Does bnpparibas-3stepit.com use cookies?

bnpparibas-3stepit.com uses 5 cookies, 5 of which are set by third-party domains. The site uses OneTrust as its consent management platform.

Does bnpparibas-3stepit.com use a cookie banner (CMP)?

Yes. bnpparibas-3stepit.com uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does bnpparibas-3stepit.com use?

bnpparibas-3stepit.com loads 6 third-party requests from 6 vendors, including InnoCraft, Cloudflare Inc., OneTrust LLC, UNPKG, Volentio JSD.

How many marketing and analytics cookies does bnpparibas-3stepit.com set?

bnpparibas-3stepit.com sets 0 marketing and 2 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

bnpparibas-3stepit.com

Item: bnpparibas-3stepit.com
Rating: 50
Author: Passiro

https://bnpparibas-3stepit.com

Last scanned August 15, 2026

A cookie scan of bnpparibas-3stepit.com performed on August 15, 2026 found 5 cookies and 6 third-party tracking requests. The site uses OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 6 third-party requests were detected from 6 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

5 cookies detected: 1 necessary, 2 analytics, 0 marketing, 5 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

5 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_pk_id.3.4ae6 before consent	3stepit.bnpparibas	Analytics	Matomo	1.1 yr	–	–	3rd
_pk_ses.3.4ae6 before consent	3stepit.bnpparibas	Analytics	Matomo	Expired	–	–	3rd
pll_language before consent	3stepit.bnpparibas	Functional	Polylang	361 d	✓	–	3rd
ServerID before consent	3stepit.bnpparibas	Functional	HAproxy	Session	✓	✓	3rd
OptanonConsent	.3stepit.bnpparibas	Necessary	OneTrust	176 d	–	–	3rd

Browser storage set by the site

Name	Domain	Party
uw-uid set by cdn.userway.org/widget_app_base_1786358039170.js:4:22487	https://3stepit.bnpparibas	3rd	before consent
uw-tunings set by cdn.userway.org/widget_app_base_1786358039170.js:3:13484	https://3stepit.bnpparibas	3rd	before consent
uw-tunings-checksum set by cdn.userway.org/widget_app_base_1786358039170.js:3:13521	https://3stepit.bnpparibas	3rd	before consent
uw-icon-locales set by cdn.userway.org/widget_app_base_1786358039170.js:2:27160	https://3stepit.bnpparibas	3rd	before consent

Third-Party Trackers

6 requests detected from 6 vendors: InnoCraft, Cloudflare Inc., OneTrust LLC, UNPKG, Volentio JSD...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
InnoCraft before consent InnoCraft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.matomo.cloud
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com