Does booksprout.co use cookies?

booksprout.co uses 33 cookies, 27 of which are set by third-party domains. The site uses Termly as its consent management platform.

Does booksprout.co use a cookie banner (CMP)?

Yes. booksprout.co uses Termly as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does booksprout.co use?

booksprout.co loads 33 third-party requests from 16 vendors, including Amazon, ContentSquare, FunctionalSoftware, Google LLC, HelpScout.

How many marketing and analytics cookies does booksprout.co set?

booksprout.co sets 1 marketing and 6 analytics cookies, alongside 6 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

booksprout.co

Item: booksprout.co
Rating: 8
Author: Passiro

https://booksprout.co

Last scanned July 23, 2026

A cookie scan of booksprout.co conducted on July 23, 2026 found 33 cookies and 33 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Termly as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 33 third-party requests were detected from 16 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Termly

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

33 cookies detected: 6 necessary, 6 analytics, 1 marketing, 27 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

27 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.booksprout.co	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_HMTGY8HDT9 before consent	.booksprout.co	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_WGDD1YRB26 before consent	.booksprout.co	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.booksprout.co	Analytics	Google Analytics	87 d	–	–	1st
_gcl_au before consent	.upwork.com	Analytics	Google Analytics	87 d	–	–	3rd
_vwo_uuid_v2 before consent	.upwork.com	Analytics	VWO	363 d	–	–	3rd
country_code before consent	.upwork.com	Functional	Geolocation	Session	✓	–	3rd
visitor_id before consent	.upwork.com	Marketing	Pardot	362 d	✓	–	3rd
cf_clearance	.upwork.com	Necessary	Cloudflare	362 d	✓	✓	3rd
csrf_token	booksprout.co	Necessary	CSRF Protection	27 d	✓	–	1st
OptanonConsent	.upwork.com	Necessary	OneTrust	362 d	–	–	3rd
XSRF-TOKEN	.upwork.com	Necessary	CSRF Protection	Session	✓	–	3rd
__cflb	www.upwork.com	Necessary	Cloudflare	4 d	✓	✓	3rd
__cf_bm	.upwork.com	Necessary	Cloudflare	Expired	✓	✓	3rd
AWSALBTG before consent	www.upwork.com	Unknown	-	4 d	–	–	3rd
AWSALBTGCORS before consent	www.upwork.com	Unknown	-	4 d	✓	–	3rd
connect.sid before consent	booksprout.co	Unknown	-	Session	–	✓	1st
cookie_domain before consent	www.upwork.com	Unknown	-	Session	✓	–	3rd
cookie_prefix before consent	www.upwork.com	Unknown	-	Session	✓	–	3rd
enabled_ff before consent	www.upwork.com	Unknown	-	Session	✓	–	3rd
g_state before consent	www.upwork.com	Unknown	-	177 d	–	–	3rd
session-id before consent	.amazon.com	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
session-id-time before consent	.amazon.com	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
session-token before consent	.amazon.com	Unknown	-	1.1 yr lifetime over 13 months	✓	✓	3rd
tkbl_session_id before consent	www.upwork.com	Unknown	-	Session	–	–	3rd
ubid-main before consent	.amazon.com	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
umq before consent	.upwork.com	Unknown	-	177 d	✓	–	3rd
visitor_gql_token before consent	.upwork.com	Unknown	-	Expired	✓	–	3rd
_cq_duid before consent	.upwork.com	Unknown	-	88 d	✓	–	3rd
_cq_s before consent	.upwork.com	Unknown	-	4 d	✓	–	3rd
_cq_session before consent	.upwork.com	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
_cq_suid before consent	.upwork.com	Unknown	-	Session	✓	–	3rd
_I_ before consent	.atticus.io	Unknown	-	27 d	–	✓	3rd

Third-Party Trackers

33 requests detected from 16 vendors: Amazon, ContentSquare, FunctionalSoftware, Google LLC, HelpScout...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	images-na.ssl-images-amazon.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o4504832385613824.ingest.sentry.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
HelpScout before consent HelpScout tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	beacon-v2.helpscout.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
TransUnion before consent TransUnion tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	first.iovation.com
Google LLC before consent Google Ads	Marketing	script	www.google.com
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	upwork.pxf.io
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	www.ojrq.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d3hb14vkzrxvla.cloudfront.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1rozh26tys225.cloudfront.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	m.media-amazon.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d3216uwaav9lg7.cloudfront.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s3.amazonaws.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d2jjzw81hqbuqv.cloudfront.net
Automattic Automattic tracker domain (source: Disconnect.me, category: Content)	Necessary	script	stats.wp.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Cloudinary Cloudinary tracker domain (source: Disconnect.me, category: Content)	Necessary	script	res.cloudinary.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Qualtrics Qualtrics tracker domain (source: Disconnect.me, category: Content)	Necessary	script	zn0izjiulta2j2t4o-upwork.siteintercept.qualtrics.com
Wingify Wingify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	dev.visualwebsiteoptimizer.com
CHEQ before consent CHEQ tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	ob.cityrobotflower.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.googleadservices.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
TransUnion before consent TransUnion tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	mpsnare.iesnare.com