Use this cookie audit checklist to review cookies, consent behavior, tracking scripts, analytics tools, advertising pixels, and third-party technologies that may affect website cookie compliance during real visits.
Want to review live cookie behavior instead of checking items manually? Use the cookie audit tool.
Built to help teams review consent controls, cookies, trackers, and third-party technologies in a more structured and practical way.
Helpful for privacy teams, founders, consultants, and agencies
Useful before audits, remediation, launches, or regional expansion
This cookie audit checklist is designed for teams that want a practical way to review how cookies, tracking scripts, consent mechanisms, analytics tools, and third-party technologies behave on their website during real visits.
Below is a preview of the types of audit controls included in the cookie audit checklist. The downloadable version can be used as a working review document in Excel or PDF format.
Preview of the cookie audit checklist used to review cookies, tracking scripts, consent behavior, and third-party technologies.
| Checklist Area | Sample Review Questions |
|---|---|
| Cookie Consent | Are non-essential cookies blocked before the user gives consent? |
| Tracking Scripts | Do analytics or advertising scripts load automatically on page load? |
| Third-Party Cookies | Are external vendors setting or accessing identifiers during visits? |
| Consent Behavior | Does rejecting consent block non-essential trackers and related requests? |
| Analytics Tools | Do tools like GA4 or other analytics platforms activate before consent? |
| Cookie Disclosures | Do cookie disclosures match the actual technologies observed during testing? |
The downloadable cookie audit checklist includes 43 structured review controls covering cookies, consent behavior, tracking scripts, analytics technologies, and third-party data collection practices. Below are examples of controls included in the checklist.
| Control ID | Audit Area | Control Description |
|---|---|---|
| CA-01 | Consent Banner | Consent banner appears before non-essential cookies are set |
| CA-04 | Pre-Consent Tracking | Analytics and marketing scripts are blocked before user consent |
| CA-08 | Third-Party Cookies | Third-party cookies and tracking vendors are identified |
| CA-12 | Consent Rejection | Rejecting consent blocks non-essential cookies and tracking scripts |
| CA-16 | Cookie Duration | Cookie expiration periods are documented and reviewed |
| CA-19 | Storage Technologies | Local storage or session storage identifiers are reviewed |
| CA-23 | Tag Manager | Tag manager configurations respect consent status |
| CA-27 | Vendor Disclosure | Third-party tracking vendors are disclosed in privacy documentation |
| CA-31 | Cookie Policy | Cookie policy reflects the technologies observed during testing |
| CA-36 | Evidence Capture | Cookie behavior is documented using browser developer tools or network logs |
The full checklist contains 43 structured audit controls designed to support cookie compliance reviews and technical website audits.
A useful cookie audit checklist should go beyond surface-level banner checks. It should help teams examine how cookies, consent controls, tracking scripts, analytics tools, advertising pixels, storage technologies, and third-party requests behave during real website visits.
Review whether non-essential cookies and related technologies activate before meaningful user choice.
Identify vendors, scripts, pixels, and external services that may set or receive identifiers.
Compare cookie and privacy disclosures against what the website actually appears to do.
Use structured controls to support internal review, evidence capture, and remediation follow-up.
Use the checklist as a working document for internal cookie reviews, implementation checks, remediation planning, or preparation before running a live cookie audit.
Useful for teams that want to track review status, evidence, notes, and follow-up actions.
Download Excel checklist →Useful for internal review, sharing, legal discussions, or quick manual reference.
Download PDF checklist →Use Auditzo’s tools to review actual cookie and tracking behavior beyond a manual checklist.
Use cookie audit tool →A checklist helps teams structure manual review, but if you want to understand what a live website appears to do during real visits, you can combine this resource with Auditzo’s tools such as the cookie audit tool, the GDPR cookie checker, the website GDPR compliance checker, or the GDPR audit checklist.
Review live cookie and tracking behavior during real website visits.
Use cookie audit tool →Focus specifically on cookie and consent-related behavior.
Use GDPR cookie checker →Check broader GDPR-related website exposure and tracking behavior.
Check website GDPR compliance →Use a broader GDPR checklist for related website review areas.
View GDPR audit checklist →A cookie audit checklist is a structured list of review controls used to assess cookie behavior, consent mechanisms, tracking scripts, analytics tools, and third-party tracking technologies on a website.
It should include checkpoints related to cookie consent, tracking scripts, third-party cookies, analytics tools, advertising pixels, storage technologies, disclosures, evidence capture, and remediation workflow.
Yes. This page supports downloadable Excel and PDF versions so teams can use the checklist as a working cookie compliance review document.
A checklist supports manual review. A live cookie audit helps evaluate what a website appears to do during real visits, including cookies, scripts, third-party activity, and tracking behavior.
Use a broader website review to understand how cookies, tracking scripts, forms, and third-party technologies may affect your overall compliance posture.
Use the checklist for manual review, then analyze your live website for clearer visibility into cookies, scripts, and third-party tracking behavior.