Free DSGVO Compliance Check

Cease-and-desist lawyers
check your website in 4 minutes.
We do it in 24 hours — free.

Since the Munich court ruling in 2022, thousands of websites have received cease-and-desist letters — for Google Fonts, missing cookie banners, and incorrectly embedded maps. We tell you in 24 hours whether yours is at risk.

  • Cookie banners and consent requirements
  • Google Fonts, Google Maps, YouTube embeds
  • Legal notice and privacy policy
  • SSL encryption and tracking scripts
Check my website before a lawyer does

No sales call  ·  No hidden costs  ·  Independent technical assessment

Get my free audit report

Free · 24h report · No commitment

We complete a limited number of manual audits each week. Current turnaround: within 24 hours.

Why it matters

The enforcement wave is already running.
Most targets didn't know they were at risk.

Specialized law firms use automated scanners — they cannot see how large your business is, only whether your website has violations. Waiting costs more than fixing it now.

€1,500

Cease-and-desist letters start here

The average website check by an enforcement law firm takes 4 minutes. Legal fees for a single cease-and-desist letter typically start at €1,500 — far more than the cost of fixing the issue before they find it.

2022

Google Fonts is a documented liability

The Munich District Court ruled in 2022: dynamically loading Google Fonts transfers IP addresses without consent — a clear DSGVO violation. Most websites still do this. Most owners don't know.

6/10

A cookie banner isn't enough

Of the cookie banners we review, 6 in 10 are incorrectly configured. DSGVO and TTDSG require active, per-category consent with an equally prominent "Reject" option — not just an "Accept" button.

The process

How the free audit works

  1. Submit your URL

    Via the form above — takes less than a minute.

  2. Manual review

    No automated scanners. We read your source code and test your consent flow — the same way a cease-and-desist lawyer does, and then some.

  3. Report by email

    Within 24 hours. Plain language, clear prioritization, concrete next steps.

  4. If you want fixes, not just findings

    We show you exactly what it costs to implement them. Fixed price, no guessing, no pressure.

Manual vs. automated

What an automated scanner misses

If you've already run an automated scan and it came back clean, you may have a false sense of security.

Automated scanner
Be Alpha manual audit
Checks for cookie banner existence
Checks if it actually blocks scripts before consent is given — most banners don't
Flags Google Fonts if detected
Checks every external resource loaded on every page, including lazy-loaded and conditional scripts
Takes 30 seconds
Takes 24 hours — thorough, not just fast
Cannot test the consent flow
Tests accept, reject, and dismiss scenarios manually — the same path a lawyer's tool follows
Does not verify Impressum content
Verifies all required fields under §5 TMG — a missing field is a violation, not a technicality
Scope

12 points that determine your legal exposure

Each item we check has a direct legal consequence. Here is what we look at and why it matters.

What we check
Why it matters
Cookie banner configuration
Missing "Reject" button = legally actionable under TTDSG. This alone is the most common cause of cease-and-desist letters.
Tracking scripts before consent
Scripts must not fire until consent is given. Pre-consent tracking = Art. 6 DSGVO violation, regardless of your banner.
Google Fonts loading source
External loading = IP transfer without consent. Munich District Court ruled this illegal in 2022. Most websites still do it.
Google Maps, YouTube, Vimeo embeds
Direct embed without a consent gate = data transfer on page load. Requires a click-to-load wrapper.
Legal notice (Impressum) completeness
Missing required fields = §5 TMG violation. No lawyer needed to file — anyone can report it.
Privacy policy accuracy
Must match your actual tools and processors. Generic templates do not protect you — they expose you.
Contact form privacy notice
Missing notice = Art. 13 DSGVO violation. The form is legally unusable without it.
SSL certificate
No SSL = "Not secure" warning in Chrome + Google ranking penalty + data integrity risk.
Security headers
Missing headers = open to clickjacking and injection. Required for technical DSGVO compliance under Art. 32.
External fonts and scripts
Every external resource is a potential data transfer. Each must be audited individually.
Images and content rights
Unlicensed images = copyright claim. Common, expensive, and entirely separate from DSGVO risk.
Newsletter double opt-in
No confirmed opt-in = invalid consent. Every marketing email sent to an unconfirmed address = violation.
Why Be Alpha?

No tool. No scanner. Two developers who read your code the way a cease-and-desist lawyer does.

We are not lawyers — we are developers who build DSGVO-compliant websites every day. We know how a cease-and-desist lawyer reads your source code — because we read it the same way.

Manual review

No automated scanner. We read your source code, check network requests, and test the full consent flow — including what happens when a user clicks "Reject" or closes the banner without deciding.

DACH legal focus

We audit against German and Austrian data protection law: DSGVO, TTDSG, the Munich ruling, and the current pattern of enforcement waves. Legal knowledge backed by developer precision.

One-stop fix

After the report, you don't need to pass the problem to other vendors. We identify, explain, and fix DSGVO issues — fixed price, no surprises, no follow-up sales calls.

FAQ

What others ask — and what we answer directly

I already have a cookie banner — isn't that enough?
No. A cookie banner is not automatically DSGVO-compliant. Of the banners we review, 6 in 10 are incorrectly configured — missing a "Reject" button, loading tracking scripts before consent is given, or using pre-ticked checkboxes. Existence is not the same as compliance.
We're a small business. Would a cease-and-desist lawyer really target us?
Yes. Enforcement firms use automated scans — they cannot see how large your business is, only whether your website has violations. Small businesses and solo operators receive the same letters as large companies. The fine amount may vary, but the legal fees do not.
What happens if you find problems? Do I have to buy something?
No. The report is yours — implement fixes yourself, hire another developer, or ask us. If you want our help, you'll receive a transparent fixed-price quote. No pressure, no follow-up calls.
Is the audit really free?
Yes — no strings attached, no hidden contract, no subscription trap. If you want to fix things yourself after receiving the report: great. If you'd like our help, you'll get a transparent fixed-price quote.
Which types of website are eligible?
Any website targeting a German-speaking audience: WordPress, Shopify, TYPO3, Jimdo, Wix, or a custom-built site — the platform doesn't matter. DSGVO requirements apply regardless.
What does it cost if I want you to fix it?
Our full DSGVO fix (audit, cookie banner setup, font and embed adjustments, updated privacy policy) starts at €399 as a one-time fee. Larger or more complex sites are quoted individually — always as a fixed price upfront.
How did you get my email address?
If we reached out cold: we used your publicly available contact details (legal notice or website) under Art. 6(1)(f) GDPR for legitimate business interest. You can object or request deletion at any time.
What happens to my data?
We use your information solely to process your request. No newsletters, no sharing with third parties. Details in our Privacy Policy.
Get started

Get your free DSGVO audit report

In your inbox within 24 hours. No sales calls, no commitment.

  • Manual review by developers — not an automated scanner
  • Report with concrete fixes, not just a list of errors
  • Free and no obligation — even if you implement it yourself
  • Full fix available from €399 as a fixed price

Finding issues doesn't mean you've done something wrong. Most websites have at least one. The report tells you what to fix — the implementation is easier than the legal risk.

Get my free audit report

Free · 24h report · No commitment

We complete a limited number of manual audits each week. Current turnaround: within 24 hours.

Check your website before a lawyer does.

Get my free audit report

Or call us directly: +49 XXX XXXXXXX