alafiabrooklyn.com
Last scanned July 31, 2026
A cookie scan of alafiabrooklyn.com conducted on July 31, 2026 found 11 cookies and 13 third-party tracking requests. The assessment covered 5 pages across 5 unique page templates. The site uses OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 13 third-party requests were detected from 8 vendors.
Consent behaviour grade
24 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
A consent banner is present but does not restrain tracking. Trackers and cookies run before the visitor consents.
Consent banner as encountered
The first layer offers a Reject option alongside Accept.
Load timeline before consent
Milliseconds from navigation start until each request fired or each cookie was set.
and 4 more
Observed before consent
Cookies set before consent (10)
-
_tt_enable_cookiemarketing · TikTok -
_ttpmarketing · TikTok -
ttcsidmarketing · TikTok -
ttcsid_CPBLHB3C77UFPV6QSTU0marketing · TikTok -
_gaanalytics · Google Analytics -
_ga_G04EQ4FXQ1analytics · Google Analytics -
_gcl_auanalytics · Google Analytics -
wc_clientunknown -
wc_client_currentunknown -
wc_visitorunknown
Tracking requests before consent (8)
- analytics-ipv6.tiktokw.us analytics-ipv6.tiktokw.us set by analytics.tiktok.com/main.MWI1YzJiMWRhMQ.js · at 668 ms
- Google LLC www.googletagmanager.com set by alafiabrooklyn.com/privacy-policy · at 402 ms
- Google LLC region1.analytics.google.com set by www.googletagmanager.com/js · at 1394 ms
- process.iconnode.com process.iconnode.com set by s.ksrndkehqnwntyxlhgto.com/135082.js · at 462 ms
- www.google.com www.google.com set by www.googletagmanager.com/gtm.js · at 451 ms
- Adobe Fonts use.typekit.net at 369 ms
- TikTok analytics.tiktok.com set a cookie at 451 ms
- Google LLC ad.doubleclick.net set by www.googletagmanager.com/gtm.js · at 1270 ms
How we tested
Browser: Chrome/150.0.7871.124 · Scan origin: EU · Viewport: 1440×900 · Checked: 31 Jul 2026 21:39 - 31 Jul 2026 21:40
Cookies
11
Third-party
0
Trackers
13
Vendors
8
Consent banner
OneTrust
Scans
1
What this setup is missing
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Connection security
HTTPS supported
✓Redirects HTTP to HTTPS
✓HSTS
✗Content Security Policy
✗
Third-Party Trackers
13 requests detected from 8 vendors: analytics-ipv6.tiktokw.us, Google LLC, process.iconnode.com, www.google.com, Adobe Fonts...
Third-Party Trackers
13 requests detected from 8 vendors: analytics-ipv6.tiktokw.us, Google LLC, process.iconnode.com, www.google.com, Adobe Fonts...
Analytics
5
Marketing
1
Necessary
4
Functional
1
Other
2
| Vendor | Category | Type | Domain |
|---|---|---|---|
| analytics-ipv6.tiktokw.us before consent | Analytics | other | analytics-ipv6.tiktokw.us |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | region1.analytics.google.com |
| process.iconnode.com before consent | Analytics | xhr | process.iconnode.com |
| www.google.com before consent | Analytics | fetch | www.google.com |
| Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery | Functional | script | use.typekit.net |
| TikTok before consent TikTok analytics pixel | Marketing | script | analytics.tiktok.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.google.dk |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | ad.doubleclick.net |
| OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) | Unknown | script | geolocation.onetrust.com |
Scan history
One completed scan: cookies and trackers from the scan on July 31, 2026.
Recent scans
| July 31, 2026 | 11 13 |
More Cookie Compliance Reviews
About Us - Apexinnovat
apexinnovat.com
Access | Modern Records Management Solutions | ...
apexinfosecurity.com
Service Cloud - Apex Infinity Solutions
apexinfinitysolutions.com
July 10, 2023 - APEX INDUSTRIES S.A.
apexindustrieseg.com
5 Ways to Get Your Garden Ready for Winter
apexhose.com
PORTFOLIO & ASSET MANAGEMENT SERVICES | APEX HE...
apexhelvetia.com
Genicular Artery Embolization (GAE) | Passaic, ...
apexheartandvascular.com
apexgrainlink.com
apexgrainlink.com
Is alafiabrooklyn.com your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.