Skip to main content
cafeto.fr

cafeto.fr

https://cafeto.fr

Last scanned August 18, 2026

A cookie scan of cafeto.fr completed on August 18, 2026 found 23 cookies and 23 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 23 third-party requests were detected from 7 vendors.

Cookies

23

Third-party

0

Trackers

23

Vendors

7

Consent banner

CookieYes

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

23 cookies detected: 2 necessary, 16 analytics, 3 marketing

Total

23

Necessary

2

Functional

2

Analytics

16

Marketing

3

Unknown

0

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
hubspotutk before consent .cafeto.fr Analytics HubSpot 140 d – – 1st
sbjs_current before consent .cafeto.fr Analytics WooCommerce Session – – 1st
sbjs_current_add before consent .cafeto.fr Analytics WooCommerce Session – – 1st
sbjs_first before consent .cafeto.fr Analytics WooCommerce Session – – 1st
sbjs_first_add before consent .cafeto.fr Analytics WooCommerce Session – – 1st
sbjs_migrations before consent .cafeto.fr Analytics WooCommerce Session – – 1st
sbjs_session before consent .cafeto.fr Analytics WooCommerce Expired – – 1st
sbjs_udata before consent .cafeto.fr Analytics WooCommerce Session – – 1st
tk_qs before consent .cafeto.fr Analytics WordPress Expired – – 1st
tk_r3d before consent .cafeto.fr Analytics WordPress Expired – – 1st
_ga before consent .cafeto.fr Analytics Google Analytics 360 d – – 1st
_ga_PCB1Y3LSKF before consent .cafeto.fr Analytics Google Analytics 360 d – – 1st
_gcl_au before consent .cafeto.fr Analytics Google Analytics 50 d – – 1st
__hssc before consent .cafeto.fr Analytics HubSpot Expired – – 1st
__hssrc before consent .cafeto.fr Analytics HubSpot Session – – 1st
__hstc before consent .cafeto.fr Analytics HubSpot 140 d – – 1st
cookieyes-consent cafeto.fr Functional CookieYes 325 d – – 1st
tk_ai before consent .cafeto.fr Functional WooCommerce / Jetpack 360 d – – 1st
tk_lr before consent .cafeto.fr Marketing WordPress 325 d – – 1st
tk_or before consent .cafeto.fr Marketing WordPress 360 d – – 1st
_fbp before consent .cafeto.fr Marketing Facebook 50 d – – 1st
__stripe_mid .cafeto.fr Necessary Stripe 325 d ✓ – 1st
__stripe_sid .cafeto.fr Necessary Stripe Expired ✓ – 1st

Browser storage set by the site

Name Domain Party
wc set by cafeto.fr/cart-fragments.min.js https://cafeto.fr 1st before consent
wc set by cafeto.fr/cart-fragments.min.js https://cafeto.fr 1st before consent
wpEmojiSettingsSupports set by cafeto.fr/wp-emoji-loader.min.js:3:327 https://cafeto.fr 1st before consent
_gcl_ls set by www.googletagmanager.com/js https://cafeto.fr 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://cafeto.fr 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://cafeto.fr 1st before consent
wc_fragments_33ff7afac932564a17b231aba5eff22a set by cafeto.fr/cart-fragments.min.js https://cafeto.fr 1st before consent
wc_cart_hash_33ff7afac932564a17b231aba5eff22a set by cafeto.fr/cart-fragments.min.js https://cafeto.fr 1st before consent
wc_cart_hash_33ff7afac932564a17b231aba5eff22a set by cafeto.fr/cart-fragments.min.js https://cafeto.fr 1st before consent
__wpDataTestLocalStorage set by cafeto.fr/data.min.js https://cafeto.fr 1st before consent
storeApiNonce set by cafeto.fr/wc-blocks-middleware.js https://cafeto.fr 1st before consent
storeApiCartData set by cafeto.fr/wc-blocks-data.js https://cafeto.fr 1st before consent
hs-cta-test set by js-eu1.hubspot.com/web-interactives-embed.js:1:37789 https://cafeto.fr 1st before consent

Third-Party Trackers

23 requests detected from 7 vendors: Automattic, Google LLC, HubSpot, Stripe Inc., HubSpot Inc....

Analytics

6

Marketing

8

Necessary

6

Functional

1

Other

2

Vendor Category Type Domain
Automattic before consent Automattic tracker domain (source: Disconnect.me, category: Content) Analytics script stats.wp.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-eu1.hs-analytics.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content) Analytics script forms-eu1.hsforms.com
Stripe Inc. before consent Stripe fraud detection Analytics script m.stripe.com
Google LLC before consent Google reCAPTCHA bot protection Functional script www.google.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-scripts.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hsadspixel.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hscollectedforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script api-eu1.hubapi.com
HubSpot Inc. before consent HubSpot marketing & CRM Marketing script js-eu1.hubspot.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content) Necessary script static.hsappstatic.net
Stripe Inc. Stripe payment processing Necessary script js.stripe.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script m.stripe.network

Scan history

One completed scan: cookies and trackers from the scan on August 18, 2026.

Recent scans

August 18, 2026 23 23

Is cafeto.fr your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.