Does bromic.com.au use cookies?

bromic.com.au uses 11 cookies. The site uses OneTrust as its consent management platform.

Does bromic.com.au use a cookie banner (CMP)?

Yes. bromic.com.au uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does bromic.com.au use?

bromic.com.au loads 16 third-party requests from 9 vendors, including convertexperiments.com, Google LLC, www.google.com, Adobe Fonts, HubSpot Inc..

How many marketing and analytics cookies does bromic.com.au set?

bromic.com.au sets 0 marketing and 8 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

bromic.com.au

Item: bromic.com.au
Rating: 18
Author: Passiro

https://bromic.com.au

Last scanned August 17, 2026

A cookie scan of bromic.com.au completed on August 17, 2026 found 11 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs OneTrust as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 16 third-party requests were detected from 9 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

11 cookies detected: 1 necessary, 8 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
sbjs_current before consent	.bromic.com.au	Analytics	WooCommerce	Session	–	–	1st
sbjs_current_add before consent	.bromic.com.au	Analytics	WooCommerce	Session	–	–	1st
sbjs_first before consent	.bromic.com.au	Analytics	WooCommerce	Session	–	–	1st
sbjs_first_add before consent	.bromic.com.au	Analytics	WooCommerce	Session	–	–	1st
sbjs_migrations before consent	.bromic.com.au	Analytics	WooCommerce	Session	–	–	1st
sbjs_session before consent	.bromic.com.au	Analytics	WooCommerce	Expired	–	–	1st
sbjs_udata before consent	.bromic.com.au	Analytics	WooCommerce	Session	–	–	1st
_gcl_au before consent	.bromic.com.au	Analytics	Google Analytics	90 d	–	–	1st
_conv_s before consent	.bromic.com.au	Functional	Convert Insights	Expired	–	–	1st
_conv_v before consent	.bromic.com.au	Functional	Convert Insights	182 d	–	–	1st
OptanonConsent	.www.bromic.com.au	Necessary	OneTrust	365 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
_gcl_ls set by www.googletagmanager.com/gtm.js	https://www.bromic.com.au	1st	before consent
regionPromptState_AU set by ajax.googleapis.com/jquery.min.js	https://www.bromic.com.au	1st	before consent
conv_rand set by cdn-4.convertexperiments.com/10042473-10045307.js:321:740	https://www.bromic.com.au	1st	before consent

Third-Party Trackers

16 requests detected from 9 vendors: convertexperiments.com, Google LLC, www.google.com, Adobe Fonts, HubSpot Inc....

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
convertexperiments.com before consent convertexperiments.com tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	cdn-4.convertexperiments.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
www.google.com before consent	Analytics	fetch	www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
HubSpot Inc. before consent HubSpot forms	Functional	script	js.hsforms.net
Accessibe before consent Accessibe tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	acsbapp.com
Google LLC before consent YouTube embedded video	Marketing	iframe	www.youtube.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	forms.hsforms.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com