Does act.org use cookies?

act.org uses 29 cookies. The site uses OneTrust as its consent management platform.

Does act.org use a cookie banner (CMP)?

Yes. act.org uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does act.org use?

act.org loads 48 third-party requests from 27 vendors, including 44.228.85.26, analytics-ipv6.tiktokw.us, FunctionalSoftware, ghs4.safevisit.online, Google LLC.

How many marketing and analytics cookies does act.org set?

act.org sets 9 marketing and 14 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

act.org

Item: act.org
Rating: 8
Author: Passiro

https://act.org

Last scanned July 28, 2026

A cookie scan of act.org conducted on July 28, 2026 found 29 cookies and 48 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 48 third-party requests were detected from 27 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

29 cookies detected: 1 necessary, 14 analytics, 9 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
hubspotutk before consent	.act.org	Analytics	HubSpot	125 d	–	–	1st
_ga before consent	.act.org	Analytics	Google Analytics	345 d	–	–	1st
_ga_EYZWJ5K5FN before consent	.act.org	Analytics	Google Analytics	345 d	–	–	1st
_gcl_au before consent	.act.org	Analytics	Google Analytics	35 d	–	–	1st
_gid before consent	.act.org	Analytics	Google Analytics	Expired	–	–	1st
_vis_opt_s before consent	.act.org	Analytics	VWO	45 d	–	–	1st
_vis_opt_test_cookie before consent	.act.org	Analytics	VWO	Session	–	–	1st
_vwo_ds before consent	.act.org	Analytics	VWO	5 d	–	–	1st
_vwo_sn before consent	.act.org	Analytics	VWO	Expired	–	–	1st
_vwo_uuid before consent	.act.org	Analytics	VWO	310 d	–	–	1st
_vwo_uuid_v2 before consent	.act.org	Analytics	VWO	311 d	–	–	1st
__hssc before consent	.act.org	Analytics	HubSpot	Expired	–	–	1st
__hssrc before consent	.act.org	Analytics	HubSpot	Session	–	–	1st
__hstc before consent	.act.org	Analytics	HubSpot	125 d	–	–	1st
messagesUtk before consent	.act.org	Marketing	Hubspot	125 d	✓	–	1st
ttcsid before consent	.act.org	Marketing	TikTok	35 d	–	–	1st
ttcsid_C8F7HGT9481MCTU3OFC0 before consent	.act.org	Marketing	TikTok	35 d	–	–	1st
_fbp before consent	.act.org	Marketing	Facebook	35 d	–	–	1st
_rdt_uuid before consent	.act.org	Marketing	Reddit	35 d	✓	–	1st
_scid before consent	.act.org	Marketing	Snapchat	341 d	–	–	1st
_scid_r before consent	.act.org	Marketing	Snapchat	341 d	–	–	1st
_ttp before consent	.act.org	Marketing	TikTok	35 d	–	–	1st
_tt_enable_cookie before consent	.act.org	Marketing	TikTok	35 d	–	–	1st
OptanonConsent	.www.act.org	Necessary	OneTrust	310 d	–	–	1st
act-country-code before consent	www.act.org	Unknown	-	Session	–	–	1st
smartDash before consent	.act.org	Unknown	-	5 d	✓	–	1st
_lc2_fpi before consent	.act.org	Unknown	-	345 d	–	–	1st
_lc2_fpi_js before consent	.act.org	Unknown	-	Session	–	–	1st
_li_dcdm_c before consent	.act.org	Unknown	-	Session	–	–	1st

Browser storage set by the site

Name	Domain	Party
_vwo_716782_config	https://www.act.org	1st	before consent
vwoSn	https://www.act.org	1st	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://www.act.org	1st	before consent
vwo_hubspot_event	https://www.act.org	1st	before consent
_vwo_eventHistSession	https://www.act.org	1st	before consent
_vwo_eventHist	https://www.act.org	1st	before consent
_vwo_nls_q_716782	https://www.act.org	1st	before consent
u_sclid set by sc-static.net/scevent.min.js:2:11964	https://www.act.org	1st	before consent
u_scsid set by sc-static.net/scevent.min.js:2:11964	https://www.act.org	1st	before consent
u_sclid_r set by sc-static.net/scevent.min.js:2:11964	https://www.act.org	1st	before consent
u_scsid_r set by sc-static.net/scevent.min.js:2:11964	https://www.act.org	1st	before consent
smartDashCookieValue set by safevisit.online	https://www.act.org	1st	before consent
tt_sessionId set by analytics.tiktok.com/main.MTA0NTFjNWQ4OQ.js:1:100651	https://www.act.org	1st	before consent
tt_appInfo set by analytics.tiktok.com/main.MTA0NTFjNWQ4OQ.js:1:100651	https://www.act.org	1st	before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTA0NTFjNWQ4OQ.js:1:103502	https://www.act.org	1st	before consent
0.739100803566407 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
_li_duid set by d-code.liadm.com/did-004t.min.js:2:2967	https://www.act.org	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242	https://www.act.org	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242	https://www.act.org	1st	before consent
fbssls_ set by connect.facebook.net/:116:802	https://www.act.org	1st	before consent
_vwo_visProps	https://www.act.org	1st	before consent
0.1653707470465694 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.29800365943446017 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.9510227148027663 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
hs-cta-test set by js.hubspot.com/web-interactives-embed.js:1:37789	https://www.act.org	1st	before consent
0.5668699183045123 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.27902973550619015 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.5728440485595148 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.5903927158785208 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.45254668043337265 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.8542137808660429 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent
0.9159419507617909 set by d-code.liadm.com/did-004t.min.js:2:3362	https://www.act.org	1st	before consent

Third-Party Trackers

48 requests detected from 27 vendors: 44.228.85.26, analytics-ipv6.tiktokw.us, FunctionalSoftware, ghs4.safevisit.online, Google LLC...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
44.228.85.26 before consent	Analytics	fetch	44.228.85.26
analytics-ipv6.tiktokw.us before consent	Analytics	other	analytics-ipv6.tiktokw.us
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o22381.ingest.sentry.io
ghs4.safevisit.online before consent	Analytics	script	ghs4.safevisit.online
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content)	Analytics	script	perf-na1.hsforms.com
HubSpot Inc. before consent HubSpot analytics	Analytics	script	js.hs-analytics.net
play.vidyard.com before consent	Analytics	xhr	play.vidyard.com
raw.vidyard.com before consent	Analytics	xhr	raw.vidyard.com
rum.hlx.page before consent	Analytics	script	rum.hlx.page
safevisit.online before consent	Analytics	script	safevisit.online
www.google.com before consent	Analytics	fetch	www.google.com
HubSpot Inc. before consent HubSpot forms	Functional	script	js.hsforms.net
Dentsu before consent Dentsu tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	track.sv.rkdms.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	api.hubapi.com
HubSpot Inc. before consent HubSpot marketing & CRM	Marketing	script	js.hubspot.com
HubSpot Inc. before consent HubSpot ads pixel	Marketing	pixel	js.hsadspixel.net
HubSpot Inc. before consent HubSpot tracking script	Marketing	script	js.hs-scripts.com
HubSpot Inc. before consent HubSpot marketing & CRM	Marketing	script	track.hubspot.com
LinkedIn Corporation before consent LinkedIn Insight Tag	Marketing	script	snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking	Marketing	pixel	px.ads.linkedin.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing	Marketing	script	bat.bing.net
MNTN before consent MNTN tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	dx.mountain.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	www.redditstatic.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social)	Marketing	pixel	alb.reddit.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sc-static.net
Snap before consent Snap tracker domain (source: Disconnect.me, category: Social)	Marketing	script	tr6.snapchat.com
Snap Inc. before consent Snapchat conversion tracking	Marketing	pixel	tr.snapchat.com
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
ZetaGlobal before consent ZetaGlobal tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	d-code.liadm.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1rx8vrt2hn1hc.cloudfront.net
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	js.usemessages.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	forms.hsforms.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.hsappstatic.net
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
reddit reddit tracker domain (source: Disconnect.me, category: Content)	Necessary	script	pixel-config.reddit.com
Wingify Wingify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	dev.visualwebsiteoptimizer.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com