Skip to main content
ala.co.uk

ala.co.uk

https://ala.co.uk

Last scanned July 31, 2026

A cookie scan of ala.co.uk performed on July 31, 2026 found 22 cookies and 29 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 29 third-party requests were detected from 20 vendors.

Cookies

22

Third-party

0

Trackers

29

Vendors

20

Consent banner

CookieYes

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

22 cookies detected: 5 necessary, 0 analytics, 4 marketing

Total

22

Necessary

5

Functional

2

Analytics

0

Marketing

4

Unknown

11

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
cookieyes-consent .ala.co.uk Functional CookieYes 365 d 1st
laravel_session before consent www.ala.co.uk Functional Laravel Expired 1st
ttcsid before consent .ala.co.uk Marketing TikTok 90 d 1st
ttcsid_D5T3UNRC77U5QAK8S42G before consent .ala.co.uk Marketing TikTok 90 d 1st
_ttp before consent .ala.co.uk Marketing TikTok 90 d 1st
_tt_enable_cookie before consent .ala.co.uk Marketing TikTok 90 d 1st
cf_clearance .ala.co.uk Necessary Cloudflare 365 d 1st
PHPSESSID www.ala.co.uk Necessary PHP Session 1st
XSRF-TOKEN www.ala.co.uk Necessary CSRF Protection Expired 1st
__cf_bm .ala.co.uk Necessary Cloudflare Expired 1st
__cf_bm .www.ala.co.uk Necessary Cloudflare Expired 1st
gbuuid before consent www.ala.co.uk Unknown - 1.1 yr lifetime over 13 months 1st
IR_24672 before consent .ala.co.uk Unknown - Session 1st
IR_gbd before consent .ala.co.uk Unknown - Session 1st
IR_PI before consent .ala.co.uk Unknown - 365 d 1st
lux_uid before consent www.ala.co.uk Unknown - Expired 1st
ph_phc_BBezEAQSfdLARBN7DVpuHocrGLohndujMLgjEPhGvKAB_posthog before consent .ala.co.uk Unknown - 365 d 1st
sa-user-id before consent www.ala.co.uk Unknown - 365 d 1st
sa-user-id-v2 before consent www.ala.co.uk Unknown - 365 d 1st
sa-user-id-v3 before consent www.ala.co.uk Unknown - 365 d 1st
sa-user-id-v4 before consent www.ala.co.uk Unknown - 365 d 1st
_twpid before consent .ala.co.uk Unknown - 1.1 yr 1st

Browser storage set by the site

Name Domain Party
mf_supportsSessionStorage set by cdn.mouseflow.com/0328657d-e4a0-4ac8-b35f-1b62b8b3d4bb.js:18:123201 https://www.ala.co.uk 1st before consent
mf_supportsSessionStorage set by cdn.mouseflow.com/0328657d-e4a0-4ac8-b35f-1b62b8b3d4bb.js:18:123201 https://www.ala.co.uk 1st before consent
gc_placements_data_ala-insurance set by assets.gocertify.me/gocertify.js:1:32649 https://www.ala.co.uk 1st before consent
tt_sessionId set by analytics.tiktok.com/main.MWI1YzJiMWRhOQ.js:1:100651 https://www.ala.co.uk 1st before consent
tt_appInfo set by analytics.tiktok.com/main.MWI1YzJiMWRhOQ.js:1:100651 https://www.ala.co.uk 1st before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MWI1YzJiMWRhOQ.js:1:103502 https://www.ala.co.uk 1st before consent
__mplssupport__ set by eu-assets.i.posthog.com/array.js:1:43808 https://www.ala.co.uk 1st before consent
__support__ set by eu-assets.i.posthog.com/array.js:1:44509 https://www.ala.co.uk 1st before consent
ph_phc_BBezEAQSfdLARBN7DVpuHocrGLohndujMLgjEPhGvKAB_posthog set by eu-assets.i.posthog.com/array.js:1:44509 https://www.ala.co.uk 1st before consent
ph_phc_BBezEAQSfdLARBN7DVpuHocrGLohndujMLgjEPhGvKAB_posthog set by eu-assets.i.posthog.com/array.js:1:43808 https://www.ala.co.uk 1st before consent
ph_phc_BBezEAQSfdLARBN7DVpuHocrGLohndujMLgjEPhGvKAB_primary_window_exists set by eu-assets.i.posthog.com/array.js:1:44509 https://www.ala.co.uk 1st before consent
test set by eu-assets.i.posthog.com/array.js:1:222267 https://www.ala.co.uk 1st before consent
sa-user-id set by tags.srv.stackadapt.com/events.js:31:15071 https://www.ala.co.uk 1st before consent
sa-user-id-v2 set by tags.srv.stackadapt.com/events.js:31:15124 https://www.ala.co.uk 1st before consent
sa-user-id-v3 set by tags.srv.stackadapt.com/events.js:31:15182 https://www.ala.co.uk 1st before consent
sa-user-id-v4 set by tags.srv.stackadapt.com/events.js:31:15266 https://www.ala.co.uk 1st before consent
ph_phc_BBezEAQSfdLARBN7DVpuHocrGLohndujMLgjEPhGvKAB_window_id set by eu-assets.i.posthog.com/array.js:1:44509 https://www.ala.co.uk 1st before consent
gbFeaturesCache set by cdn.jsdelivr.net/auto.min.js:1:10360 https://www.ala.co.uk 1st before consent

Third-Party Trackers

29 requests detected from 20 vendors: analytics-ipv6.tiktokw.us, convertexperiments.com, Embrace, Google LLC, HubSpot Inc....

Analytics

10

Marketing

11

Necessary

6

Functional

0

Other

2

Vendor Category Type Domain
analytics-ipv6.tiktokw.us before consent Analytics other analytics-ipv6.tiktokw.us
convertexperiments.com before consent convertexperiments.com tracker domain (source: Disconnect.me, category: Analytics) Analytics script cdn-4.convertexperiments.com
Embrace before consent Embrace tracker domain (source: Disconnect.me, category: Analytics) Analytics script lux.speedcurve.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
HubSpot Inc. before consent HubSpot analytics Analytics script js.hs-analytics.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
Mouseflow before consent Mouseflow tracker domain (source: Disconnect.me, category: Analytics) Analytics script cdn.mouseflow.com
PostHog before consent PostHog tracker domain (source: Disconnect.me, category: Analytics) Analytics script eu-assets.i.posthog.com
SpeedCurve before consent SpeedCurve performance monitoring Analytics script cdn.speedcurve.com
tracking.audio.thisisdax.com before consent Analytics pixel tracking.audio.thisisdax.com
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising) Marketing script utt.impactcdn.com
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising) Marketing script alaibltd.pxf.io
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising) Marketing script www.ojrq.net
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social) Marketing pixel alb.reddit.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising) Marketing script www.redditstatic.com
StackAdapt before consent StackAdapt tracker domain (source: Disconnect.me, category: Advertising) Marketing script tags.srv.stackadapt.com
Text before consent Text tracker domain (source: Disconnect.me, category: Advertising) Marketing script connect.livechatinc.com
TikTok before consent TikTok analytics pixel Marketing script analytics.tiktok.com
X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Advertising) Marketing script t.co
X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel static.ads-twitter.com
CookieYes CookieYes consent management Necessary script cdn-cookieyes.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
reddit reddit tracker domain (source: Disconnect.me, category: Content) Necessary script pixel-config.reddit.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content) Necessary script widget.trustpilot.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com

Scan history

One completed scan: cookies and trackers from the scan on July 31, 2026.

Recent scans

July 31, 2026 22 29

Is ala.co.uk your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.