Skip to main content
bodyshake.com

bodyshake.com

https://bodyshake.com

Last scanned August 15, 2026

A cookie scan of bodyshake.com performed on August 15, 2026 found 7 cookies and 18 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Usercentrics as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 18 third-party requests were detected from 8 vendors.

Cookies

7

Third-party

0

Trackers

18

Vendors

8

Consent banner

Usercentrics

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

7 cookies detected: 0 necessary, 3 analytics, 1 marketing

Total

7

Necessary

0

Functional

3

Analytics

3

Marketing

1

Unknown

0

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .bodyshake.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_ga_DDSK8BM2DS before consent .bodyshake.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gcl_au before consent .bodyshake.com Analytics Google Analytics 90 d 1st
cart_currency before consent bodyshake.com Functional E-commerce 14 d 1st
localization before consent bodyshake.com Functional Shopify 365 d 1st
_shopify_essential before consent bodyshake.com Functional Shopify 365 d 1st
_fbp before consent .bodyshake.com Marketing Facebook 90 d 1st

Browser storage set by the site

Name Domain Party
RAMDOM_KEY_LOCAL_STORAGE set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
RAMDOM_KEY_LOCAL_STORAGE set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
TriplePixel set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
TriplePixelU set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
di_pmt_wt set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
__tw__ set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
consentHeader set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
uc_user_country set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
_shs_state set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
shopify:webmcp_adapter_loaded set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
loyaltylion_localstorage_test set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
loyaltylion_sessionstorage_test set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
uc_user_interaction set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
uc_settings set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
_gcl_ls set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
lastExternalReferrer set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent
lastExternalReferrerTime set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82164 https://bodyshake.com 1st before consent

Third-Party Trackers

18 requests detected from 8 vendors: api.config-security.com, Google LLC, Shopify, www.google.com, Meta Platforms, Inc....

Analytics

5

Marketing

5

Necessary

5

Functional

0

Other

3

Vendor Category Type Domain
api.config-security.com before consent Analytics xhr api.config-security.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
www.google.com before consent Analytics fetch www.google.com
Google LLC before consent Google Ads Marketing script www.google.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
TrustPilot before consent TrustPilot tracker domain (source: Disconnect.me, category: Advertising) Marketing script ecommplugins-scripts.trustpilot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content) Necessary script widget.trustpilot.com
Usercentrics GmbH Usercentrics consent management Necessary script app.usercentrics.eu
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.googleadservices.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on August 15, 2026.

Recent scans

August 15, 2026 7 18

Is bodyshake.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.