What we load, what we never touch.

One visit, like a first-time visitor

We load the page you submit once, from a real connection in the scan country (currently Germany), with a normal desktop browser. On a simple “I'm 18” or date-of-birth gate we may click the confirm button once, or enter one fixed adult test date once.

Media files: headers only

To test whether media is handed out before an age check, we send HEAD requests (headers only) to a small sample of files: at most 10 per check, 20 per scan. We never download images, video or audio, and never look at or classify what they show.

Public indexes

We read robots.txt, sitemaps, feeds and on WordPress one media listing request, as No451Bot, and we obey robots.txt for those reads.

What we never do

• Download media bodies.
• Log in, register, subscribe or pay.
• Solve or work around CAPTCHAs or bot checks.
• Bypass an age check or paywall, or go through an age-check provider's check. One exception, only for site owners who verified their site (DNS TXT or meta tag): three tests that try what a crawler, a fake “over 18” cookie or a direct inner-page link would get. Never on anyone else's site.

What you get

“Scan completed” means the scan ran, not that your site passed. You see how many measured checks failed and the most urgent finding in full: evidence and the fix.

Site owners: who visits you, and how to say no

Full details on the scanner, its limits and the do-not-scan opt-out are on No451Bot.