Does aats.au use cookies?

aats.au uses 7 cookies. No consent management platform was detected.

Does aats.au use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on aats.au. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does aats.au use?

aats.au loads 11 third-party requests from 7 vendors, including Automattic, ContentSquare, events.jotform.com, tracker.metricool.com, Google LLC.

How many marketing and analytics cookies does aats.au set?

aats.au sets 2 marketing and 3 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

aats.au

Item: aats.au
Rating: 32
Author: Passiro

https://aats.au

Last scanned July 27, 2026

A cookie scan of aats.au completed on July 27, 2026 found 7 cookies and 11 third-party tracking requests. The assessment covered 9 pages across 9 unique page templates. No consent management platform was detected. Our check observed 11 third-party requests from 7 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

7 cookies detected: 0 necessary, 3 analytics, 2 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
tk_r3d before consent	.aats.au	Analytics	WordPress	3 d	–	–	1st
_hjSessionUser_3683380 before consent	.aats.au	Analytics	Hotjar	365 d	✓	–	1st
_hjSession_3683380 before consent	.aats.au	Analytics	Hotjar	Expired	✓	–	1st
cookieyes-consent	aats.au	Functional	CookieYes	365 d	✓	–	1st
tk_lr before consent	.aats.au	Marketing	WordPress	365 d	–	–	1st
tk_or before consent	.aats.au	Marketing	WordPress	1.1 yr lifetime over 13 months	–	–	1st
ep_session_id before consent	aats.au	Unknown	-	Session	✓	–	1st

Browser storage set by the site

Name	Domain	Party
_hjLocalStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217238	https://aats.au	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217463	https://aats.au	1st	before consent
elementor set by aats.au/frontend.min.js	https://aats.au	1st	before consent
elementor set by aats.au/frontend.min.js	https://aats.au	1st	before consent
wc set by aats.au/cart-fragments.min.js	https://aats.au	1st	before consent
wc set by aats.au/cart-fragments.min.js	https://aats.au	1st	before consent
hjViewportId set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:80327	https://aats.au	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:80463	https://aats.au	1st	before consent
wc_fragments_a53f39790d3b1db331c0127cf886d16f set by aats.au/cart-fragments.min.js	https://aats.au	1st	before consent
wc_cart_hash_a53f39790d3b1db331c0127cf886d16f set by aats.au/cart-fragments.min.js	https://aats.au	1st	before consent
wc_cart_hash_a53f39790d3b1db331c0127cf886d16f set by aats.au/cart-fragments.min.js	https://aats.au	1st	before consent

Third-Party Trackers

11 requests detected from 7 vendors: Automattic, ContentSquare, events.jotform.com, tracker.metricool.com, Google LLC...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Automattic before consent Automattic tracker domain (source: Disconnect.me, category: Content)	Analytics	script	stats.wp.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
events.jotform.com before consent	Analytics	pixel	events.jotform.com
tracker.metricool.com before consent	Analytics	script	tracker.metricool.com
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
CookieYes CookieYes consent management	Necessary	script	cdn-cookieyes.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
PayPal Holdings PayPal static resources	Necessary	script	www.paypalobjects.com