Skip to main content
bofcu.com

bofcu.com

https://bofcu.com

Last scanned August 15, 2026

A cookie scan of bofcu.com performed on August 15, 2026 found 10 cookies and 15 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 15 third-party requests were detected from 10 vendors.

Cookies

10

Third-party

3

Trackers

15

Vendors

10

Consent banner

CookieYes

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

10 cookies detected: 1 necessary, 5 analytics, 1 marketing, 3 third-party

Total

10

Necessary

1

Functional

3

Analytics

5

Marketing

1

Unknown

0

3 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .bofcu.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gat_UA-196317844-1 before consent .bofcu.com Analytics Google Analytics Expired 1st
_ga_C4G39GK8SM before consent .bofcu.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gcl_au before consent .bofcu.com Analytics Google Analytics 90 d 1st
_gid before consent .bofcu.com Analytics Google Analytics 1 d 1st
AWSALB before consent mastercardus.idprotectiononline.com Functional Amazon Web Services 7 d 3rd
AWSALBCORS before consent mastercardus.idprotectiononline.com Functional Amazon Web Services 7 d 3rd
cookieyes-consent www.bofcu.com Functional CookieYes 365 d 1st
_fbp before consent .bofcu.com Marketing Facebook 90 d 1st
OptanonConsent .idprotectiononline.com Necessary OneTrust 365 d 3rd

Browser storage set by the site

Name Domain Party
_gcl_ls set by www.googletagmanager.com/js https://www.bofcu.com 1st before consent
elementor set by www.bofcu.com/frontend.min.js https://www.bofcu.com 1st before consent
elementor set by www.bofcu.com/frontend.min.js https://www.bofcu.com 1st before consent
wpEmojiSettingsSupports set by www.bofcu.com/wp-emoji-loader.min.js:3:327 https://www.bofcu.com 1st before consent
uw-uid set by cdn.userway.org/widget_app_base_1786358039170.js:4:22487 https://www.bofcu.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://www.bofcu.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://www.bofcu.com 1st before consent
uw-tunings set by cdn.userway.org/widget_app_base_1786358039170.js:3:13484 https://www.bofcu.com 1st before consent
uw-tunings-checksum set by cdn.userway.org/widget_app_base_1786358039170.js:3:13521 https://www.bofcu.com 1st before consent
uw-icon-locales set by cdn.userway.org/widget_app_base_1786358039170.js:2:27160 https://www.bofcu.com 1st before consent
demo_mode_enabled set by horizon.prd-eu-c1-myidp.com/3130.8d79a882322e8436.js:12:319896 https://mastercardus.idprotectiononline.com 3rd before consent
demo_runtime_active set by horizon.prd-eu-c1-myidp.com/3130.8d79a882322e8436.js:1:60467 https://mastercardus.idprotectiononline.com 3rd before consent
dismissedNotifications set by horizon.prd-eu-c1-myidp.com/3524.0ce85c843deea9bc.js:1:9613291 https://mastercardus.idprotectiononline.com 3rd before consent
userLang set by horizon.prd-eu-c1-myidp.com/3524.0ce85c843deea9bc.js:1:9613692 https://mastercardus.idprotectiononline.com 3rd before consent
enrollmentUserData set by horizon.prd-eu-c1-myidp.com/3524.0ce85c843deea9bc.js:1:10913974 https://mastercardus.idprotectiononline.com 3rd before consent
pa_enabled set by rum-static.pingdom.net/pa-62a9f12a0d7ce50011000e65.js:1:3475 https://mastercardus.idprotectiononline.com 3rd before consent
pa set by rum-static.pingdom.net/pa-62a9f12a0d7ce50011000e65.js:1:3810 https://mastercardus.idprotectiononline.com 3rd before consent

Third-Party Trackers

15 requests detected from 10 vendors: events.jotform.com, Google LLC, SolarWinds, www.google.com, Adobe Fonts...

Analytics

5

Marketing

2

Necessary

3

Functional

1

Other

4

Vendor Category Type Domain
events.jotform.com before consent Analytics pixel events.jotform.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
SolarWinds before consent SolarWinds tracker domain (source: Disconnect.me, category: Analytics) Analytics script rum-static.pingdom.net
www.google.com before consent Analytics fetch www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Contentful Contentful tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.contentful.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
OneTrust LLC OneTrust consent management Necessary script cdn.cookielaw.org
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
IntuitionMachines before consent IntuitionMachines tracker domain (source: Disconnect.me, category: Anti-fraud) Unknown script hcaptcha.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script geolocation.onetrust.com

Scan history

One completed scan: cookies and trackers from the scan on August 15, 2026.

Recent scans

August 15, 2026 10 15

Is bofcu.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.