Skip to main content
carrotspot.com

carrotspot.com

https://carrotspot.com

Last scanned August 20, 2026

A cookie scan of carrotspot.com performed on August 20, 2026 found 4 cookies and 9 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 9 third-party requests were detected from 5 vendors.

Cookies

4

Third-party

0

Trackers

9

Vendors

5

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • The published cookie declaration does not include all cookies observed on the site.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

4 cookies detected: 1 necessary, 0 analytics, 0 marketing

Total

4

Necessary

1

Functional

0

Analytics

0

Marketing

0

Unknown

3

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
XSRF-TOKEN .carrotspot.com Necessary CSRF Protection Expired 1st
carrotspot-_zldp before consent .carrotspot.com Unknown - 1.1 yr lifetime over 13 months 1st
carrotspot-_zldt before consent .carrotspot.com Unknown - 1 d 1st
statamic_session before consent .carrotspot.com Unknown - Expired 1st

Browser storage set by the site

Name Domain Party
test set by salesiq.zoho.com/widget:1:2237 https://carrotspot.com 1st before consent
test set by salesiq.zoho.com/widget:1:2237 https://carrotspot.com 1st before consent
quota_test set by salesiq.zoho.com/widget:1:79232 https://carrotspot.com 1st before consent
quota_test set by salesiq.zoho.com/widget:1:79377 https://carrotspot.com 1st before consent
siqlsdb set by salesiq.zoho.com/widget:1:2736 https://carrotspot.com 1st before consent
utsdb set by salesiq.zoho.com/widget:1:105409 https://carrotspot.com 1st before consent
utsdb set by salesiq.zoho.com/widget:1:80055 https://carrotspot.com 1st before consent

Third-Party Trackers

9 requests detected from 5 vendors: Google LLC, Zoho, Cybot A/S (Cookiebot), UNPKG, UserCentrics

Analytics

1

Marketing

1

Necessary

4

Functional

0

Other

3

Vendor Category Type Domain
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Zoho before consent Zoho tracker domain (source: Disconnect.me, category: EmailAggressive) Marketing script otsp.maillist-manage.com
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) Necessary script unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on August 20, 2026.

Recent scans

August 20, 2026 4 9

Is carrotspot.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.