Does cards-x.de use cookies?

cards-x.de uses 3 cookies. No consent management platform was detected.

Does cards-x.de use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on cards-x.de. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does cards-x.de use?

cards-x.de loads 10 third-party requests from 5 vendors, including Shopify, Shopify Inc., Google LLC, BoldCommerce, PayPal Holdings.

How many marketing and analytics cookies does cards-x.de set?

cards-x.de sets 0 marketing and 0 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

cards-x.de

Item: cards-x.de
Rating: 44
Author: Passiro

https://cards-x.de

Last scanned August 20, 2026

A cookie scan of cards-x.de performed on August 20, 2026 found 3 cookies and 10 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 10 third-party requests from 5 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

3 cookies detected: 0 necessary, 0 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cart_currency before consent	cards-x.de	Functional	E-commerce	14 d	–	–	1st
localization before consent	cards-x.de	Functional	Shopify	365 d	–	–	1st
_shopify_essential before consent	cards-x.de	Functional	Shopify	365 d	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
consentHeader set by cards-x.de/trekkie.storefront.7bcd7bb8195e24c65a61d69d69eb32392ed0d53f.min.js:1:92020	https://cards-x.de	1st	before consent
_shs_state set by cards-x.de/shopify-perf-kit-3.8.4.min.js:1:40480	https://cards-x.de	1st	before consent
test set by cards-x.de/theme.js	https://cards-x.de	1st	before consent
shopify:webmcp_adapter_loaded set by cards-x.de/:156:256	https://cards-x.de	1st	before consent
BOLD_SHOP_PRE_ENABLED set by static.boldcommerce.com/pr.js:2:172782	https://cards-x.de	1st	before consent
BOLD_SHOP_PRE_ENABLED_TIMESTAMP set by static.boldcommerce.com/pr.js:2:172821	https://cards-x.de	1st	before consent
gfCid set by cdn.shopify.com/globo.filter.min.js:1:44873	https://cards-x.de	1st	before consent
_flt_vid set by cdn.shopify.com/globo.filter.247.min.js:1:1096	https://cards-x.de	1st	before consent
_flt_vtype set by cdn.shopify.com/globo.filter.247.min.js:1:1235	https://cards-x.de	1st	before consent
__sak set by maps.googleapis.com/js	https://cards-x.de	1st	before consent
__pcjs__test__ set by cdn.s3.pop-convert.com/pcjs.production.min.js	https://cards-x.de	1st	before consent
__pcjs__production set by cdn.s3.pop-convert.com/pcjs.production.min.js	https://cards-x.de	1st	before consent
ls-default-locale set by cdn.langshop.app/sdk.js	https://cards-x.de	1st	before consent
ls-state-session set by cdn.langshop.app/sdk.js	https://cards-x.de	1st	before consent
ls-locale set by cdn.langshop.app/sdk.js	https://cards-x.de	1st	before consent
ls-currency set by cdn.langshop.app/sdk.js	https://cards-x.de	1st	before consent
pc_session_registered set by script.pop-convert.com/production.pc.min.js	https://cards-x.de	1st	before consent
__test__localStorage__ set by www.paypal.com/js	https://cards-x.de	1st	before consent
__paypal-httpswwwpaypalcomsdkjscomponentsbuttonscommitfalsecurrencyEURlocaledeDEclientidAexZEtAxk09Ncgj6FSWFFyGKbxxAZLTyJ2DPdJWl1YUlecinmc5AfIaRF2qYjWlusWahlzz6SVkY5CimerchantidV3YMQCNS969YNintentcapture_storage__ set by www.paypal.com/js	https://cards-x.de	1st	before consent

Third-Party Trackers

10 requests detected from 5 vendors: Shopify, Shopify Inc., Google LLC, BoldCommerce, PayPal Holdings

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	otlp-http-production.shopifysvc.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	error-analytics-sessions-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
BoldCommerce before consent BoldCommerce tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cp.boldapps.net
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
PayPal Holdings PayPal SDK	Necessary	script	www.paypal.com
PayPal Holdings PayPal static resources	Necessary	script	www.paypalobjects.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	shop.app
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com