including GDPR, UK GDPR, ePrivacy/PECR, CCPA/CPRA and other US state privacy laws, the ADA, WCAG, CAN-SPAM, CASL or FTC rules). A low score does not mean a law has been broken. We report risks and usual remedies, not legal conclusions.

Scope and limits. The scan reads the publicly available home page and linked privacy page at the moment of the scan, as a visitor without cookies would. It does not run the site's scripts, log in, submit forms, check every page, measure colour contrast or test full keyboard navigation. Content loaded later by tag managers or personalisation may not be seen. Results can include false positives or miss issues.

Assumptions. Jurisdiction, business type and audience are inferred from public signals and may be wrong. Items marked “Needs your answer” can only be settled by the site owner.

Your data. We fetch only the address you enter. If you request help, we use your name, email, optional phone and company only to reply about this report — no mailing list, no sale of data.

No liability. Mostly Marketing provides this tool “as is” and is not liable for decisions made from its results. Scanning a site you do not own is for informational purposes only.

Built by Mostly Marketing