bedrop.de website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user LCP: 2.5 s

  2.5 s

  Real visitors wait 2.5 s for the largest content to appear (75th percentile). Good is under 2.5 s.

• Real-user INP: 365 ms

  365 ms

  Real visitors wait 365 ms for the page to respond to a tap (75th percentile). Good is under 200 ms.

• Tap response (INP) got 27% slower for real visitors

  +27%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 276 ms to 364 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Page weight: 3.8 MB

  3.8 MB

  Your homepage downloads 3.8 MB on a phone, 556 KiB of it images (14%). Under 2 MB keeps phones on slow connections fast.

• 2 images below the first screen load straight away

  2 images further down the page (66 KiB) download before anyone scrolls to them. Adding loading="lazy" lets the first screen load first.

  Elements (2)

• About 1.1 g of CO₂ per visit

  1.09 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.09 g of CO₂e: 130.8 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• Images must have alternative text (1 element)

  Images must have alternative text: 1 element on the page fails this check, rated critical by axe-core.

  Elements (1)

• All page content should be contained by landmarks (10 elements)

  All page content should be contained by landmarks: 10 elements on the page fail this check, rated moderate by axe-core.

  Elements (3)

• 29 links without text

  29 visible links have no text or label, so screen readers cannot say where they go.

• Title is long (68 characters)

  Your title is 68 characters, so Google will cut it off around 60: “bedrop - Shop für Propolis, Geleé Royal & Manuka Honig | Hier kaufen”.

  View source

• 2 H1 headlines

  There are 2 <h1> headlines (“bedrop.de” and “Die Pflege, die Deine Haut wirklich spürt”). One clear main headline is easier for people and search engines.

  View source

• Meta description is long (188 characters)

  Your meta description is 188 characters; Google truncates after about 160, so the end of your pitch is cut.

  View source

• No social preview image

  No Open Graph image, so links shared on LinkedIn, Slack or Facebook show no preview picture.

  View source

• 426 internal links, 24 external

  The homepage links to 426 pages on bedrop.de and 24 external pages.

• 1 page without a meta description

  /pages/sale-manuka-honig-mgo-1000 has no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (1)

• 4 pages without an H1

  /collections/bienengift-salbe, /collections/propolis-mundspray, /collections/propolis-tinktur and /collections/gelee-royale-kapseln have no <h1> headline, so visitors and search engines get no clear main topic.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 141 found) and read each the way a search engine does.

• 9 small tap targets

  9 of 34 tappable elements near the top of the page are smaller than 24 px, hard to hit with a thumb.

• 4 JavaScript errors while loading

  4 errors were logged to the browser console while the page loaded, for example “Cannot read properties of undefined (reading 'marketingAllowed')”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• 1 link through redirect chains

  1 link go through two or more redirects, for example https://selecdoo.me/bedrop.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No CAA record

  bedrop.de has no CAA record, so any certificate authority may issue a certificate for it. A CAA record naming your provider (for example letsencrypt.org) closes that door.

• No call to action on the first screen

  On a phone, there is no call to action on the first screen: visitors have to scroll to find out what to do next.

• No calls to action

  We found no call-to-action buttons or links (such as “Book a demo” or “Get a quote”) anywhere on the homepage.

• Local business without LocalBusiness data

  Your homepage shows a street address but no LocalBusiness JSON-LD, so Google and AI assistants have to guess your address, hours and phone from the page text.

  View source

• No phone number on the homepage

  A local customer looking to call finds no phone number on the homepage. Add one, ideally as a tap-to-call link.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No opening hours

  The homepage shows no opening hours. If customers visit or call, show when.

• No map or directions link

  There is no link to Google or Apple Maps. A directions link is one tap for a phone visitor.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 469 words of copy

  The homepage carries about 469 words of visible text.

• Urgency cues

  The page uses urgency cues (a countdown or limited-time wording).

• Email authentication score: 90/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 10 trackers load before any consent

  10

  Before a visitor clicks anything, the page loads Google Analytics, Klaviyo, Meta Pixel, Microsoft Ads and Microsoft Clarity and 5 mores (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 37 cookies set on arrival

  37

  Opening the homepage sets 37 cookies, 1 of them by other companies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 58 other companies contacted

  Loading the homepage contacts 58 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.