Skip to main content
bakerybits.co.uk

bakerybits.co.uk

https://bakerybits.co.uk

Last scanned August 10, 2026

A cookie scan of bakerybits.co.uk performed on August 10, 2026 found 3 cookies and 19 third-party tracking requests. The assessment covered 3 pages across 3 unique page templates. The site uses CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 19 third-party requests were detected from 14 vendors.

Cookies

3

Third-party

0

Trackers

19

Vendors

14

Consent banner

CookieYes

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

3 cookies detected: 2 necessary, 0 analytics, 0 marketing

Total

3

Necessary

2

Functional

1

Analytics

0

Marketing

0

Unknown

0

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
cookieyes-consent .www.bakerybits.co.uk Functional CookieYes 314 d ✓ – 1st
cf_clearance .bakerybits.co.uk Necessary Cloudflare 314 d ✓ ✓ 1st
PHPSESSID .www.bakerybits.co.uk Necessary PHP Expired ✓ ✓ 1st

Browser storage set by the site

Name Domain Party
storage_test set by www.bakerybits.co.uk/47f7a346f62891b533eaaf14810419a5.min.js:158:14 https://www.bakerybits.co.uk 1st before consent
_gcl_ls set by www.googletagmanager.com/gtm.js https://www.bakerybits.co.uk 1st before consent
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208 https://www.bakerybits.co.uk 1st before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433 https://www.bakerybits.co.uk 1st before consent
_storageSupported set by www.bakerybits.co.uk/local.min.js:1:261 https://www.bakerybits.co.uk 1st before consent
jsapi set by www.bakerybits.co.uk/js.storage.min.js:41:14 https://www.bakerybits.co.uk 1st before consent
NRBA_SESSION::2aff49f0 set by js-agent.newrelic.com/nr-spa-1.319.0.min.js:2:89763 https://www.bakerybits.co.uk 1st before consent
__storage_test__ set by static.klaviyo.com/default~in_app_forms~signup_forms.39fcc1d2bccae.js https://www.bakerybits.co.uk 1st before consent
klaviyoOnsite set by static.klaviyo.com/default~in_app_forms~signup_forms.39fcc1d2bccae.js https://www.bakerybits.co.uk 1st before consent
_kla_test set by static-tracking.klaviyo.com/fender_analytics.7db1ff1fe0783.js https://www.bakerybits.co.uk 1st before consent
_kla_session_test set by static-tracking.klaviyo.com/fender_analytics.7db1ff1fe0783.js https://www.bakerybits.co.uk 1st before consent
__kl_key set by static-tracking.klaviyo.com/fender_analytics.7db1ff1fe0783.js https://www.bakerybits.co.uk 1st before consent
$referrer set by static-tracking.klaviyo.com/fender_analytics.7db1ff1fe0783.js https://www.bakerybits.co.uk 1st before consent
$last_referrer set by static-tracking.klaviyo.com/fender_analytics.7db1ff1fe0783.js https://www.bakerybits.co.uk 1st before consent
kl-post-identification-sync set by static-tracking.klaviyo.com/post_identification_sync.c24f1a19e213a.js https://www.bakerybits.co.uk 1st before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/5684.bd1b9054fc8a1.js https://www.bakerybits.co.uk 1st before consent
klaviyoFormSetting set by static.klaviyo.com/default~in_app_forms~signup_forms.39fcc1d2bccae.js https://www.bakerybits.co.uk 1st before consent

Third-Party Trackers

19 requests detected from 14 vendors: Cloudflare Inc., ContentSquare, Google LLC, New Relic, New Relic Inc....

Analytics

9

Marketing

3

Necessary

4

Functional

1

Other

2

Vendor Category Type Domain
Cloudflare Inc. before consent Cloudflare Web Analytics Analytics script static.cloudflareinsights.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script vc.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script content.hotjar.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-agent.newrelic.com
New Relic Inc. before consent New Relic data beacon Analytics pixel bam.nr-data.net
rum.hlx.page before consent Analytics script rum.hlx.page
www.google.com before consent Analytics fetch www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Klaviyo Inc. before consent Klaviyo email marketing Marketing script static.klaviyo.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing Marketing script bat.bing.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d19ayerf5ehaab.cloudfront.net
CookieYes CookieYes consent management Necessary script cdn-cookieyes.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) Necessary script unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on August 10, 2026.

Recent scans

August 10, 2026 3 19

Is bakerybits.co.uk your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.