Skip to main content
bfs.ucmerced.edu

bfs.ucmerced.edu

https://bfs.ucmerced.edu

Last scanned August 13, 2026

A cookie scan of bfs.ucmerced.edu conducted on August 13, 2026 found 14 cookies and 55 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 55 third-party requests were detected from 40 vendors.

bfs.ucmerced.edu
Claim & unlock

Cookies

14

Third-party

1

Trackers

55

Vendors

40

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✗

HSTS

✓

Content Security Policy

✗

Cookies

14 cookies detected: 0 necessary, 3 analytics, 9 marketing, 1 third-party

Total

14

Necessary

0

Functional

0

Analytics

3

Marketing

9

Unknown

2

1 third-party cookie detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
nmstat before consent .ucmerced.edu Analytics Siteimprove 1.1 yr lifetime over 13 months – – 1st
_ga before consent .ucmerced.edu Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_ga_TSE2LSBDQZ before consent .ucmerced.edu Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
ttcsid before consent .ucmerced.edu Marketing TikTok 90 d – – 1st
ttcsid_C8LNTT0H473GVAFU5FV0 before consent .ucmerced.edu Marketing TikTok 90 d – – 1st
ttcsid_D6KVCV3C77U8IPQU5MI0 before consent .ucmerced.edu Marketing TikTok 90 d – – 1st
_fbp before consent .ucmerced.edu Marketing Facebook 90 d – – 1st
_mkto_trk before consent .ucmerced.edu Marketing OneTrust 1.1 yr lifetime over 13 months – – 1st
_scid before consent .ucmerced.edu Marketing Snapchat 1.1 yr – – 1st
_scid_r before consent .ucmerced.edu Marketing Snapchat 1.1 yr – – 1st
_ttp before consent .ucmerced.edu Marketing TikTok 90 d – – 1st
_tt_enable_cookie before consent .ucmerced.edu Marketing TikTok 90 d – – 1st
_tq_id.TV-4563907209-1.4aa5 before consent studentbilling.ucmerced.edu Unknown - 1.1 yr lifetime over 13 months – – 3rd
_tq_id.TV-4563907209-1.cacc before consent bfs.ucmerced.edu Unknown - 1.1 yr lifetime over 13 months – – 1st

Browser storage set by the site

Name Domain Party
cntr_attr set by up.pixel.ad/up.js https://bfs.ucmerced.edu 1st before consent
u_sclid set by sc-static.net/scevent.min.js:2:12021 https://bfs.ucmerced.edu 1st before consent
u_scsid set by sc-static.net/scevent.min.js:2:12021 https://bfs.ucmerced.edu 1st before consent
u_sclid_r set by sc-static.net/scevent.min.js:2:12021 https://bfs.ucmerced.edu 1st before consent
u_scsid_r set by sc-static.net/scevent.min.js:2:12021 https://bfs.ucmerced.edu 1st before consent
tt_sessionId set by analytics.tiktok.com/main.MTZkNzEzYmVhOQ.js:1:100651 https://bfs.ucmerced.edu 1st before consent
tt_appInfo set by analytics.tiktok.com/main.MTZkNzEzYmVhOQ.js:1:100651 https://bfs.ucmerced.edu 1st before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTZkNzEzYmVhOQ.js:1:103502 https://bfs.ucmerced.edu 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://bfs.ucmerced.edu 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://bfs.ucmerced.edu 1st before consent
cntr_attr set by up.pixel.ad/up.js https://studentbilling.ucmerced.edu 3rd before consent
u_sclid set by sc-static.net/scevent.min.js:2:12021 https://studentbilling.ucmerced.edu 3rd before consent
u_scsid set by sc-static.net/scevent.min.js:2:12021 https://studentbilling.ucmerced.edu 3rd before consent
u_sclid_r set by sc-static.net/scevent.min.js:2:12021 https://studentbilling.ucmerced.edu 3rd before consent
u_scsid_r set by sc-static.net/scevent.min.js:2:12021 https://studentbilling.ucmerced.edu 3rd before consent
tt_sessionId set by analytics.tiktok.com/main.MTZkNzEzYmVhMA.js:1:61277 https://studentbilling.ucmerced.edu 3rd before consent
tt_appInfo set by analytics.tiktok.com/main.MTZkNzEzYmVhMA.js:1:61277 https://studentbilling.ucmerced.edu 3rd before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTZkNzEzYmVhMA.js:1:64078 https://studentbilling.ucmerced.edu 3rd before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://studentbilling.ucmerced.edu 3rd before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://studentbilling.ucmerced.edu 3rd before consent
NRBA_SESSION::86325716 set by js-agent.newrelic.com/nr-spa-1.320.0.min.js:2:89763 https://bfs.ucmerced.edu 1st before consent

Third-Party Trackers

55 requests detected from 40 vendors: Adobe, analytics-ipv6.tiktokw.us, Google LLC, New Relic, New Relic Inc....

Analytics

8

Marketing

32

Necessary

5

Functional

0

Other

10

Vendor Category Type Domain
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: Analytics) Analytics script 976-rka-196.mktoresp.com
analytics-ipv6.tiktokw.us before consent Analytics other analytics-ipv6.tiktokw.us
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-agent.newrelic.com
New Relic Inc. before consent New Relic data beacon Analytics pixel bam.nr-data.net
SiteImprove before consent SiteImprove tracker domain (source: Disconnect.me, category: Analytics) Analytics script siteimproveanalytics.com
SiteImprove before consent SiteImprove tracker domain (source: Disconnect.me, category: Analytics) Analytics script 8343.global.siteimproveanalytics.io
Acuity before consent Acuity tracker domain (source: Disconnect.me, category: Advertising) Marketing script origin.acuityplatform.com
AdmanMedia before consent AdmanMedia tracker domain (source: Disconnect.me, category: Advertising) Marketing script cs.admanmedia.com
Adobe Marketo before consent Marketo Munchkin tracking Marketing script munchkin.marketo.net
BasisTechnologies before consent BasisTechnologies tracker domain (source: Disconnect.me, category: Advertising) Marketing script pixel-sync.sitescout.com
Cootlogix before consent Cootlogix tracker domain (source: Disconnect.me, category: Advertising) Marketing script sync.cootlogix.com
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel x.bidswitch.net
Equativ before consent Equativ tracker domain (source: Disconnect.me, category: Advertising) Marketing script rtb-csync.smartadserver.com
IndexExchange before consent IndexExchange tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel dsum-sec.casalemedia.com
Innovid before consent Innovid tracker domain (source: Disconnect.me, category: Advertising) Marketing script collector-53029.us.tvsquared.com
LinkedIn Corporation before consent LinkedIn Insight Tag Marketing script snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking Marketing pixel px.ads.linkedin.com
LiveRamp before consent LiveRamp tracker domain (source: Disconnect.me, category: Advertising) Marketing script idsync.rlcdn.com
Magnite before consent Magnite tracker domain (source: Disconnect.me, category: Advertising) Marketing script pixel.rubiconproject.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing script secure.adnxs.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing Marketing script bat.bing.net
Navegg before consent Navegg tracker domain (source: Disconnect.me, category: Advertising) Marketing script sync.navdmp.com
Nexxen before consent Nexxen tracker domain (source: Disconnect.me, category: Advertising) Marketing script sync.1rx.io
Nielsen before consent Nielsen tracker domain (source: Disconnect.me, category: Advertising) Marketing script loadm.exelator.com
pixel.ad before consent pixel.ad tracker domain (source: Disconnect.me, category: Advertising) Marketing script up.pixel.ad
PubMatic before consent PubMatic tracker domain (source: Disconnect.me, category: Advertising) Marketing script image2.pubmatic.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Social) Marketing script tr6.snapchat.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Advertising) Marketing script sc-static.net
Snap Inc. before consent Snapchat conversion tracking Marketing pixel tr.snapchat.com
Sonobi before consent Sonobi tracker domain (source: Disconnect.me, category: Advertising) Marketing script sync.go.sonobi.com
Sovrn before consent Sovrn tracker domain (source: Disconnect.me, category: Advertising) Marketing script ce.lijit.com
TikTok before consent TikTok analytics pixel Marketing script analytics.tiktok.com
TransUnion before consent TransUnion tracker domain (source: Disconnect.me, category: Advertising) Marketing script aa.agkn.com
TripleLift before consent TripleLift tracker domain (source: Disconnect.me, category: Advertising) Marketing script eb2.3lift.com
VerveGroup before consent VerveGroup tracker domain (source: Disconnect.me, category: Advertising) Marketing script s.ad.smaato.net
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel dpm.demdex.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script cm.g.doubleclick.net
OpenX before consent OpenX tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script us-u.openx.net
PublicisGroupe before consent PublicisGroupe tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script sync.crwdcntrl.net
Tapad before consent Tapad tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pixel.tapad.com
The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel js.adsrvr.org
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on August 13, 2026.

Recent scans

August 13, 2026 14 55

More Cookie Compliance Reviews

Screenshot of bhlcenter.fsu.edu

BHL Center | Center on Better Health and Life f...

bhlcenter.fsu.edu

Cookie report August 13, 2026
Screenshot of beta.sbcc.edu

How to Apply for Financial Aid - Santa Barbara ...

beta.sbcc.edu

Cookie report August 13, 2026
Screenshot of besd.byu.edu

Alternative Energy

besd.byu.edu

Cookie report August 13, 2026
Screenshot of belong.sou.edu

Student Belonging & Engagement - SOU Student Be...

belong.sou.edu

Cookie report August 12, 2026
Screenshot of beingpresent.wisc.edu

WiscWeb WordPress Service – Division of Infor...

beingpresent.wisc.edu

Cookie report August 12, 2026
Screenshot of behavioralhealth.fsu.edu

FSU BehavioralHealth

behavioralhealth.fsu.edu

Cookie report August 12, 2026
Screenshot of beckman.illinois.edu

One moment, please...

beckman.illinois.edu

Cookie report August 12, 2026
Screenshot of beard.byu.edu

CAS – Central Authentication Service

beard.byu.edu

Cookie report August 12, 2026

Is bfs.ucmerced.edu your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.

Claim bfs.ucmerced.edu View pricing →