Does bigbox.fi use cookies?

bigbox.fi uses 7 cookies. The site uses Cookiebot as its consent management platform.

Does bigbox.fi use a cookie banner (CMP)?

Yes. bigbox.fi uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does bigbox.fi use?

bigbox.fi loads 16 third-party requests from 9 vendors, including Google LLC, Klarna, media.flixcar.com, rt.flix360.com, Adobe Fonts.

How many marketing and analytics cookies does bigbox.fi set?

bigbox.fi sets 1 marketing and 2 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

bigbox.fi

Item: bigbox.fi
Rating: 39
Author: Passiro

https://bigbox.fi

Last scanned August 13, 2026

A cookie scan of bigbox.fi conducted on August 13, 2026 found 7 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 16 third-party requests were detected from 9 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

7 cookies detected: 1 necessary, 2 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_pk_id.4.7843 before consent	bigbox.fi	Analytics	Matomo	351 d	–	–	1st
_pk_ses.4.7843 before consent	bigbox.fi	Analytics	Matomo	Expired	–	–	1st
_fbp before consent	bigbox.fi	Marketing	Facebook	358 d	–	–	1st
XSRF-TOKEN	.bigbox.fi	Necessary	CSRF Protection	Expired	✓	–	1st
bigbox_lunar_session before consent	.bigbox.fi	Unknown	-	Expired	✓	✓	1st
omnisendSessionID before consent	.bigbox.fi	Unknown	-	Expired	–	–	1st
page-views before consent	.bigbox.fi	Unknown	-	Session	–	–	1st

Browser storage set by the site

Name	Domain	Party
LUPA_STATS_BASE set by bigbox.fi/066193.e.q32q.js:8:240404	https://bigbox.fi	1st	before consent
LUPA_STATS set by bigbox.fi/066193.e.q32q.js:8:240554	https://bigbox.fi	1st	before consent
LUPA_STATS set by bigbox.fi/066193.e.q32q.js:8:240660	https://bigbox.fi	1st	before consent
bannerDisplayTimes set by bigbox.fi/05qhy1.nv0n9c.js:1519:2988	https://bigbox.fi	1st	before consent
a11y-preferences set by bigbox.fi/05qhy1.nv0n9c.js:1881:1401	https://bigbox.fi	1st	before consent
lupasearch-client-redirections set by bigbox.fi/066193.e.q32q.js:1:205375	https://bigbox.fi	1st	before consent
_omnisend_localStorage set by omnisnippet1.com/launcher-v2.js:4:26927	https://bigbox.fi	1st	before consent
_omnisend_sessionStorage set by omnisnippet1.com/launcher-v2.js:4:27501	https://bigbox.fi	1st	before consent
_omnisend set by omnisnippet1.com/push-notifications.js	https://bigbox.fi	1st	before consent
chat-widget-themes set by storage.tellq.io/index-CfkVNwbQ.js:55:6817	https://bigbox.fi	1st	before consent
chat-widget-working-hours set by storage.tellq.io/index-CfkVNwbQ.js:55:7353	https://bigbox.fi	1st	before consent
visitedSkus set by bigbox.fi/0.gfjo3cgdxxv.js:527:25548	https://bigbox.fi	1st	before consent
__klarna_sdk_version set by osm.klarnaservices.com/lib.js:1:4690	https://bigbox.fi	1st	before consent
flixgvid set by media.flixfacts.com/loader.js:48:251	https://bigbox.fi	1st	before consent
__klarna_sdk_default-config set by na-library.klarnaservices.com/sdk.js:2:202715	https://bigbox.fi	1st	before consent
flixsession set by media.flixcar.com/13981	https://bigbox.fi	1st	before consent

Third-Party Trackers

16 requests detected from 9 vendors: Google LLC, Klarna, media.flixcar.com, rt.flix360.com, Adobe Fonts...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Klarna before consent Klarna tracker domain (source: Disconnect.me, category: Content)	Analytics	script	osm.klarnaservices.com
media.flixcar.com before consent	Analytics	script	media.flixcar.com
rt.flix360.com before consent	Analytics	pixel	rt.flix360.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Google LLC before consent Google Translate widget	Functional	script	translate.google.com
Omnisend before consent Omnisend tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	omnisnippet1.com
Omnisend before consent Omnisend tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	forms.soundestlink.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	translate.googleapis.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com