Does access.byu.edu use cookies?

access.byu.edu uses 7 cookies, 4 of which are set by third-party domains. The site uses TrustArc as its consent management platform.

Does access.byu.edu use a cookie banner (CMP)?

Yes. access.byu.edu uses TrustArc as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does access.byu.edu use?

access.byu.edu loads 5 third-party requests from 3 vendors, including Dynatrace, Google LLC, TrustARC.

How many marketing and analytics cookies does access.byu.edu set?

access.byu.edu sets 0 marketing and 1 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

access.byu.edu

Item: access.byu.edu
Rating: 47
Author: Passiro

https://access.byu.edu

Last scanned July 28, 2026

A cookie scan of access.byu.edu conducted on July 28, 2026 found 7 cookies and 5 third-party tracking requests. The assessment covered 3 pages across 3 unique page templates. The site uses TrustArc as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 5 third-party requests were detected from 3 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

TrustArc

Scans

What this setup is missing

No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

7 cookies detected: 1 necessary, 1 analytics, 0 marketing, 4 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

4 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
dtCookie before consent	.byu.edu	Analytics	Dynatrace	Session	–	–	1st
AWSALB before consent	cas.byu.edu	Functional	Amazon Web Services	Expired	–	–	3rd
AWSALBCORS before consent	cas.byu.edu	Functional	Amazon Web Services	Expired	✓	–	3rd
JSESSIONID	cas.byu.edu	Necessary	Java	Session	✓	✓	3rd
notice_behavior before consent	.byu.edu	Unknown	-	Session	✓	–	1st
org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE before consent	cas.byu.edu	Unknown	-	Session	✓	✓	3rd
TAsessionID before consent	.byu.edu	Unknown	-	Expired	✓	–	1st

Browser storage set by the site

Name	Domain	Party
bsp.analytics.uniqueVisit.0000016d-bb6c-d893-adff-ff7d49030000 set by brightspotcdn.byu.edu/bsp-analytics.min.3d492319d8b084de04ab3a208c32f0b5.gz.js:1:7902	https://access.byu.edu	1st	before consent
bsp.analytics.lastActivity.0000016d-bb6c-d893-adff-ff7d49030000 set by brightspotcdn.byu.edu/bsp-analytics.min.3d492319d8b084de04ab3a208c32f0b5.gz.js:1:7902	https://access.byu.edu	1st	before consent
bsp.analytics.visitStarted.0000016d-bb6c-d893-adff-ff7d49030000 set by brightspotcdn.byu.edu/bsp-analytics.min.3d492319d8b084de04ab3a208c32f0b5.gz.js:1:7902	https://access.byu.edu	1st	before consent
__storage_test__ set by consent.trustarc.com/core.min.js	https://access.byu.edu	1st	before consent
dtCFG_lg366a9h_5c01f50ec8455dbe set by cas.byu.edu/ruxitagentjs_ICA15789NPRTUVXfqrux_10341260622154106.js:280:180	https://cas.byu.edu	3rd	before consent
dtTAB_lg366a9h set by cas.byu.edu/ruxitagentjs_ICA15789NPRTUVXfqrux_10341260622154106.js:280:180	https://cas.byu.edu	3rd	before consent
__storage_test__ set by consent.trustarc.com/core.min.js	https://cas.byu.edu	3rd	before consent

Third-Party Trackers

5 requests detected from 3 vendors: Dynatrace, Google LLC, TrustARC

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Dynatrace before consent Dynatrace tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	bf19966hyx.bf.dynatrace.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
TrustARC TrustARC tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consent.trustarc.com