Best practices
HTTP/2, compression, caching, consent, privacy links and the basics of a well-built site.
Guides
- Best practices12 min read
A cookie banner that passes: reject button, lifetime, consent mode
What a compliant cookie banner looks like in 2026: Reject next to Accept, cookie lifetimes of 13 months or less, Consent Mode v2 set to denied first, and how the cookie scanner checks each one.Updated 25 Sept 2026 - Best practices12 min read
Cache-Control for humans: what to cache, how long, how to bust it
Set browser caching once and stop sending returning visitors the same files again. Three policies cover every file, with configs for nginx, Apache, Caddy, Cloudflare and WordPress and a free checker.Updated 25 Sept 2026 - Best practices11 min read
Console errors and deprecated APIs: what the report flags
What the console errors, deprecated APIs and document.write findings mean, where the errors usually come from, and how to reproduce and fix each one, with code for the common cases.Updated 25 Sept 2026 - Best practices14 min read
Cookies before consent: does your banner actually block trackers?
See which cookies and trackers load before visitors answer your cookie banner, what EU rules require, and how to make Tag Manager, Consent Mode and your consent platform wait for the click.Updated 25 Sept 2026 - Best practices11 min read
Custom 404 pages that help: status codes, content and the check
A good 404 page keeps the visitor on your site and tells search engines the page is gone. What to put on it, how to make sure it returns a real 404, and how getReport tests yours with a random URL.Updated 25 Sept 2026 - Best practices14 min read
GA4 and Tag Manager: what they cost your page and how to load them
See what GA4 and Google Tag Manager cost your page in bytes and main-thread time, the loading options ranked by cost, Consent Mode v2 defaults in code, and a container clean-up list.Updated 25 Sept 2026 - Best practices11 min read
HTML validation errors: which ones matter and which are noise
A validator can list 200 errors on a page that works. Learn the handful that change how browsers, screen readers and Google read the page, how to find them, and which ones you can safely ignore.Updated 25 Sept 2026 - Best practices11 min read
Privacy policy and contact links: the trust signals a report checks
What the privacy policy and contact checks look for, what a small site's privacy policy and contact page should contain, where to link them, and how to keep the policy in line with your cookies.Updated 25 Sept 2026 - Best practices11 min read
Text compression: gzip and Brotli explained (with configs)
Gzip and Brotli shrink HTML, CSS and JavaScript by 70–80 % before they leave your server. See what to compress, which to pick, and configs for nginx, Apache, Caddy and Cloudflare.Updated 25 Sept 2026
Check all 28 at once
The HTTP/2 test runs every check on this page against your site.