Skip to content
PeekWell
Join now

Questions founders ask before they scan

Cheeky asks what you’d ask. Peeky answers in a few plain sentences.

Cheeky, chin on hand, thinking it over.

The scan

Does my website need a privacy policy?

Almost always. If your site collects anything about visitors, analytics included, the rules in the EU, UK and US expect a privacy policy people can find from any page.

Peeky checks that yours loads and that it names the services your site talks to. Whether it covers what your business does is a question for your lawyer.

The rule is in the Rulebook: EU-09, UK-10 and US-13.

Is my website GDPR compliant, and how would I find out?

Not from the outside, and Peeky won’t say it either. Only a regulator or a court can.

What Peeky does is visit your public pages and note what it saw against 15 EU checks: cookies, privacy policy, data requests, reviews, subscriptions, accessibility and the connection. You get a fix for each finding. Your lawyer decides what it means.

See how a scan works.

Is my website ADA compliant?

That’s not something a scan can decide. Peeky can show you what it saw, and a court or your lawyer says what it means.

The US check looks at ADA Title III and the Unruh Act. Peeky runs automated accessibility tests on your public pages and writes up what they found. Tests like these catch only part of what matters, so someone still needs to try the site with a keyboard and a screen reader.

The Rulebook entry is US-06.

What does PeekWell actually scan?

Your public pages. Peeky opens them in an ordinary browser, answers the cookie banner both ways and reads the policies you link to. It never signs in or fills in forms.

Cookies are about a quarter of it. The other checks cover privacy policies, data requests, reviews and countdowns, subscriptions, accessibility, marketing email and the connection itself.

All 45 checks are on How it works.

Does the scan look at cookies before I click anything?

Yes. Peeky opens your page, leaves the banner alone and writes down which cookies and requests show up. Then it goes round again, once saying no and once saying yes. A pass with the browser’s privacy signal switched on comes after that.

Anything that starts tracking before a yes is what EU-01 looks at.

What is a website compliance audit?

It’s a close look at how a website behaves, measured against a set of rules. A person or a firm usually does it.

A PeekWell scan is lighter. Peeky visits your public pages the way a visitor’s browser does and writes down what it saw. The report is for information and doesn’t replace a formal audit.

See how a scan works.

Can the scan check accessibility?

Partly. Peeky runs automated accessibility tests on your public pages, in the EU, UK and US checks.

Tests like these can’t tell how a site feels with a screen reader. Treat the findings as a good start, and have a person try the site too.

The Rulebook entries are EU-10, UK-12 and US-06.

Does it catch fake urgency timers and other dark patterns?

Yes, the ones a visitor can see. Peeky checks whether countdowns and “only 2 left” counters reset themselves, and notes costs added late and boxes ticked in advance.

Whether a timer misleads anyone is for a regulator to say. Peeky writes down what the timer did.

Read the rule in EU-12, UK-14 or US-08.

Can it spot fake reviews on my site?

Not quite. Peeky can see when reviews and testimonials give no way to check them, or read like they were paid for. It can’t know who wrote a review.

Anything it flags is marked as a possibility, not a fact.

The Rulebook has EU-11, UK-13 and US-01.

The report

What does a compliance report look like?

A score on top, then a list of findings. Each one says what Peeky saw, why it matters and what to do next, with the evidence underneath. Checks that passed are in there too.

The summary comes first. The detail is there when your developer needs it.

A full sample finding is on How it works.

Will the report tell me how to fix each finding?

Yes. Every finding ends with a fix your developer can use as it is, and a prompt you can copy.

Peeky also links the rule behind it. The fixing is still yours, and the next scan shows whether it worked.

See one in full on How it works.

Does my site need a way to receive data subject access requests?

Usually, yes. In the EU and UK, people can ask what you hold about them, and the rules expect your site to show them how.

Peeky checks that a way to ask exists and that a visitor can find it. It can’t see how fast you answer.

The Rulebook has EU-07 and UK-09.

What do the subscription cancellation rules ask for?

In short, that people see the renewal terms before they buy and can cancel as easily as they signed up. The details differ by place.

Peeky reads your pages for the terms and checks how easy the way to cancel is to find. It can’t test a live cancellation.

The Rulebook has EU-13, UK-14 and US-09.

What is drip pricing and will the scan flag it?

Partly. Drip pricing is when extra costs show up one step at a time, after you’ve seen the first price.

Peeky notes costs added late on the public pages it can see. It never goes through a checkout, so what happens at the till stays out of view.

The Rulebook entry is US-08.

What are security headers and does the report mention them?

Yes, briefly. Security headers are instructions your server sends with each page, telling the browser how careful to be.

Peeky checks that the connection is encrypted and that the usual headers are there. That’s a look at what your server sends, not a security test.

The Rulebook has EU-15, UK-15 and US-15.

Are there email marketing rules the scan looks at?

Yes, the ones that show on your pages. Peeky looks at how your sign-ups ask for permission and whether there’s a clear way to opt out.

It can’t see the emails you send.

The Rulebook has UK-11 and US-14.

Does the scan cover the European Accessibility Act?

In part. The EU check runs accessibility tests on your public pages and ties what it finds to the Act.

Automated tests can’t judge everything the Act is about, and whether it applies to you is a question for your lawyer.

The Rulebook entry is EU-10.

Can the report help with investor due diligence?

It can help you get ready. The report is a dated list of what Peeky saw on your public pages, and it’s easy to hand over.

It isn’t a sign-off, though. Investors usually ask for more than a look at public pages. With Accreditation, the monthly scans also show how your site has held up over time.

See what each plan includes.

The badge

What is a trust badge?

A small graphic on a website that tells visitors something about the business. Some are just an image anyone can paste in.

PeekWell’s accreditation badge works differently. It shows what the latest monthly scan observed, and it switches off when the score doesn’t hold.

See a sample badge.

What does the PeekWell badge show?

The result of your latest monthly scan. It shows while that scan holds the score, and it switches off by itself when a scan doesn’t.

It goes with a public accreditation page, where the detail lives.

The sample on How it works lets you step through five months.

Can I put the badge on my website?

Yes, with Accreditation. It’s €19 a month, comes with Plus, and includes the badge and the public page.

The badge shows what the latest scan saw. If a month’s scan doesn’t hold the score, it comes down.

Prices exclude VAT. See the plans.

What is on the public accreditation page?

The score from your latest monthly scan, a card for each region and the score history.

The page says what the scan observed and when. It’s for information only and not legal advice.

A sample page for an imaginary site is on How it works.

Is the badge an official seal of approval?

No. Nobody approves your website, and no regulator stands behind the badge.

The accreditation page and the badge record what Peeky observed on your public pages in the latest monthly scan, and when. They don’t say your website follows any rule.

See what the page shows on How it works.

The price

How much does PeekWell cost?

Trial is free. Plus is €79 once, per company. Accreditation is €19 a month, and it comes with Plus.

Prices exclude VAT. Pricing has pounds and dollars too.

Why re-scan every month?

Because websites change. A new script, a rewritten policy, an updated banner. One scan shows one day.

A scan each month shows how the site holds up over time. It’s also what the accreditation page is built on: the badge shows while the latest monthly scan holds the score.

See Accreditation.

Is there a free check?

Yes, once. Trial gives you one website in one jurisdiction, with the score, the summary and one finding in full. You don’t need a card.

See what Trial includes.

Can I cancel any time?

Yes. Accreditation is monthly, so you can cancel whenever you like. It runs to the end of the month you’re in, then the public page and badge come down.

Plus is a one-time payment, so there’s nothing to cancel.

More on Pricing.

What Peeky doesn’t do

Is PeekWell a security scanner?

No. Public pages only. Peeky never signs in, submits forms, tests passwords or looks for weaknesses. PeekWell is not a security testing service and cannot be used as one.

What Peeky reads, and what it can’t, is on How it works.

If the report looks clean, will a regulator leave me alone?

Not quite. A clean report means Peeky didn’t see a problem on the pages it scanned. It can’t see your contracts or the emails you send, and it doesn’t speak for any regulator.

See what Peeky can’t see.

Still curious? Let Peeky look.

Your first look is free and takes about three minutes.

Join now

For information only. Not legal advice.