Cookie & Consent Check

Why this check matters

Your current Privacy Policy states that the website uses no cookies, tracking, or newsletter tools. This is only accurate if it is true on the technical level, including anything the website builder or host (Framer.com) adds automatically. If anything beyond strictly necessary cookies is found, you will need a cookie-consent banner under the German TDDDG / EU ePrivacy rules and an added section in the Privacy Policy — not just a disclaimer.

Step 1. Check what Framer.com sets automatically

Many website builders or hosts set cookies by default for session management, load balancing, security, or built-in analytics, regardless of what content you add. Ask your hosting provider or check their documentation for:

• Whether the platform sets a session cookie or load-balancer cookie by default.

• Whether the hosting platform includes built-in visitor analytics or statistics, even if described as anonymous or privacy-friendly.

• Whether any fonts, icons, or scripts are loaded from external servers, such as Google Fonts loaded live from Google servers rather than self-hosted.

• Whether the site embeds third-party content such as YouTube videos, Google Maps, or social media buttons/widgets, which may set cookies or contact external servers before consent.

Step 2. Check the contact form specifically

• Whether the contact form uses a spam-protection service such as Google reCAPTCHA or hCaptcha, which typically involves cookies and data transfer to the provider.

• Whether the contact form submission is handled entirely by Framer.com’s own server or calls an external form service such as Formspree or HubSpot forms.

• Whether submitting the form triggers an automatic email or CRM tool that stores data outside the EU.

Step 3. Check your own browser

As a simple manual check, open the website in a private or incognito browser window. Before clicking anything on the page, open the browser’s site information or cookie panel, usually via the padlock icon in the address bar. Note every cookie or storage entry listed, its name, and which domain set it.

Step 4. Decide what applies

If you find only strictly necessary or technical cookies, such as session, security, or load-balancing cookies, the current Privacy Policy wording is usually sufficient and a separate cookie banner is not legally required for those cookies under the ePrivacy rules.

If you find analytics, embedded third-party content, fonts loaded live from external servers, reCAPTCHA, or similar services, you will need both of the following:

• A cookie / consent banner that blocks non-essential cookies until the visitor actively consents. This must be opt-in, not just an information banner.

• An added Privacy Policy section naming each service, its provider, purpose, and data transferred, including transfers to the US where relevant, such as Google services.

Step 5. Action items

• Contact Framer.com support and ask directly: “What cookies, analytics, or third-party scripts does your platform set on my site by default?”

• Review whether any embeds, maps, videos, fonts, social buttons, booking tools, or plugins were added while building the page.

• If anything beyond strictly necessary cookies is found, request an updated Privacy Policy section and a consent-banner solution before launch.

• Re-run this check after any future website change, such as adding a new plugin, embed, or booking tool.

Note

This checklist is a practical self-audit tool, not a substitute for individual legal advice.