Third-party code audit
Every external script, font, pixel, and embed on the site gets listed — with what it does and who receives the data. Then we remove what isn't earning its place and self-host what is.
🛡️ Security & privacy migration
A Website Without Trackers, Bloat, or Guesswork
Most sites carry a stack of third-party scripts nobody chose deliberately — each one slowing the page down and sending your visitors' data somewhere you can't see. We move your site to a clean, hardened setup and keep every link and ranking you already have.
- Third-party trackers, pixels, and ad scripts removed
- HTTPS, security headers, and a strict content policy applied
- Existing URLs redirected properly, so search rankings carry over
- A written report of what was found and what changed
🔧 What's involved
Six things every migration covers
The list below is the baseline. Anything beyond it is scoped and quoted after the review, never added silently.
Transport & headers
HTTPS enforced everywhere, modern TLS configuration, and the security headers most sites are missing — content policy, frame protection, referrer policy, MIME-type protection.
URLs and redirects
Every existing address is mapped to its new home with a permanent redirect. Links people have bookmarked keep working, and search engines carry your ranking across instead of starting over.
Weight and speed
Removing tracking scripts is usually the single largest speed improvement available to an existing site. Compression, image optimisation, and caching finish the job.
Data-collection review
What your site actually collects, where it goes, and whether your privacy policy still describes reality. Most consent banners exist because of scripts nobody needed.
A written report
What we found, what we changed, what we deliberately left alone, and what we recommend next. Plain language, kept for your records.
🔍 What a typical site looks like
Before and after
You can check the left column on your own site right now: open it in a browser, press F12, and look at the Network tab. Every domain other than your own is a third party receiving something.
What we usually find
- Analytics, advertising, and social pixels loading on every page
- Fonts and scripts pulled from other companies' servers
- A consent banner that exists only because of those scripts
- Missing security headers, so the browser's defences stay off
- Megabytes of payload before a single word is readable
- A privacy policy describing a site that no longer exists
What you get instead
- Nothing loading from anyone else's servers by default
- Fonts and assets self-hosted, so pages render immediately
- Far less consent theatre, because there's far less to consent to
- Security headers set and verified against a real request
- A page that is a fraction of its previous weight
- Documentation that matches what the site actually does
This site is the reference build
Open your browser's Network tab on any page here. Every request goes to this domain — no analytics, no CDN, no external fonts. That's the standard we migrate clients to, and you can verify it yourself in about ten seconds. The reasoning is written up in our privacy tutorials.
📋 How it works
Nothing moves until the map is agreed
A migration goes wrong when links break and rankings vanish. That is entirely preventable, and preventing it is most of the work.
1
Review
We examine what your site loads, what it collects, and how it is served. Free, and yours to keep either way.
2
Plan
A written scope: what gets removed, what gets replaced, and a complete map of old address to new address.
3
Stage
The new site is built and tested away from the public one. Nothing visitors see changes yet.
4
Switch
We cut over with redirects live from the first second, and the old version kept intact so it can be restored.
5
Confirm
Redirects, forms, headers, and indexing all verified after the switch — then you get the written report.
💬 The straight answers
How much, how long, and why us
How much does it cost?
It depends almost entirely on what the site is built on and how many pages need mapping. A small static site is a modest job; a large site on an unfamiliar platform is a larger one.
The review is free and comes before any quote, so the number you get is based on what is actually there rather than a guess. See what drives website cost.
How long does it take?
Most migrations run 1–3 weeks, and the visitor-facing switch itself is a single planned changeover rather than a period of downtime.
The review comes first and is quick. Building and testing the replacement is the part that takes the time — deliberately, because that is where broken migrations are prevented.
Why build with us?
Because we publish the security work rather than just claiming it. There are 141 free tutorials on this site covering the same ground we apply to client work.
You can read exactly how we think about this before you spend anything — start with web security.
❓ FAQ
Migration & security questions
Will I lose my Google rankings?
Not if the migration is done properly. Rankings are lost when old addresses start returning errors instead of pointing at their replacements. We map every existing URL to its new location with a permanent redirect before the switch, and verify them afterwards.
Does removing trackers mean I lose all my analytics?
You lose third-party surveillance, not measurement. Server-side statistics and privacy-respecting analytics can tell you what pages are read and where visitors arrive from without profiling anyone. We'll walk through the options with you.
Does this make my site GDPR compliant?
It removes a large part of what usually creates the obligation — most consent banners exist because of advertising and analytics scripts. But compliance depends on everything your organisation does with personal data, not only your website, so we don't claim to certify it. We tell you exactly what the site collects; a lawyer signs off compliance.
Will my site go offline during the move?
No. The replacement is built and tested separately, and the switch is a single planned changeover. The previous version is kept intact so it can be restored if anything unexpected appears.
Can you work with my existing platform?
Often, yes — a lot can be improved without a rebuild. The review tells us whether hardening what you have is the better answer, or whether replacing it costs less than maintaining it. We'll say which, plainly.
My site was hacked. Is that the same service?
Related, but the order matters: a compromised site needs containing and cleaning before anything is migrated. Start with our page on what to do when a website is hacked, then this becomes the step that stops it recurring.
Start with the free review
Send us your address and we'll tell you what your site currently loads, what it sends where, and what we'd change. You keep the findings whether or not you hire us.
Free review • No obligation • Findings are yours to keep