Check your web shop: accessibility, cookies, consent and dark patterns. Measured, with the fix for every point.
We test your home page, a product page and the checkout against WCAG 2.1 AA, and measure what your shop loads before consent and after “Reject”. Every finding comes with the exact steps to fix it. For shops that sell into the EU.
- Measured independentlyWe sell no banner and no legal texts. That is why we check what really loads after “Reject”, also behind Cookiebot, Usercentrics and the like.
- A fix for every pointEvery open point says how to fix it. Google Fonts come as a ready package to host yourself.
- Checked again every weekIf a plugin update suddenly loads a new service, you get an email with the location. In the trial and in the plan.
7 of 10 Austrian web shops load at least one service before consent. Is yours one of them? Check now
950+ domains checked so far, as of September 2026.
For every shop system
We see your shop from the outside, like a visitor. That needs no access and no plugin.
Also Jimdo, JTL, Gambio and custom-built sites. WordPress plugin, trust badge and Shopify: all integrations
What you get
A list of findings: what your shop loaded, how we saw it, and how you fix it.
Example from a made-up shop:
- 01
Google Analytics 4 loads without consent
The service loads before the consent banner is answered, and it set cookies. Seen at: www.google-analytics.com.
Then every week: an email when something changes
A plugin update, new tracking, one more payment provider: we check your shop every week and only get in touch when something was added or went away. With the location and the link to the evidence.
The same changes are in your account as a timeline, with several shops all on one page.
Example for a made-up shop
beispiel-shop.at: 1 new point since the last check
We checked beispiel-shop.at again. Something was added since the last report.
New since the last check
No longer found
The report sits at a random address and is excluded from search engines. Only people with the link can see it.
Servers in the EU · Legal notice · Privacy · Unsubscribe
Why konformia?
A cookie banner is the setting. konformia is the check afterwards: we measure whether your shop really only loads what your banner promises, and say how to fix it.
Built and run by Immanuel Schranz near Vienna, as a sole proprietorship. Servers at Hetzner in Helsinki, no US providers. Legal notice
- We measure what your shop really loads and give the fix for every point
- You get personal help, directly from the operator
- What we could not check is marked as open, not as a gap
- We do not check legal texts and give no legal advice
16 checks for web shops in the EU market
4 of them need the product page or checkout, which a home page scanner never reaches. Every row names the EU reference.
- Does a tracker load before consent?
- Accessibility: statement and purchase path
- Does the reject button really work?
- Unit price, shipping costs, delivery time
All 16 checks with reference: check, where it shows, basis
| Check | Where it shows | Basis |
|---|---|---|
| Does a tracker load before consent? | Home page and subpages | Art. 5(3) Directive 2002/58/EC (ePrivacy) |
| Accessibility: statement and purchase path | Home, category, product page, checkout + own page | Directive (EU) 2019/882 Art. 4 and 13, WCAG 2.1 AA |
| Does the reject button really work? | Home page, after a click on Reject | Art. 5(3) Directive 2002/58/EC (ePrivacy) |
| Unit price, shipping costs, delivery time | Only on the product page | Art. 3 Directive 98/6/EC, Art. 6(1) Directive 2011/83/EU |
| Order button label | Only in the checkout | Art. 8(2) Directive 2011/83/EU |
| “Withdraw from contract” button | Every page | Art. 11a Directive 2011/83/EU, since 19 June 2026 |
| Cancellation button for subscriptions | Every page, subscriptions only | § 312k BGB, Germany only |
| Dark patterns: countdowns, pre-ticked add-ons, late fees, changed cart contents | Home page, product page, checkout | Annex I No. 7 Directive 2005/29/EC, Art. 22 Directive 2011/83/EU |
| Pre-ticked consent boxes | Every form | Art. 4(11) GDPR |
| Which country the services keep their servers in | Name resolution (DNS), no page | Art. 44 GDPR |
| Trackers under your own address (CNAME cloaking) | Name resolution (DNS), no page | Art. 5(3) Directive 2002/58/EC, Art. 5 GDPR |
| Google Consent Mode, duplicate banners and tag managers | Home page | Art. 5(3) Directive 2002/58/EC (ePrivacy) |
| Visible keyboard focus and accessibility widgets (overlays) | Home page, with the Tab key | Directive (EU) 2019/882, WCAG 2.1 criterion 2.4.7 |
| Email sender (SPF, DKIM, DMARC) and certificate expiry | Name resolution (DNS) and connection | technical, no legal duty |
| Security headers, libraries with known vulnerabilities, session cookies | Home page | technical, no legal duty |
| Broken links and images | All visited pages | technical, no legal duty |
Checking once is free.
Checking every week costs.
We look every week and only get in touch when something changed. The price depends on shops, not on pages.
| Feature | Free0 €with 14-day trial | Your choiceWatchdogfrom 24 € / monthfrom 240 € / yearfrom 1 shop | Your choiceAgencyfrom 99 € / monthfrom 990 € / yearup to 10 shops |
|---|---|---|---|
| Right away, without signing up: totals, areas, first 3 points | included | included | included |
| Full report with location | in trial | included | included |
| Weekly check | in trial | included | included |
| Email for every new point to fix | in trial | included | included |
| Which barrier on which page | not included | included | included |
| Which pattern on which page | not included | included | included |
| Badge "continuously checked" for your own shop | not included | included | included |
| Overview of all shops | not included | included | included |
| Weekly status email for all shops | not included | not included | included |
Without sign-up you see totals, check areas and the first three open points right away. With your email address you test the full report with a weekly check free for 14 days, no card; the trial ends by itself. The item lists for accessibility and dark patterns belong to Watchdog. Final prices in euros, no VAT (small business scheme), no setup fee, cancel monthly.
Check your shop for free · See everything included and the price calculator
For agencies: a report per client shop
You built the shop, and a year later someone installed a plugin. Ten client shops in one plan, add and swap domains yourself, every report as a dated PDF for the client file. Questions are answered by the developer, without a ticket queue. 99 € a month for 10 shops
More shops? Each additional one costs 9 € a month, added yourself in your overview.
FAQ
What does the scan check before cookie consent?
We measure which services load before consent. The yardstick for access to the device is Art. 5(3) of the ePrivacy Directive 2002/58/EC; whether an exemption applies has to be checked case by case.
Does konformia check my legal texts?
No. We do not check legal notice, privacy policy or terms; legal-text services and lawyers do that. We measure what your shop does technically and say how to fix every point.
Does konformia replace my cookie banner?
No. Your banner collects consent. konformia measures independently whether it really blocks: which services load before consent and after “Reject”, and how to stop that in your banner tool.
Do I get personal help?
Yes. You do not write into an anonymous ticket portal but directly to the operator: short questions, answered with the concrete report in view.
What does the check cost?
The scan is free, once per shop and month, without an account and without payment details. Ongoing watching costs 24 euros a month for one domain (Watchdog) or 99 euros for ten (Agency), with extra domains in between. A monthly plan cancels monthly, a yearly plan at the end of the paid year.
Can I check again right after a change?
You can start a new check yourself after changes. Within 24 hours you have as many manual checks as your plan has shops, and each shop can be checked manually at most once in 24 hours. Automatic checks do not count.
Will my report be public?
No. Your report sits at a random address, blocked for search engines. Only people with the link can see it.
A check usually takes
under two minutes.
The report is true for today. If you like, we keep watching your shop and get in touch when something changes.