borboleta.co
Last scanned August 16, 2026
A cookie scan of borboleta.co performed on August 16, 2026 found 10 cookies and 26 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Complianz as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 26 third-party requests were detected from 18 vendors.
Consent behaviour grade
16 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Partially enforced This site
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Consent banner as encountered
No Reject option on the first layer; declining requires extra steps.
Load timeline before consent
Milliseconds from navigation start until each request fired or each cookie was set.
and 12 more
Observed before consent
Cookies set before consent (10)
-
_gcl_auanalytics · Google Analytics -
_ssw_cart_dataanalytics · Marfeel -
_shopify_essentialfunctional · Shopify -
cartfunctional · E-commerce -
cart_currencyfunctional · E-commerce -
localizationfunctional · Shopify -
cbuid_metaunknown -
hash_keyunknown -
hesidunknown -
sib_cuidunknown
Tracking requests before consent (15)
- api.marker.io api.marker.io set by edge.marker.io/3.v2.36.2.1f8d82a1d90625777217.js · at 1709 ms
- Google LLC www.googletagmanager.com at 222 ms
- Optimizely Inc. cdn.optimizely.com set by www.typeform.com/private-typeform · at 1513 ms
- Sentry (Functional Software) browser.sentry-cdn.com set by fast.wistia.com/E-v1.js · at 1512 ms
- Shopify otlp-http-production.shopifysvc.com set by borboleta.co/b979a3e2fw137e9400p4daec9d4mf64d2306m.js · at 369 ms
- www.google.com www.google.com set by borboleta.co/b979a3e2fw137e9400p4daec9d4mf64d2306m.js · at 580 ms
- Typeform SL embed.typeform.com set a cookie set by borboleta.co/contact · at 444 ms
- Brevo sibautomation.com set by borboleta.co/hanging-chain-heart-earring · at 952 ms
- PartnerStack js.partnerstack.com set by www.typeform.com/private-typeform · at 1481 ms
- PartnerStack grsm.io set by js.partnerstack.com/v1 · at 1525 ms
- PartnerStack partnerlinks.io set by js.partnerstack.com/v1 · at 1623 ms
- Smile js.smile.io set by borboleta.co/returns-1 · at 926 ms
- and 3 more
How we tested
Browser: Chrome/150.0.7871.124 · Scan origin: EU · Viewport: 1440×900 · Checked: 16 Aug 2026 05:59 - 16 Aug 2026 06:00
Cookies
10
Third-party
0
Trackers
26
Vendors
18
Consent banner
Complianz
Scans
1
What this setup is missing
- No Reject option on the first layer; declining requires extra steps.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Connection security
HTTPS supported
✓Redirects HTTP to HTTPS
✓HSTS
✓Content Security Policy
✓
Third-Party Trackers
26 requests detected from 18 vendors: api.marker.io, Google LLC, Optimizely Inc., Sentry (Functional Software), Shopify...
Third-Party Trackers
26 requests detected from 18 vendors: api.marker.io, Google LLC, Optimizely Inc., Sentry (Functional Software), Shopify...
Analytics
6
Marketing
5
Necessary
10
Functional
1
Other
4
| Vendor | Category | Type | Domain |
|---|---|---|---|
| api.marker.io before consent | Analytics | fetch | api.marker.io |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Optimizely Inc. before consent Optimizely A/B testing | Analytics | script | cdn.optimizely.com |
| Sentry (Functional Software) before consent Sentry browser SDK | Analytics | script | browser.sentry-cdn.com |
| Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) | Analytics | script | otlp-http-production.shopifysvc.com |
| www.google.com before consent | Analytics | fetch | www.google.com |
| Typeform SL before consent Typeform embedded form | Functional | iframe | embed.typeform.com |
| Brevo before consent Brevo tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | sibautomation.com |
| PartnerStack before consent PartnerStack tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | js.partnerstack.com |
| PartnerStack before consent PartnerStack tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | grsm.io |
| PartnerStack before consent PartnerStack tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | partnerlinks.io |
| Smile before consent Smile tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | js.smile.io |
| Amazon Amazon tracker domain (source: Disconnect.me, category: Content) | Necessary | script | d3e54v103j8qbb.cloudfront.net |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | ajax.googleapis.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| iubenda srl iubenda consent management | Necessary | script | cdn.iubenda.com |
| OneTrust LLC OneTrust consent management | Necessary | script | cdn.cookielaw.org |
| Shopify Inc. Shopify platform | Necessary | script | cdn.shopify.com |
| Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) | Necessary | script | cdn.jsdelivr.net |
| Wistia Wistia tracker domain (source: Disconnect.me, category: Content) | Necessary | script | fast.wistia.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | pagead2.googlesyndication.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | region1.google-analytics.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | ad.doubleclick.net |
| OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) | Unknown | script | geolocation.onetrust.com |
Scan history
One completed scan: cookies and trackers from the scan on August 16, 2026.
Recent scans
| August 16, 2026 | 10 26 |
More Cookie Compliance Reviews
Cardsmith - Login to your account
gocardsmith.co
Inicio - GoBOY
goboy.com.co
Inicio - Gobernanza del aire | Universidad de l...
gobernanzadelaire.uniandes.edu.co
Robot Challenge Screen
goamplify.co
GMIS - Get U.S. FDA Market Clearance and Approv...
gmis.co
Glowy Shop | Tratamientos Capilares Profesional...
glowybeauty.com.co
Glow Mates | Komunitas Kecantikan | Bergabungla...
glowmates.co
GlowFlow
glowflow.co
Is borboleta.co your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.