GPC checker
Does your site honor Global Privacy Control?
First, see if your own browser sends the signal. Then test a site: we load it with GPC on and list every ad tag that kept running, with the request that proves it.
- ...
Sec-GPC headerSent with every request - ...
navigator.globalPrivacyControlRead by page scripts
Now test a site.
Free, no account. Results in about a minute.
Free. No account. Results in about a minute.
What the test does
- Sends the signal the way a browser does. A clean Chromium browser sends the
Sec-GPC: 1header to every host and setsnavigator.globalPrivacyControlbefore any page script runs. - Leaves the banner alone. GPC is an opt-out with no click, so nothing is accepted or rejected.
- Records everything the page sends. Every request and cookie is matched against a fixed library of ad and analytics vendors.
- Compares with a normal visit. Separate passes reject and accept cookies, so you see which tags stopped for the signal and which ignored it.
- Checks for a confirmation. California requires showing that the signal was processed. We look for it on the page.
Reading the result
- Kept running: advertising vendors that loaded with the signal on. These are the ones to fix, usually by gating them in your tag manager or consent platform.
- Stopped: vendors that ran after accept but not with the signal on. Your setup works for these.
- Confirmation: whether the page showed that the opt-out was honored.
Want the law behind it? Read which states require Global Privacy Control.
Questions
Is the GPC check free?
Yes. Scan any page on a site you're authorized to test. No account, no install.
How do I check if my browser sends GPC?
Open this page. The live check reads both places a site can see the signal: the Sec-GPC request header and navigator.globalPrivacyControl in page scripts.
How is this different from a GPC browser extension?
An extension shows that your browser sent the signal. It can't tell you whether the site's tags obeyed it. We record every request the page makes with the signal on and name each ad vendor that ran anyway.
My consent platform says GPC is supported. Isn't that enough?
It means the platform reads the signal. Tags wired outside it, or loaded by other tags, still fire. That gap is what California found at Healthline, which paid $1.55 million after trackers kept running for visitors who opted out.
Which states require sites to honor GPC?
At least twelve, including California, Colorado, Connecticut, Texas and New Jersey. From January 1, 2027, every browser has to offer the setting.
Do I have to show visitors the signal was honored?
In California, yes. Regulations effective January 1, 2026 require showing whether the opt-out preference signal was processed, for example with an "Opt-Out Request Honored" message. The check looks for one.
This is a technical test, not legal advice.
Run the check again whenever tags change.
New tags break opt-outs all the time. Monitoring rescans daily and emails you when a vendor starts ignoring the signal. See plans
Free. No account. Results in about a minute.