Does aast.org use cookies?

aast.org uses 20 cookies, 17 of which are set by third-party domains. The site uses Cookiebot as its consent management platform.

Does aast.org use a cookie banner (CMP)?

Yes. aast.org uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does aast.org use?

aast.org loads 14 third-party requests from 12 vendors, including Google LLC, Microsoft, zoom.us, Adobe Fonts, Cadent.

How many marketing and analytics cookies does aast.org set?

aast.org sets 0 marketing and 1 analytics cookies, alongside 4 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

aast.org

Item: aast.org
Rating: 14
Author: Passiro

https://aast.org

Last scanned July 26, 2026

A cookie scan of aast.org completed on July 26, 2026 found 20 cookies and 14 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 14 third-party requests were detected from 12 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

The published cookie declaration does not include all cookies observed on the site.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

20 cookies detected: 4 necessary, 1 analytics, 0 marketing, 17 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

17 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
VID before consent	www.aast.org	Analytics	LinkedIn	1.1 yr lifetime over 13 months	✓	✓	1st
cf_clearance	.us02web.zoom.us	Necessary	Cloudflare	365 d	✓	✓	3rd
OptanonConsent	.zoom.us	Necessary	OneTrust	365 d	–	–	3rd
__cf_bm	.zoom.us	Necessary	Cloudflare	Expired	✓	✓	3rd
__cf_bm	.us02web.zoom.us	Necessary	Cloudflare	Expired	✓	✓	3rd
cred before consent	us02web.zoom.us	Unknown	-	Session	✓	✓	3rd
DEFAULTLOCALE before consent	www.aast.org	Unknown	-	Session	✓	✓	1st
OnetrustActiveGroups before consent	.zoom.us	Unknown	-	365 d	✓	–	3rd
PSID before consent	www.aast.org	Unknown	-	Session	✓	✓	1st
wULrMv6t before consent	.zoom.us	Unknown	-	1.1 yr lifetime over 13 months	–	–	3rd
_zm_chtaid before consent	.zoom.us	Unknown	-	Expired	✓	✓	3rd
_zm_csp_script_nonce before consent	.zoom.us	Unknown	-	Session	✓	✓	3rd
_zm_cta before consent	us02web.zoom.us	Unknown	-	1 d	✓	✓	3rd
_zm_ctaid before consent	.zoom.us	Unknown	-	Expired	✓	✓	3rd
_zm_currency before consent	.zoom.us	Unknown	-	1 d	✓	–	3rd
_zm_mtk_guid before consent	.zoom.us	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
_zm_page_auth before consent	.zoom.us	Unknown	-	Session	✓	✓	3rd
_zm_sa_si_none before consent	.zoom.us	Unknown	-	Session	✓	✓	3rd
_zm_ssid before consent	.zoom.us	Unknown	-	Session	✓	✓	3rd
_zm_visitor_guid before consent	.zoom.us	Unknown	-	365 d	✓	–	3rd

Browser storage set by the site

Name	Domain	Party
uw-uid set by cdn.userway.org/widget_app_base_1783421028734.js:4:23198	https://www.aast.org	1st	before consent
uw-tunings set by cdn.userway.org/widget_app_base_1783421028734.js:3:13331	https://www.aast.org	1st	before consent
uw-tunings-checksum set by cdn.userway.org/widget_app_base_1783421028734.js:3:13368	https://www.aast.org	1st	before consent
uw-icon-locales set by cdn.userway.org/widget_app_base_1783421028734.js:2:26553	https://www.aast.org	1st	before consent
modernizr set by www.aast.org/modernizr-2.6.2.min.js:4:7237	https://www.aast.org	1st	before consent
modernizr set by www.aast.org/modernizr-2.6.2.min.js:4:7354	https://www.aast.org	1st	before consent
ZoomWebsdkInstanceId set by us01ccistatic.zoom.us/chat-client.js:17:1356	https://us02web.zoom.us	3rd	before consent
__ZCC__LIVECHAT__MONITOR__SessionId__ set by us01ccistatic.zoom.us/chat-client.js:8:74722	https://us02web.zoom.us	3rd	before consent
__livesdk_chat_zdt_monitor set by us01ccistatic.zoom.us/chat-client.js:8:71807	https://us02web.zoom.us	3rd	before consent
__storejs__ set by st1.zoom.us/chunk-vendor.CeA805Zm.js:52:11723	https://us02web.zoom.us	3rd	before consent
_zm_mtk_guid set by us02st1.zoom.us/all.min.js:28:57659	https://us02web.zoom.us	3rd	before consent
FTzyeq12rr set by us02web.zoom.us/zm_bundle.js	https://us02web.zoom.us	3rd	before consent
l_FTzyeq12rr set by us02web.zoom.us/zm_bundle.js	https://us02web.zoom.us	3rd	before consent

Third-Party Trackers

14 requests detected from 12 vendors: Google LLC, Microsoft, zoom.us, Adobe Fonts, Cadent...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
zoom.us before consent	Analytics	fetch	zoom.us
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Cadent before consent Cadent tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	px.adentifi.com
CHEQ before consent CHEQ tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	nexus.ensighten.com
Simpli.fi before consent Simpli.fi tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	tag.simpli.fi
Sparklit before consent Sparklit tracker domain (source: Disconnect.me, category: Email)	Marketing	script	servedbyadbutler.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com