Does 18win.bond use cookies?

18win.bond uses 11 cookies. No consent management platform was detected.

Does 18win.bond use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on 18win.bond. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does 18win.bond use?

18win.bond loads 30 third-party requests from 15 vendors, including analytics.yollamedia.com, Cloudflare, ContentSquare, Google LLC, Microsoft.

How many marketing and analytics cookies does 18win.bond set?

18win.bond sets 0 marketing and 8 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

18win.bond

Item: 18win.bond
Rating: 8
Author: Passiro

https://18win.bond

Last scanned July 26, 2026

A cookie scan of 18win.bond conducted on July 26, 2026 found 11 cookies and 30 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 30 third-party requests from 15 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✗

HSTS

✗

Content Security Policy

✗

Cookies

11 cookies detected: 0 necessary, 8 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.18win.bond	Analytics	Google Analytics	1.1 yr	–	–	1st
_ga_8GZ14475M1 before consent	.18win.bond	Analytics	Google Analytics	1.1 yr	–	–	1st
_ga_ERS08K7E8X before consent	.18win.bond	Analytics	Google Analytics	1.1 yr	–	–	1st
_gcl_au before consent	.18win.bond	Analytics	Google Analytics	77 d	–	–	1st
_hjSessionUser_3259071 before consent	.18win.bond	Analytics	Hotjar	352 d	✓	–	1st
_hjSession_3259071 before consent	.18win.bond	Analytics	Hotjar	Expired	✓	–	1st
_sharedid before consent	.18win.bond	Analytics	Marfeel	352 d	–	–	1st
_sharedid_cst before consent	.18win.bond	Analytics	Marfeel	352 d	–	–	1st
optinly_last_session_time before consent	18win.bond	Unknown	-	77 d	–	–	1st
optinly_page_views_count before consent	18win.bond	Unknown	-	77 d	–	–	1st
optinly_sessions_count before consent	18win.bond	Unknown	-	77 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
YMPB_OPTIONS.__YMPB_TEST_KEY__ set by portal.cdn.yollamedia.com/pscc0d2ba8ef37a771ca97b4a447d442a20ec5d109.js:149:58	https://18win.bond	1st	before consent
YMPB_OPTIONS._CASE_SESSION set by portal.cdn.yollamedia.com/pscc0d2ba8ef37a771ca97b4a447d442a20ec5d109.js:149:58	https://18win.bond	1st	before consent
YMPB_OPTIONS._GEO set by portal.cdn.yollamedia.com/pscc0d2ba8ef37a771ca97b4a447d442a20ec5d109.js:149:58	https://18win.bond	1st	before consent
MOE_DATA set by cdn.moengage.com/moe_webSdk.min.latest.js:2:79248	https://18win.bond	1st	before consent
_hjLocalStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217238	https://18win.bond	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217463	https://18win.bond	1st	before consent
hjViewportId set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:80327	https://18win.bond	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:80463	https://18win.bond	1st	before consent
YOLLA_CACHE.__YMPB_TEST_KEY__ set by portal.cdn.yollamedia.com/ympb.js:14:621871	https://18win.bond	1st	before consent
YOLLA_CACHE_VERSION.__YMPB_TEST_KEY__ set by portal.cdn.yollamedia.com/ympb.js:14:621871	https://18win.bond	1st	before consent
YOLLA_CACHE_VERSION.VERSION set by portal.cdn.yollamedia.com/ympb.js:14:621871	https://18win.bond	1st	before consent
prebid.cookieTest set by portal.cdn.yollamedia.com/ympb.js:14:43282	https://18win.bond	1st	before consent
_gcl_ls set by www.googletagmanager.com/js	https://18win.bond	1st	before consent
__id5test set by cdn.id5-sync.com/id5PrebidModule.js:7:26134	https://18win.bond	1st	before consent
id5id_privacy_exp set by cdn.id5-sync.com/id5PrebidModule.js:7:25839	https://18win.bond	1st	before consent
id5id_privacy set by cdn.id5-sync.com/id5PrebidModule.js:7:25839	https://18win.bond	1st	before consent
id5id_exp set by portal.cdn.yollamedia.com/ympb.js:14:43507	https://18win.bond	1st	before consent
id5id_cst set by portal.cdn.yollamedia.com/ympb.js:14:43507	https://18win.bond	1st	before consent
id5id set by portal.cdn.yollamedia.com/ympb.js:14:43507	https://18win.bond	1st	before consent
id5id_last set by portal.cdn.yollamedia.com/ympb.js:14:43507	https://18win.bond	1st	before consent

Third-Party Trackers

30 requests detected from 15 vendors: analytics.yollamedia.com, Cloudflare, ContentSquare, Google LLC, Microsoft...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
analytics.yollamedia.com before consent	Analytics	fetch	analytics.yollamedia.com
Cloudflare before consent Cloudflare tracker domain (source: Disconnect.me, category: Content)	Analytics	script	www.cloudflare.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	content.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Plausible before consent Plausible tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	plausible.io
www.google.com before consent	Analytics	fetch	www.google.com
33Across before consent 33Across tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	lexicon.33across.com
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	gum.criteo.com
Google LLC before consent YouTube embedded video	Marketing	iframe	www.youtube.com
Google LLC before consent Google IMA SDK video ads	Marketing	script	imasdk.googleapis.com
ID5 before consent ID5 tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	id5-sync.com
ID5 before consent ID5 tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	lbs.eu-1-id5-sync.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing	Marketing	script	bat.bing.net
MoEngage before consent MoEngage tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	cdn.moengage.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	yt3.ggpht.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
InMobi InMobi tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cmp.inmobi.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	securepubads.g.doubleclick.net
MaxMind before consent MaxMind tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	js.maxmind.com
PublicisGroupe before consent PublicisGroupe tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	id.crwdcntrl.net