Skip to main content
bbox.com.au

bbox.com.au

https://bbox.com.au

Last scanned July 25, 2026

A cookie scan of bbox.com.au conducted on July 25, 2026 found 12 cookies and 30 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 30 third-party requests were detected from 16 vendors.

bbox.com.au
Claim & unlock

Cookies

12

Third-party

0

Trackers

30

Vendors

16

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

12 cookies detected: 0 necessary, 5 analytics, 1 marketing

Total

12

Necessary

0

Functional

4

Analytics

5

Marketing

1

Unknown

2

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .bbox.com.au Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_ga_TJXDNZPMKL before consent .bbox.com.au Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_gcl_au before consent .bbox.com.au Analytics Google Analytics 90 d – – 1st
_sp_id.9189 before consent .bbox.com.au Analytics Snowplow 1.1 yr lifetime over 13 months ✓ – 1st
_sp_ses.9189 before consent .bbox.com.au Analytics Snowplow Expired ✓ – 1st
cart before consent bbox.com.au Functional E-commerce 31 d – – 1st
cart_currency before consent bbox.com.au Functional E-commerce 14 d – – 1st
localization before consent bbox.com.au Functional Shopify 365 d – – 1st
_shopify_essential before consent bbox.com.au Functional Shopify 365 d ✓ ✓ 1st
_fbp before consent .bbox.com.au Marketing Facebook 90 d – – 1st
yotpo_pixel before consent .bbox.com.au Unknown - 1 d ✓ – 1st
__apex_test__ before consent .bbox.com.au Unknown - Session – – 1st

Browser storage set by the site

Name Domain Party
consentHeader set by bbox.com.au/trekkie.storefront.51e77662fd67e0d47c7238acfeab529dafb90214.min.js:1:89500 https://bbox.com.au 1st before consent
test set by cdn.rebuyengine.com/storefront-helper.js:1:2034 https://bbox.com.au 1st before consent
_shs_state set by bbox.com.au/shopify-perf-kit-3.7.0.min.js:1:39259 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--cart set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
bogos_discounts_apply set by cdn.bogos.io/freegifts_data_1783302737.min.js:546:11527 https://bbox.com.au 1st before consent
_gcl_ls set by www.googletagmanager.com/gtm.js https://bbox.com.au 1st before consent
mf_supportsLocalStorage set by cdn.mouseflow.com/e22218d4-b75b-451d-b1ef-890dc6be260e.js:1:49824 https://bbox.com.au 1st before consent
sca_products_session set by cdn.bogos.io/freegifts_data_1783302737.min.js:546:6154 https://bbox.com.au 1st before consent
sca_products_info set by cdn.bogos.io/freegifts_data_1783302737.min.js:546:4070 https://bbox.com.au 1st before consent
sca_offers_added set by cdn.shopify.com/gift.min.js:398:29285 https://bbox.com.au 1st before consent
test set by cdn.rebuyengine.com/global-a4a65a79ab437a6ae1f7.js:1:111714 https://bbox.com.au 1st before consent
productJSONStore set by cdn.rebuyengine.com/storefront-helper.js:1:2423 https://bbox.com.au 1st before consent
_renriched set by cdn.rebuyengine.com/global-a4a65a79ab437a6ae1f7.js:1:112369 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--lastCollectionPathname set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
__sak set by maps.google.com/js https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--userId set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--sessionId set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--sessionCount set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--sessionLandingPageUrl set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--sessionLandingPageTitle set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--params set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--cookies set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
___ELEVAR_GTM_SUITE--lastDlPushTimestamp set by bbox.com.au/dl-app-embed-block.js:1:7037 https://bbox.com.au 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242 https://bbox.com.au 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242 https://bbox.com.au 1st before consent

Third-Party Trackers

30 requests detected from 16 vendors: ContentSquare, Google LLC, Mouseflow, Shopify, www.google.com...

Analytics

6

Marketing

6

Necessary

12

Functional

3

Other

3

Vendor Category Type Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script t.contentsquare.net
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Mouseflow before consent Mouseflow tracker domain (source: Disconnect.me, category: Analytics) Analytics script cdn.mouseflow.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
www.google.com before consent Analytics fetch www.google.com
Google LLC before consent Google reCAPTCHA bot protection Functional script www.google.com
Google LLC before consent Google Maps embed Functional iframe maps.google.com
Google LLC before consent Google Maps API Functional script maps.googleapis.com
Audiense before consent Audiense tracker domain (source: Disconnect.me, category: Advertising) Marketing script shopify-gtm-suite.getelevar.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Social) Marketing script developers.google.com
Klaviyo Inc. before consent Klaviyo email marketing Marketing script static.klaviyo.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive) Marketing script cdn-widgetsrepository.yotpo.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d33a6lvgbd0fej.cloudfront.net
Cloudflare Inc. Cloudflare CDNJS Necessary script cdnjs.cloudflare.com
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script places.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
RebuyInc RebuyInc tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.rebuyengine.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on July 25, 2026.

Recent scans

July 25, 2026 12 30

More Cookie Compliance Reviews

Screenshot of clinipathpathology.com.au

Home | Clinipath Pathology

clinipathpathology.com.au

Cookie report July 25, 2026
Screenshot of ftbbq.com.au

Home | Full Throttle BBQ Pty Ltd

ftbbq.com.au

Cookie report July 25, 2026
Screenshot of invia.com.au

IT SaaS Solutions for Telcos - Invia - IT SaaS ...

invia.com.au

Cookie report July 25, 2026
Screenshot of cultstrength.com.au

Cult Strength

cultstrength.com.au

Cookie report July 25, 2026
Screenshot of lemonmyrtlefarms.com.au

Contact us to get your Lemon Myrtle

lemonmyrtlefarms.com.au

Cookie report July 25, 2026
Screenshot of networldsports.com.au

Net World Sports | Shop The Best Sports Equipme...

networldsports.com.au

Cookie report July 25, 2026
Screenshot of slip.com.au

Slip® - Anti Aging. Anti Sleep Crease. Anti Be...

slip.com.au

Cookie report July 25, 2026
Screenshot of thelifeyoucansave.org.au

Against Malaria Foundation - The Life You Can Save

thelifeyoucansave.org.au

Cookie report July 25, 2026

Is bbox.com.au your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.

Claim bbox.com.au View pricing →