blush.no
Last scanned August 15, 2026
A cookie scan of blush.no performed on August 15, 2026 found 8 cookies and 12 third-party tracking requests. The site relies on Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 12 third-party requests were detected from 9 vendors.
Consent behaviour grade
55 / 100
This site set tracking cookies or loaded trackers before the visitor consented.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Partially enforced This site
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Consent banner as encountered
No Reject option on the first layer; declining requires extra steps.
Load timeline before consent
Milliseconds from navigation start until each request fired or each cookie was set.
and 7 more
Observed before consent
Cookies set before consent (8)
-
__kla_idmarketing · Klaviyo -
.AspNetCore.Sessionunknown -
hello_retail_idunknown -
helloRetailTrackingUserIdunknown -
user-interactionsunknown -
viewportunknown -
youty_upcoming_campaignunknown -
.AspNetCore.Antiforgery.47DEQpj8HBQnecessary · Microsoft
Tracking requests before consent (8)
- core.helloretail.com core.helloretail.com set by www.nordicfeel.com/Dd5pRoVp.js · at 938 ms
- Google LLC www.googletagmanager.com set by www.nordicfeel.com/no · at 615 ms
- Mixpanel Inc. cdn.mxpnl.com at 1057 ms
- Adobe Fonts use.typekit.net at 483 ms
- Klaviyo Inc. static.klaviyo.com set by www.nordicfeel.com/Dd5pRoVp.js · at 796 ms
- Mastercard cdn-eu.dynamicyield.com at 469 ms
- Google LLC pagead2.googlesyndication.com set by www.googletagmanager.com/gtm.js · at 3223 ms
- Google LLC region1.google-analytics.com set by www.googletagmanager.com/js · at 3223 ms
How we tested
Browser: Chrome/150.0.7871.124 · Scan origin: EU · Viewport: 1440×900 · Checked: 15 Aug 2026 11:11
Cookies
8
Third-party
8
Trackers
12
Vendors
9
Consent banner
Cookiebot
Scans
1
What this setup is missing
- Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
- No Reject option on the first layer; declining requires extra steps.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Connection security
HTTPS supported
✓Redirects HTTP to HTTPS
✓HSTS
✓Content Security Policy
✗
Third-Party Trackers
12 requests detected from 9 vendors: core.helloretail.com, Google LLC, Mixpanel Inc., Adobe Fonts, Klaviyo Inc....
Third-Party Trackers
12 requests detected from 9 vendors: core.helloretail.com, Google LLC, Mixpanel Inc., Adobe Fonts, Klaviyo Inc....
Analytics
3
Marketing
2
Necessary
3
Functional
1
Other
3
| Vendor | Category | Type | Domain |
|---|---|---|---|
| core.helloretail.com before consent | Analytics | fetch | core.helloretail.com |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Mixpanel Inc. before consent Mixpanel CDN | Analytics | script | cdn.mxpnl.com |
| Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery | Functional | script | use.typekit.net |
| Klaviyo Inc. before consent Klaviyo email marketing | Marketing | script | static.klaviyo.com |
| Mastercard before consent Mastercard tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | cdn-eu.dynamicyield.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Cybot A/S (Cookiebot) Cookiebot consent management | Necessary | script | consent.cookiebot.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | pagead2.googlesyndication.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | region1.google-analytics.com |
| UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) | Unknown | script | consentcdn.cookiebot.com |
Scan history
One completed scan: cookies and trackers from the scan on August 15, 2026.
Recent scans
| August 15, 2026 | 8 12 |
More Cookie Compliance Reviews
Tømrer1 - Profesjonelt tømrerarbeid på Frogn...
bmtomrer1.no
Firmanavn
bmtbygg.no
Hjem | BM Rørservice AS
bmrorserviceas.no
Byggmester Bernt-Åge Haraldsen AS - Nybygg, Ti...
bmharaldsen.no
Byggmester i Tromsø | BME Johnsen AS
bme-johnsen.no
Vålerenga Invest Fotball AS - :. BRUSTAD MARKE...
bmcas.no
Privacy Policy - Blystad Group
blystad.no
Boliglån, omstartslån og refinansiering | Blu...
bluestep.no
Is blush.no your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.