Skip to main content
carta.com

carta.com

https://carta.com

Last scanned August 20, 2026

A cookie scan of carta.com performed on August 20, 2026 found 7 cookies and 19 third-party tracking requests. The assessment covered 3 pages across 3 unique page templates. No consent management platform was detected. Our check observed 19 third-party requests from 9 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

7

Third-party

0

Trackers

19

Vendors

9

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

7 cookies detected: 2 necessary, 0 analytics, 1 marketing

Total

7

Necessary

2

Functional

2

Analytics

0

Marketing

1

Unknown

2

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_cq_duid before consent .carta.com Functional CHEQ AI Technologies 91 d 1st
_cq_suid before consent .carta.com Functional CHEQ AI Technologies Session 1st
_mkto_trk before consent .carta.com Marketing OneTrust 1.1 yr lifetime over 13 months 1st
cf_clearance .carta.com Necessary Cloudflare 365 d 1st
__cf_bm .carta.com Necessary Cloudflare Expired 1st
_cq_s before consent .carta.com Unknown - 7 d 1st
_cq_session before consent .carta.com Unknown - 1.1 yr lifetime over 13 months 1st

Browser storage set by the site

Name Domain Party
__storage_test__ set by carta.com/661-37bca64582a9db63.js:853:146 https://carta.com 1st before consent
attribution set by carta.com/661-37bca64582a9db63.js:853:433 https://carta.com 1st before consent
marketoCustomerInfo set by carta.com/661-37bca64582a9db63.js:853:433 https://carta.com 1st before consent
localstorage.test set by www.googletagmanager.com/gtm.js https://carta.com 1st before consent
_cq_check set by ob.healthroundprince.com/42c6d20ba3b16fa05b1958b032657267.js:1:74965 https://carta.com 1st before consent
_cq_tuid set by ob.healthroundprince.com/42c6d20ba3b16fa05b1958b032657267.js:1:132401 https://carta.com 1st before consent
wistia-test-localstorage set by fast.wistia.com/player.js:1:46793 https://carta.com 1st before consent

Third-Party Trackers

19 requests detected from 9 vendors: Adobe, Google LLC, Sentry (Functional Software), Adobe Marketo, Microsoft...

Analytics

3

Marketing

5

Necessary

7

Functional

0

Other

4

Vendor Category Type Domain
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: Analytics) Analytics script 214-btd-103.mktoresp.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Sentry (Functional Software) before consent Sentry browser SDK Analytics script browser.sentry-cdn.com
Adobe Marketo before consent Marketo Munchkin tracking Marketing script munchkin.marketo.net
Google LLC before consent Google Ads Marketing script www.google.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing Marketing script bat.bing.net
Cloudflare Inc. Cloudflare Turnstile / bot protection Necessary script challenges.cloudflare.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script jnn-pa.googleapis.com
Wistia Wistia tracker domain (source: Disconnect.me, category: Content) Necessary script embed-ssl.wistia.com
CHEQ before consent CHEQ tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script ob.healthroundprince.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.googleadservices.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com

Scan history

One completed scan: cookies and trackers from the scan on August 20, 2026.

Recent scans

August 20, 2026 7 19

Is carta.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.