Checked on 9/18/2026 · https://liocont.md/
Best-case value: the issues found are the minimum. Behind a tag manager or cookie banner, further services can load that this scan does not see — the real value is likely lower.
Critical items: 2 · also to review: 1.
| Third-party CDN: jsDelivr CDN | -5 |
| Third-party CDN: unpkg CDN (additional) | -2 |
| Google Fonts (loaded externally): Google Fonts (CSS) | -10 |
| Cookie banner detected (Cookie Consent (Osano/Insites)) | +5 |
| No link to the privacy policy found | -15 |
| Result | 73 / 100 |
Multiple services of the same kind count on a sliding scale. The score is a guide, not a legal verdict.
Cookies set on first load: ci_session
On page load the visitor's IP address goes to Google (USA). In the DACH region the most common cease-and-desist reason.
What you should do: Embed the fonts locally: download the font files, serve them from your own server via @font-face and remove the calls to fonts.googleapis.com / fonts.gstatic.com. In WordPress, plugins such as “OMGF” handle this.
LG München I, judgment of 20 Jan 2022 – 3 O 17493/20 (€100 damages for dynamically loaded Google Fonts).
A banner is embedded. Whether the services really load only after consent cannot be determined conclusively from the initial HTML.
What you should do: Test it yourself: open the page in a private window, developer tools → “Network”, reload and see whether e.g. google-analytics appears before a click on “Accept”. Monitoring does this test automatically.
A privacy policy must be directly reachable from every page.
What you should do: Place a “Privacy” link permanently in the footer so it is visible on every subpage.
Art. 13 GDPR — duty to inform when collecting personal data.
| Service | Purpose | Vendor | Country | Legal basis |
|---|---|---|---|---|
| jsDelivr CDN cdn.jsdelivr.net |
Delivery of libraries or maps via third-party servers | jsDelivr | EU | Grey area — better to self-host; otherwise consent |
| unpkg CDN unpkg.com |
Delivery of libraries or maps via third-party servers | Cloudflare/npm | US ⚠ | Grey area — better to self-host; otherwise consent |
| Google Fonts (CSS) fonts.googleapis.com |
Web fonts; the request transmits the visitor's IP to the provider | Google LLC | US ⚠ | Consent required — or host the fonts locally |
⚠ Established outside the EU/EEA — the transfer needs an additional basis (e.g. the EU-US Data Privacy Framework or standard contractual clauses).
Weekly re-scan, email as soon as a new tracker appears — coming soon.
On 9/18/2026 we checked the HTML that liocont.md delivers on first load without a login (normal desktop browser, EU location). Detected: services embedded in the source (scripts, stylesheets, iframes, pixels), a cookie banner based on known providers, cookies from the server response, and links to the privacy policy and legal notice.
Not checked: anything that loads only via JavaScript, content behind a login, subpages, behaviour after clicking “Accept”/“Reject”, server locations and data-processing agreements. The result is an automated snapshot and not a substitute for legal advice.