Does busterbox.com use cookies?

busterbox.com uses 24 cookies. The site uses Cookiebot as its consent management platform.

Does busterbox.com use a cookie banner (CMP)?

Yes. busterbox.com uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does busterbox.com use?

busterbox.com loads 40 third-party requests from 26 vendors, including analytics-ipv6.tiktokw.us, api.cartstack.com, ContentSquare, dtm-dre.platform.hicloud.com, FigPii.

How many marketing and analytics cookies does busterbox.com set?

busterbox.com sets 9 marketing and 8 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

busterbox.com

Item: busterbox.com
Rating: 8
Author: Passiro

https://busterbox.com

Last scanned August 18, 2026

A cookie scan of busterbox.com completed on August 18, 2026 found 24 cookies and 40 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 40 third-party requests were detected from 26 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✗

HSTS

✗

Content Security Policy

✗

Cookies

24 cookies detected: 0 necessary, 8 analytics, 9 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.busterbox.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gat_gtag_UA_71312115_1 before consent	.busterbox.com	Analytics	Google Analytics	Expired	–	–	1st
_gat_UA-71312115-1 before consent	.busterbox.com	Analytics	Google Analytics	Expired	–	–	1st
_ga_G93T1Y4Z90 before consent	.busterbox.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.busterbox.com	Analytics	Google Analytics	90 d	–	–	1st
_gid before consent	.busterbox.com	Analytics	Google Analytics	1 d	–	–	1st
_hjSessionUser_1174442 before consent	.busterbox.com	Analytics	Hotjar	365 d	✓	–	1st
_hjSession_1174442 before consent	.busterbox.com	Analytics	Hotjar	Expired	✓	–	1st
ac_enable_tracking before consent	busterbox.com	Marketing	Active Campaign	30 d	✓	–	1st
prism_89281754 before consent	.busterbox.com	Marketing	Active Campaign	30 d	–	–	1st
ttcsid before consent	.busterbox.com	Marketing	TikTok	90 d	–	–	1st
ttcsid_C5HUT1C6J7TSRVQD9J5G before consent	.busterbox.com	Marketing	TikTok	90 d	–	–	1st
_fbp before consent	.busterbox.com	Marketing	Facebook	90 d	–	–	1st
_scid before consent	.busterbox.com	Marketing	Snapchat	1.1 yr	–	–	1st
_scid_r before consent	.busterbox.com	Marketing	Snapchat	1.1 yr	–	–	1st
_ttp before consent	.busterbox.com	Marketing	TikTok	90 d	–	–	1st
_tt_enable_cookie before consent	.busterbox.com	Marketing	TikTok	90 d	–	–	1st
fp_16HexString before consent	.busterbox.com	Unknown	-	365 d	–	–	1st
pixelcat_id before consent	busterbox.com	Unknown	-	365 d	–	–	1st
wisepops before consent	.busterbox.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	1st
wisepops_session before consent	.busterbox.com	Unknown	-	Session	–	–	1st
wisepops_visitor before consent	.busterbox.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	1st
wisepops_visits before consent	.busterbox.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	1st
_FPCI before consent	.busterbox.com	Unknown	-	365 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
homepage_url set by busterbox.com/:3508:14	https://busterbox.com	1st	before consent
_gcl_ls set by www.googletagmanager.com/js	https://busterbox.com	1st	before consent
u_sclid set by sc-static.net/scevent.min.js:2:12021	https://busterbox.com	1st	before consent
u_scsid set by sc-static.net/scevent.min.js:2:12021	https://busterbox.com	1st	before consent
u_sclid_r set by sc-static.net/scevent.min.js:2:12021	https://busterbox.com	1st	before consent
u_scsid_r set by sc-static.net/scevent.min.js:2:12021	https://busterbox.com	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242	https://busterbox.com	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242	https://busterbox.com	1st	before consent
bugsnag-anonymous-id set by tracking-cdn.figpii.com/406c6f237cbbb08773ecdf10c6754c5c.js:14:3745	https://busterbox.com	1st	before consent
mc_test_local_storage set by mccdn.me/widget.js:1:16466	https://busterbox.com	1st	before consent
mc_pixel_session_data set by mccdn.me/widget.js:1:16093	https://busterbox.com	1st	before consent
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208	https://busterbox.com	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433	https://busterbox.com	1st	before consent
referrers set by tracking-cdn.figpii.com/406c6f237cbbb08773ecdf10c6754c5c.js:15:24818	https://busterbox.com	1st	before consent
_fp_sessionId set by tracking-cdn.figpii.com/406c6f237cbbb08773ecdf10c6754c5c.js:15:24818	https://busterbox.com	1st	before consent
tt_sessionId set by analytics.tiktok.com/main.MTZkNzEzYmVhMQ.js:1:61319	https://busterbox.com	1st	before consent
tt_appInfo set by analytics.tiktok.com/main.MTZkNzEzYmVhMQ.js:1:61319	https://busterbox.com	1st	before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTZkNzEzYmVhMQ.js:1:64120	https://busterbox.com	1st	before consent
hjViewportId set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80297	https://busterbox.com	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80433	https://busterbox.com	1st	before consent
wisepops-pageview_id set by loader.wisepops.com/get-loader.js	https://busterbox.com	1st	before consent

Third-Party Trackers

40 requests detected from 26 vendors: analytics-ipv6.tiktokw.us, api.cartstack.com, ContentSquare, dtm-dre.platform.hicloud.com, FigPii...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
analytics-ipv6.tiktokw.us before consent	Analytics	other	analytics-ipv6.tiktokw.us
api.cartstack.com before consent	Analytics	script	api.cartstack.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	content.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
dtm-dre.platform.hicloud.com before consent	Analytics	script	dtm-dre.platform.hicloud.com
FigPii before consent FigPii tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	tracking-cdn.figpii.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.googleoptimize.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
mccdn.me before consent	Analytics	script	mccdn.me
r.wdfl.co before consent	Analytics	script	r.wdfl.co
SmartBear before consent SmartBear tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	sessions.bugsnag.com
www.google.com before consent	Analytics	fetch	www.google.com
ActiveCampaign before consent ActiveCampaign tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	trackcmp.net
ActiveCampaign before consent ActiveCampaign tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	scoobybox.activehosted.com
ActiveCampaign before consent ActiveCampaign tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	diffuser-cdn.app-us1.com
Drip Global before consent Drip Global tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sleeknotecustomerscripts.sleeknote.com
InnoCraft before consent InnoCraft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.matomo.cloud
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Social)	Marketing	script	tr6.snapchat.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sc-static.net
Snap Inc. before consent Snapchat conversion tracking	Marketing	pixel	tr.snapchat.com
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
Wisepops before consent Wisepops tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	loader.wisepops.com
Wisepops before consent Wisepops tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	wisepops.net
Zax before consent Zax tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	tag.marinsm.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s3.amazonaws.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	widget.trustpilot.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com