Does cardivo.com use cookies?

cardivo.com uses 21 cookies, 5 of which are set by third-party domains. No consent management platform was detected.

Does cardivo.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on cardivo.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does cardivo.com use?

cardivo.com loads 27 third-party requests from 16 vendors, including cdn.usefathom.com, Cloudflare Inc., FunctionalSoftware, Google LLC, play.google.com.

How many marketing and analytics cookies does cardivo.com set?

cardivo.com sets 3 marketing and 4 analytics cookies, alongside 7 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

cardivo.com

Item: cardivo.com
Rating: 8
Author: Passiro

https://cardivo.com

Last scanned August 20, 2026

A cookie scan of cardivo.com completed on August 20, 2026 found 21 cookies and 27 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 27 third-party requests from 16 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

21 cookies detected: 7 necessary, 4 analytics, 3 marketing, 5 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

5 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.cardivo.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_LJ96GKNRGD before consent	.cardivo.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_pk_id.20893.dd50 before consent	cardivo.com	Analytics	Matomo	1.1 yr	–	–	1st
_pk_ses.20893.dd50 before consent	cardivo.com	Analytics	Matomo	Expired	–	–	1st
intercom-device-id-j15veita before consent	.cardivo.com	Marketing	Intercom	270 d	–	–	1st
intercom-id-j15veita before consent	.cardivo.com	Marketing	Intercom	270 d	–	–	1st
intercom-session-j15veita before consent	.cardivo.com	Marketing	Intercom	7 d	–	–	1st
__cf_bm	.cardivo.com	Necessary	Cloudflare	Expired	✓	✓	1st
__stripe_mid	.demo.cardivo.com	Necessary	Stripe	365 d	✓	–	1st
__stripe_mid	.demo.paythen.co	Necessary	Stripe	365 d	✓	–	3rd
__stripe_mid	.buy.stripe.com	Necessary	Stripe	365 d	✓	–	3rd
__stripe_sid	.demo.cardivo.com	Necessary	Stripe	Expired	✓	–	1st
__stripe_sid	.demo.paythen.co	Necessary	Stripe	Expired	✓	–	3rd
__stripe_sid	.buy.stripe.com	Necessary	Stripe	Expired	✓	–	3rd
handl_landing_page before consent	cardivo.com	Unknown	-	30 d	–	–	1st
handl_original_ref before consent	cardivo.com	Unknown	-	30 d	–	–	1st
handl_ref before consent	cardivo.com	Unknown	-	30 d	–	–	1st
handl_url before consent	cardivo.com	Unknown	-	30 d	–	–	1st
ph_phc_VH9hn9bVoRuwIVBXxZQyp4UQVLUlLhrXg45BiB504s6_posthog before consent	.cardivo.com	Unknown	-	365 d	✓	–	1st
_cardivo_session before consent	demo.cardivo.com	Unknown	-	Session	✓	✓	1st
_paythen_session before consent	demo.paythen.co	Unknown	-	Session	–	✓	3rd

Browser storage set by the site

Name	Domain	Party
wpEmojiSettingsSupports set by cardivo.com/:71:113	https://cardivo.com	1st	before consent
__mplssupport__ set by us-assets.i.posthog.com/array.js:1:45607	https://cardivo.com	1st	before consent
__support__ set by us-assets.i.posthog.com/array.js:1:47099	https://cardivo.com	1st	before consent
ph_phc_VH9hn9bVoRuwIVBXxZQyp4UQVLUlLhrXg45BiB504s6_posthog set by us-assets.i.posthog.com/array.js:1:47099	https://cardivo.com	1st	before consent
ph_phc_VH9hn9bVoRuwIVBXxZQyp4UQVLUlLhrXg45BiB504s6_posthog set by us-assets.i.posthog.com/array.js:1:45607	https://cardivo.com	1st	before consent
ph_phc_VH9hn9bVoRuwIVBXxZQyp4UQVLUlLhrXg45BiB504s6_primary_window_exists set by us-assets.i.posthog.com/array.js:1:47099	https://cardivo.com	1st	before consent
test set by us-assets.i.posthog.com/array.js:1:241208	https://cardivo.com	1st	before consent
ph_phc_VH9hn9bVoRuwIVBXxZQyp4UQVLUlLhrXg45BiB504s6_session_registered_properties set by us-assets.i.posthog.com/array.js:1:47099	https://cardivo.com	1st	before consent
ph_phc_VH9hn9bVoRuwIVBXxZQyp4UQVLUlLhrXg45BiB504s6_window_id set by us-assets.i.posthog.com/array.js:1:47099	https://cardivo.com	1st	before consent
sentryReplaySession set by browser.sentry-cdn.com/bundle.tracing.replay.min.js:2:190405	https://demo.cardivo.com	1st	before consent
sentryReplaySession set by demo.paythen.co/application-0d11532cd9c8c3cf383c.js:2:2016725	https://demo.paythen.co	3rd	before consent

Third-Party Trackers

27 requests detected from 16 vendors: cdn.usefathom.com, Cloudflare Inc., FunctionalSoftware, Google LLC, play.google.com...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
cdn.usefathom.com before consent	Analytics	script	cdn.usefathom.com
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o4508452517380096.ingest.us.sentry.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
play.google.com before consent	Analytics	fetch	play.google.com
PostHog before consent PostHog tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	us-assets.i.posthog.com
Sentry (Functional Software) before consent Sentry error tracking	Analytics	script	js.sentry-cdn.com
Sentry (Functional Software) before consent Sentry browser SDK	Analytics	script	browser.sentry-cdn.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: Content)	Analytics	script	r.stripe.com
Stripe Inc. before consent Stripe fraud detection	Analytics	script	m.stripe.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Intercom Inc. before consent Intercom CDN	Functional	script	js.intercomcdn.com
Intercom before consent Intercom tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	widget.intercom.io
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1wqzb5bdbcre6.cloudfront.net
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Cloudinary Cloudinary tracker domain (source: Disconnect.me, category: Content)	Necessary	script	upload-widget.cloudinary.com
Cloudinary Cloudinary tracker domain (source: Disconnect.me, category: Content)	Necessary	script	res.cloudinary.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Stripe Stripe tracker domain (source: Disconnect.me, category: Content)	Necessary	script	buy.stripe.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	stats.g.doubleclick.net
IntuitionMachines before consent IntuitionMachines tracker domain (source: Disconnect.me, category: Anti-fraud)	Unknown	script	hcaptcha.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network