Skip to main content
bk.com

bk.com

https://bk.com

Last scanned August 14, 2026

A cookie scan of bk.com performed on August 14, 2026 found 16 cookies and 33 third-party tracking requests. The site relies on OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 33 third-party requests were detected from 24 vendors.

Cookies

16

Third-party

0

Trackers

33

Vendors

24

Consent banner

OneTrust

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

16 cookies detected: 1 necessary, 6 analytics, 5 marketing

Total

16

Necessary

1

Functional

0

Analytics

6

Marketing

5

Unknown

4

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
ab.storage.deviceId.e1f5b376-c0ff-46b4-9042-01ffac3ec488 before consent .bk.com Analytics AB Tasty 1.1 yr lifetime over 13 months 1st
ab.storage.sessionId.e1f5b376-c0ff-46b4-9042-01ffac3ec488 before consent .bk.com Analytics AB Tasty 1.1 yr lifetime over 13 months 1st
AMP_a86daf403b before consent .bk.com Analytics Amplitude 365 d 1st
_ga before consent .bk.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_ga_XCJNBPHG8Q before consent .bk.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gcl_au before consent .bk.com Analytics Google Analytics 90 d 1st
ttcsid before consent .bk.com Marketing TikTok 90 d 1st
ttcsid_CVIO31BC77UENQLASFR0 before consent .bk.com Marketing TikTok 90 d 1st
_fbp before consent .bk.com Marketing Facebook 90 d 1st
_ttp before consent .bk.com Marketing TikTok 90 d 1st
_tt_enable_cookie before consent .bk.com Marketing TikTok 90 d 1st
OptanonConsent .www.bk.com Necessary OneTrust 365 d 1st
forterToken before consent .bk.com Unknown - 1.1 yr lifetime over 13 months 1st
_dd_s before consent www.bk.com Unknown - 365 d 1st
_dpm_id.9498 before consent .bk.com Unknown - 365 d 1st
_dpm_ses.9498 before consent .bk.com Unknown - Expired 1st

Browser storage set by the site

Name Domain Party
EXPO_CONSTANTS_INSTALLATION_ID set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1247:887 https://www.bk.com 1st before consent
mmkv.default\RBI::DEVICE_ID set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1517:1084 https://www.bk.com 1st before consent
ld:639b5fee9bf9a7117a1ee9cb:$diagnostics set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1809:58896 https://www.bk.com 1st before consent
mmkv.default\RBI::HAS_MIGRATED_FROM_ASYNC_STORAGE set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1517:1084 https://www.bk.com 1st before consent
mmkv.default\RBI::HAS_MIGRATED_FROM_CAPACITOR_STORAGE set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1517:1084 https://www.bk.com 1st before consent
AMP_TEST set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:2041:1466 https://www.bk.com 1st before consent
ld:639b5fee9bf9a7117a1ee9cb:eyJraW5kIjoidXNlciIsImtleSI6Ijc3ZDA3Mzk1LWMxMGYtNDA4MC1hNDQ1LTY3NWM2MGFlNGU2YyIsImFub255bW91cyI6dHJ1ZSwiZXhwb090YVVwZGF0ZUlkIjoiIiwiYXBwRmxvd0J1aWxkSWQiOiIiLCJhcHBTaGVsbFZlcnNpb24iOiI3LjgwLjAiLCJhcHBWZXJzaW9uIjoiYmYwNjEzM2YwYjg set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1809:58896 https://www.bk.com 1st before consent
AMP_remote_config_a86daf403b set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:2220:1054 https://www.bk.com 1st before consent
AMP_unsent_a86daf403b set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:2041:1466 https://www.bk.com 1st before consent
_gcl_ls set by www.googletagmanager.com/gtm.js https://www.bk.com 1st before consent
amp-exp-$default_instance-Mdz20v set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:88:830 https://www.bk.com 1st before consent
amplitude.engagement.a86daf.sessionStart set by cdn.amplitude.com/43cd40a7478084521253f047dfc34b94e6a63304-chunk-AVGLYASO.js:15:21889 https://www.bk.com 1st before consent
modernizr set by c.tvpixel.com/dpm_pixel_min.js https://www.bk.com 1st before consent
snowplowOutQueue_dpm_co_post2.expires set by c.tvpixel.com/dpm_pixel_min.js https://www.bk.com 1st before consent
snowplowOutQueue_dpm_co_post2 set by c.tvpixel.com/dpm_pixel_min.js https://www.bk.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://www.bk.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://www.bk.com 1st before consent
tt_sessionId set by analytics.tiktok.com/main.MTZkNzEzYmVhMQ.js:1:61319 https://www.bk.com 1st before consent
tt_appInfo set by analytics.tiktok.com/main.MTZkNzEzYmVhMQ.js:1:61319 https://www.bk.com 1st before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTZkNzEzYmVhMQ.js:1:64120 https://www.bk.com 1st before consent
amplitude.engagement.ENGAGEMENT_a86daf403b_DEFAULT_USER_PROVIDER set by cdn.amplitude.com/43cd40a7478084521253f047dfc34b94e6a63304-chunk-AVGLYASO.js:15:21889 https://www.bk.com 1st before consent
amplitude.engagement.ENGAGEMENT_a86daf403b_DEFAULT_USER_PROVIDER set by cdn.amplitude.com/43cd40a7478084521253f047dfc34b94e6a63304-chunk-AVGLYASO.js:13:34713 https://www.bk.com 1st before consent
ld:639b5fee9bf9a7117a1ee9cb:eyJraW5kIjoidXNlciIsImtleSI6IjU0NTU0YzRjLWY4MWYtNDNhYy1hNTdlLTJhNjNkZTYzZGQyOSIsImFub255bW91cyI6dHJ1ZSwiZXhwb090YVVwZGF0ZUlkIjoiIiwiYXBwRmxvd0J1aWxkSWQiOiIiLCJhcHBTaGVsbFZlcnNpb24iOiI3LjgwLjAiLCJhcHBWZXJzaW9uIjoiYmYwNjEzM2YwYjg set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1809:58896 https://www.bk.com 1st before consent
amplitude.engagement.eus.a86daf.device_id:7bb81e7e-4e9f-4dd6-a014-abbe6dd36c61 set by cdn.amplitude.com/43cd40a7478084521253f047dfc34b94e6a63304-chunk-AVGLYASO.js:13:34713 https://www.bk.com 1st before consent
mmkv.default\RBI::ORDER set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1517:1084 https://www.bk.com 1st before consent
mmkv.default\RBI::SERVICE_MODE set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1517:1084 https://www.bk.com 1st before consent
mmkv.default\RBI::AUTH_REDIRECT set by www.bk.com/index-e0be7a477192dc65eacc6f6f266e1041.js:1517:1084 https://www.bk.com 1st before consent
test set by cdn.branch.io/branch-latest.min.js:56:358 https://www.bk.com 1st before consent
ab.test set by js.appboycdn.com/braze.min.js:135:113 https://www.bk.com 1st before consent
ab.storage.events.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.sessionId.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.messagingSessionStart.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.deviceId.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.lastReqToEndpoint.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.brazeSyncRetryCount.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
forterToken https://www.bk.com 1st before consent
feh--9fd29358 https://www.bk.com 1st before consent
feh--8ff2b28 https://www.bk.com 1st before consent
feh--e3a677a0 https://www.bk.com 1st before consent
__test__ https://www.bk.com 1st before consent
feh--30cb83 https://www.bk.com 1st before consent
feh--330df5 https://www.bk.com 1st before consent
feh--1aea3 https://www.bk.com 1st before consent
feh--c8c5bfc2 https://www.bk.com 1st before consent
feh--1bc22 https://www.bk.com 1st before consent
feh--19c44 https://www.bk.com 1st before consent
__sak set by maps.googleapis.com/main.js:370:1218 https://www.bk.com 1st before consent
feh--6bc5339 https://www.bk.com 1st before consent
feh--37d28a https://www.bk.com 1st before consent
feh--c52 https://www.bk.com 1st before consent
feh--1bda6 https://www.bk.com 1st before consent
ab.storage.serverConfig.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.ccLastClientRequest.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.device.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.sdk_metadata.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.session_id_for_cached_metadata.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.triggers.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.triggers.ts.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.requestAttempts.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
branch_session set by cdn.branch.io/branch-latest.min.js:56:113 https://www.bk.com 1st before consent
branch_session_first set by cdn.branch.io/branch-latest.min.js:56:95 https://www.bk.com 1st before consent
feh--da4 https://www.bk.com 1st before consent
pst https://www.bk.com 1st before consent
psc https://www.bk.com 1st before consent
ab.storage.sdkVersion.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.ccClicks.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.ccImpressions.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.ccDismissals.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.cc.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.ccLastFullSync.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
ab.storage.ccLastCardUpdated.e1f5b376-c0ff-46b4-9042-01ffac3ec488 set by js.appboycdn.com/braze.min.js:96:166 https://www.bk.com 1st before consent
feh--1b2b8 https://www.bk.com 1st before consent

Third-Party Trackers

33 requests detected from 24 vendors: Amazon, Amplitude, b93b8055f6c747eb821e7672af4e1a8c-89ea0743f614.cdn.forter.com, Branch Metrics, cdn0.forter.com...

Analytics

12

Marketing

10

Necessary

2

Functional

3

Other

6

Vendor Category Type Domain
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Content) Analytics script d2o5idwacg3gyw.cloudfront.net
Amplitude before consent Amplitude tracker domain (source: Disconnect.me, category: Analytics) Analytics script sr-client-cfg.amplitude.com
b93b8055f6c747eb821e7672af4e1a8c-89ea0743f614.cdn.forter.com before consent Analytics other b93b8055f6c747eb821e7672af4e1a8c-89ea0743f614.cdn.forter.com
Branch Metrics before consent Branch deep linking Analytics script cdn.branch.io
cdn0.forter.com before consent Analytics xhr cdn0.forter.com
cdn3.forter.com before consent Analytics other cdn3.forter.com
cdn6.forter.com before consent Analytics other cdn6.forter.com
DataDog before consent DataDog tracker domain (source: Disconnect.me, category: Analytics) Analytics pixel browser-intake-datadoghq.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
www.google.com before consent Analytics fetch www.google.com
Font Awesome before consent Font Awesome CDN: icon font and CSS delivery Functional script use.fontawesome.com
Google LLC before consent Google Maps API Functional script maps.googleapis.com
LaunchDarkly before consent LaunchDarkly feature flags Functional script app.launchdarkly.com
Branch before consent Branch tracker domain (source: Disconnect.me, category: Advertising) Marketing script app.link
Branch before consent Branch tracker domain (source: Disconnect.me, category: Advertising) Marketing script api2.branch.io
Braze before consent Braze tracker domain (source: Disconnect.me, category: Advertising) Marketing script js.appboycdn.com
Braze before consent Braze tracker domain (source: Disconnect.me, category: Advertising) Marketing script customer.iad-03.braze.com
Cadent before consent Cadent tracker domain (source: Disconnect.me, category: Advertising) Marketing script px.adentifi.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing Marketing script bat.bing.net
TikTok before consent TikTok analytics pixel Marketing script analytics.tiktok.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
OneTrust LLC OneTrust consent management Necessary script cdn.cookielaw.org
Forter before consent Forter tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script 89ea0743f614.cdn4.forter.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel adservice.google.com
LiveRamp before consent LiveRamp tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script c.tvpixel.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script geolocation.onetrust.com
The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel js.adsrvr.org

Scan history

One completed scan: cookies and trackers from the scan on August 14, 2026.

Recent scans

August 14, 2026 16 33

Is bk.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.