tailwindcss.com

Checked on 9/4/2026 · https://tailwindcss.com/

52 / 100

No cookie banner in the initial HTML · Privacy-policy link: no · Legal-notice link: no

Best-case value: the issues found are the minimum. Behind a tag manager or cookie banner, further services can load that this scan does not see — the real value is likely lower.

Critical items: 2.

How is the score calculated? (100 starting points)

Analytics service: Google Analytics	-15
Tag manager: Google Tag Manager	-12
Tag manager loads further scripts unchecked	-6
No link to the privacy policy found	-15
Result	52 / 100

Multiple services of the same kind count on a sliding scale. The score is a guide, not a legal verdict.

What this scan doesn't see consentglass reads only the first, unmodified HTML — without executing JavaScript. A tag manager is embedded — which services it loads is decided only in the browser. So a good result here doesn't automatically mean “GDPR-compliant”. Monitoring runs the full test with JavaScript enabled.

Tiefen-Scan (mit JavaScript) Lädt die Seite wie ein echter Browser, führt JavaScript aus und protokolliert, welche Dritt-Dienste vor einer Einwilligung feuern und wie sich das Banner beim Ablehnen verhält. Dauert etwa eine Minute.

Findings

Critical

2 services requiring consent, no cookie banner in the initial HTML

Analytics, advertising or social services load without any consent solution being detectable.

What you should do: Add a consent tool that loads these services only after active consent (not just displays a banner). Until then, remove the scripts or switch to consent-free alternatives.

§ 25 (1) TDDDG together with Art. 6 (1) GDPR — access to terminal equipment only with prior consent.

Critical

No link to the privacy policy found

A privacy policy must be directly reachable from every page.

What you should do: Place a “Privacy” link permanently in the footer so it is visible on every subpage.

Art. 13 GDPR — duty to inform when collecting personal data.

Next steps

2 services requiring consent, no cookie banner in the initial HTML. Add a consent tool that loads these services only after active consent (not just displays a banner). Until then, remove the scripts or switch to consent-free alternatives.
No link to the privacy policy found. Place a “Privacy” link permanently in the footer so it is visible on every subpage.

Third parties detected (2)

Service	Purpose	Vendor	Country	Legal basis
Google Analytics www.google-analytics.com	Audience measurement and usage analysis	Google LLC	US ⚠	Consent required
Google Tag Manager www.googletagmanager.com	loads further scripts — content depends on the configuration	Google LLC	US ⚠	Consent required once it loads non-essential items

⚠ Established outside the EU/EEA — the transfer needs an additional basis (e.g. the EU-US Data Privacy Framework or standard contractual clauses).

Monitor this URL automatically?

Weekly re-scan, email as soon as a new tracker appears — coming soon.

Method & limits

On 9/4/2026 we checked the HTML that tailwindcss.com delivers on first load without a login (normal desktop browser, EU location). Detected: services embedded in the source (scripts, stylesheets, iframes, pixels), a cookie banner based on known providers, cookies from the server response, and links to the privacy policy and legal notice.

Not checked: anything that loads only via JavaScript, content behind a login, subpages, behaviour after clicking “Accept”/“Reject”, server locations and data-processing agreements. The result is an automated snapshot and not a substitute for legal advice.

Scan another website