Does bloomsoutofthebox.nl use cookies?

bloomsoutofthebox.nl uses 4 cookies. No consent management platform was detected.

Does bloomsoutofthebox.nl use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on bloomsoutofthebox.nl. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does bloomsoutofthebox.nl use?

bloomsoutofthebox.nl loads 19 third-party requests from 12 vendors, including Microsoft, Shopify, Shopify Inc., sp.stapecdn.com, Google LLC.

How many marketing and analytics cookies does bloomsoutofthebox.nl set?

bloomsoutofthebox.nl sets 1 marketing and 0 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

bloomsoutofthebox.nl

Item: bloomsoutofthebox.nl
Rating: 20
Author: Passiro

https://bloomsoutofthebox.nl

Last scanned August 15, 2026

A cookie scan of bloomsoutofthebox.nl conducted on August 15, 2026 found 4 cookies and 19 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 19 third-party requests from 12 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

4 cookies detected: 0 necessary, 0 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cart_currency before consent	www.bloomsoutofthebox.nl	Functional	E-commerce	14 d	–	–	1st
localization before consent	www.bloomsoutofthebox.nl	Functional	Shopify	365 d	–	–	1st
_shopify_essential before consent	www.bloomsoutofthebox.nl	Functional	Shopify	365 d	✓	✓	1st
prism_66838862 before consent	.bloomsoutofthebox.nl	Marketing	Active Campaign	30 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
marketShopStape set by www.bloomsoutofthebox.nl/:4674:18	https://www.bloomsoutofthebox.nl	1st	before consent
consentHeader set by www.bloomsoutofthebox.nl/storefront-banner.js:1:5809	https://www.bloomsoutofthebox.nl	1st	before consent
_shs_state set by www.bloomsoutofthebox.nl/shopify-perf-kit-3.8.3.min.js:1:35548	https://www.bloomsoutofthebox.nl	1st	before consent
shopify:webmcp_adapter_loaded set by www.bloomsoutofthebox.nl/:189:256	https://www.bloomsoutofthebox.nl	1st	before consent
ElfsightLibraryStorageTest set by universe-static.elfsightcdn.com/googleReviews.js:24:180248	https://www.bloomsoutofthebox.nl	1st	before consent
stape_events set by www.bloomsoutofthebox.nl/b979a3e2fw137e9400p4daec9d4mf64d2306m.js:1:160370	https://www.bloomsoutofthebox.nl	1st	before consent

Third-Party Trackers

19 requests detected from 12 vendors: Microsoft, Shopify, Shopify Inc., sp.stapecdn.com, Google LLC...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	otlp-http-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
sp.stapecdn.com before consent	Analytics	fetch	sp.stapecdn.com
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
ActiveCampaign before consent ActiveCampaign tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	diffuser-cdn.app-us1.com
ActiveCampaign before consent ActiveCampaign tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	trackcmp.net
LinkedIn Corporation before consent LinkedIn Insight Tag	Marketing	script	snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking	Marketing	pixel	px.ads.linkedin.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1liekpayvooaz.cloudfront.net
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
ElfSight ElfSight tracker domain (source: Disconnect.me, category: Content)	Necessary	script	apps.elfsight.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	shop.app
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net