Does bioretur.no use cookies?

bioretur.no uses 4 cookies. The site uses Cookiebot as its consent management platform.

Does bioretur.no use a cookie banner (CMP)?

Yes. bioretur.no uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does bioretur.no use?

bioretur.no loads 20 third-party requests from 6 vendors, including ContentSquare, Google LLC, Intuit, Amazon, Cybot A/S (Cookiebot).

How many marketing and analytics cookies does bioretur.no set?

bioretur.no sets 0 marketing and 2 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

bioretur.no

Item: bioretur.no
Rating: 55
Author: Passiro

https://bioretur.no

Last scanned August 14, 2026

A cookie scan of bioretur.no performed on August 14, 2026 found 4 cookies and 20 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 20 third-party requests were detected from 6 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

4 cookies detected: 2 necessary, 2 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_hjSessionUser_2142785 before consent	.bioretur.no	Analytics	Hotjar	363 d	✓	–	1st
_hjSession_2142785 before consent	.bioretur.no	Analytics	Hotjar	Expired	✓	–	1st
cf_clearance	.bioretur.no	Necessary	Cloudflare	363 d	✓	✓	1st
__cf_bm	.bioretur.no	Necessary	Cloudflare	Expired	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208	https://bioretur.no	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433	https://bioretur.no	1st	before consent
hjViewportId set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80297	https://bioretur.no	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80433	https://bioretur.no	1st	before consent
wpEmojiSettingsSupports set by bioretur.no/wp-emoji-loader.min.js:3:327	https://bioretur.no	1st	before consent

Third-Party Trackers

20 requests detected from 6 vendors: ContentSquare, Google LLC, Intuit, Amazon, Cybot A/S (Cookiebot)...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	content.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent YouTube embedded video	Marketing	iframe	www.youtube.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn-images.mailchimp.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	chimpstatic.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	downloads.mailchimp.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	mc.us17.list-manage.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s3.amazonaws.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	yt3.ggpht.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	jnn-pa.googleapis.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com