Does carlock.co use cookies?

carlock.co uses 21 cookies, 12 of which are set by third-party domains. No consent management platform was detected.

Does carlock.co use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on carlock.co. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does carlock.co use?

carlock.co loads 24 third-party requests from 10 vendors, including Amazon, Google LLC, unagi-eu.amazon.com, unagi-na.amazon.com, www.google.com.

How many marketing and analytics cookies does carlock.co set?

carlock.co sets 1 marketing and 5 analytics cookies, alongside 3 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

carlock.co

Item: carlock.co
Rating: 19
Author: Passiro

https://carlock.co

Last scanned August 20, 2026

A cookie scan of carlock.co performed on August 20, 2026 found 21 cookies and 24 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 24 third-party requests from 10 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google Consent Mode v2 is present but does not default to denied for all storage types.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

21 cookies detected: 3 necessary, 5 analytics, 1 marketing, 12 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

12 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.carlock.co	Analytics	Google Analytics	1 yr	–	–	1st
_gat before consent	.carlock.co	Analytics	Google Analytics	Expired	–	–	1st
_ga_WVB1XGPWVT before consent	.carlock.co	Analytics	Google Analytics	1 yr	–	–	1st
_gcl_au before consent	.carlock.co	Analytics	Google Analytics	56 d	–	–	1st
_gid before consent	.carlock.co	Analytics	Google Analytics	Expired	–	–	1st
i18n-prefs before consent	.amazon.de	Functional	Language	331 d	–	–	3rd
_fbp before consent	.carlock.co	Marketing	Facebook	56 d	–	–	1st
ak_bmsc	.amazon.de	Necessary	Akamai	Expired	–	✓	3rd
bm_sv	.amazon.de	Necessary	Akamai	Expired	✓	–	3rd
PHPSESSID	www.carlock.co	Necessary	PHP	Session	–	–	1st
csm-hit before consent	www.amazon.de	Unknown	-	316 d	–	–	3rd
lc-acbde before consent	.amazon.de	Unknown	-	331 d	–	–	3rd
qp before consent	.carlock.co	Unknown	-	56 d	–	–	1st
rxc before consent	www.amazon.de	Unknown	-	Expired	–	–	3rd
session-id before consent	.amazon.de	Unknown	-	331 d	✓	–	3rd
session-id-time before consent	.amazon.de	Unknown	-	331 d	✓	–	3rd
session-token before consent	.amazon.de	Unknown	-	331 d	✓	–	3rd
sp-cdn before consent	.amazon.de	Unknown	-	331 d	✓	✓	3rd
sst-acbde before consent	.amazon.de	Unknown	-	331 d	✓	✓	3rd
ubid-acbde before consent	.amazon.de	Unknown	-	331 d	✓	–	3rd
visitorCountry before consent	www.carlock.co	Unknown	-	Session	–	–	1st

Browser storage set by the site

Name	Domain	Party
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242	https://www.carlock.co	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242	https://www.carlock.co	1st	before consent
wpEmojiSettingsSupports set by www.carlock.co/:71:113	https://www.carlock.co	1st	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://www.carlock.co	1st	before consent
csm-hit set by www.amazon.de/ref=ams_pages	https://www.amazon.de	3rd	before consent
brand_follow_localStorage_testing_key set by m.media-amazon.com/510pMqUVqkL._RC%7C41lxBvBcksL.js,51bpKINvAOL.js,21RoFlDNKHL.js,41fFmJrK7zL.js,01N0G7oHRlL.js,31-hnA-p85L.js,21MQrCW40bL.js,01KVpvQDfZL.js,21XkditqCiL.js,319u8KAi11L.js,01TF4KwVp5L.js,31X4VtYohlL.js,01qtTpqN9TL.js,11t385NY3cL.js,01QUqxbk4aL.js,01vpgLQ7sWL.js,11RRv4g-1qL.js,014s6GxYjXL.js,01mq4gWWg+L.js,01Oy5H5EPsL.js,11HSAPeVuoL.js,31XajFHvawL.js,01lx4jtyKqL.js,01+86qUwmpL.js,01tvS9Qe2bL.js,01pSevr6s1L.js,01AxG+o2fGL.js,01L6HkOGRcL.js,01+xQYdGnAL.js,51601uNgBWL	https://www.amazon.de	3rd	before consent
csmtid set by www.amazon.de/s	https://www.amazon.de	3rd	before consent
ZJC6CJPQBH1EKXDHK61Q set by www.amazon.de/s	https://www.amazon.de	3rd	before consent
CSM_previousURL set by www.amazon.de/s	https://www.amazon.de	3rd	before consent
csm:adb set by www.amazon.de/s	https://www.amazon.de	3rd	before consent
testKey set by m.media-amazon.com/51rG04VN8cL._RC%7C712Qw7f7KTL.js,41VWJ7fRjuL.js,01A8CUOyW-L.js,01wGOYsRBlL.js,81sMrVn2q3L.js,01m0EuyLqIL.js,41jBieyCvYL.js,01wXnKULArL.js,01+pnQJuQ0L.js,31Hw59Tp4HL.js,51D+BomCJLL.js,41GvVRH6GqL.js,31yCF4ftzxL.js,11lw6J7z8iL.js,31COIUU385L.js,01VYGE8lGhL.js_.js	https://www.amazon.de	3rd	before consent
sp-cc-pcl set by m.media-amazon.com/41KYdktXP-L.js	https://www.amazon.de	3rd	before consent
_PATC_CONFIG set by m.media-amazon.com/617fkeYzUfL._RC%7C71KzvI2J1RL.js,01vHH50q3hL.js,21+jePJlqWL.js,01NJsc5gANL.js,31G1DZEighL.js_.js	https://www.amazon.de	3rd	before consent
SWAX:PATC_META_KEY set by m.media-amazon.com/617fkeYzUfL._RC%7C71KzvI2J1RL.js,01vHH50q3hL.js,21+jePJlqWL.js,01NJsc5gANL.js,31G1DZEighL.js_.js	https://www.amazon.de	3rd	before consent
eelsts set by www.amazon.de/s	https://www.amazon.de	3rd	before consent
F68CR6CZX04VAFW85ZHB set by www.amazon.de/s	https://www.amazon.de	3rd	before consent

Third-Party Trackers

24 requests detected from 10 vendors: Amazon, Google LLC, unagi-eu.amazon.com, unagi-na.amazon.com, www.google.com...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	images-na.ssl-images-amazon.com
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Content)	Analytics	script	a6947f00fb52ba5a93ca441bbc924042f.profile.lhr5-p4.cloudfront.net
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
unagi-eu.amazon.com before consent	Analytics	other	unagi-eu.amazon.com
unagi-na.amazon.com before consent	Analytics	other	unagi-na.amazon.com
www.google.com before consent	Analytics	fetch	www.google.com
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	www.amazon.de
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	aax-events-cell02-cf.eu-central.3px.axp.amazon-adsystem.com
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	redirect.prod.experiment.routing.cloudfront.aws.a2z.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing	Marketing	script	bat.bing.net
Pinterest before consent Pinterest tracker domain (source: Disconnect.me, category: Content)	Marketing	script	log.pinterest.com
Pinterest Inc. before consent Pinterest assets	Marketing	script	assets.pinterest.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	m.media-amazon.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net