Skip to main content
casauto.com

casauto.com

https://casauto.com

Last scanned August 21, 2026

A cookie scan of casauto.com performed on August 21, 2026 found 36 cookies and 36 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 36 third-party requests were detected from 12 vendors.

Cookies

36

Third-party

0

Trackers

36

Vendors

12

Consent banner

CookieYes

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

36 cookies detected: 2 necessary, 18 analytics, 4 marketing

Total

36

Necessary

2

Functional

2

Analytics

18

Marketing

4

Unknown

10

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
hubspotutk before consent .casauto.com Analytics HubSpot 180 d 1st
sbjs_current before consent .casauto.com Analytics WooCommerce Session 1st
sbjs_current_add before consent .casauto.com Analytics WooCommerce Session 1st
sbjs_first before consent .casauto.com Analytics WooCommerce Session 1st
sbjs_first_add before consent .casauto.com Analytics WooCommerce Session 1st
sbjs_migrations before consent .casauto.com Analytics WooCommerce Session 1st
sbjs_session before consent .casauto.com Analytics WooCommerce Expired 1st
sbjs_udata before consent .casauto.com Analytics WooCommerce Session 1st
tk_qs before consent .casauto.com Analytics WordPress Expired 1st
tk_r3d before consent .casauto.com Analytics WordPress 3 d 1st
_ga before consent .casauto.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_ga_YEG4WWHKLG before consent .casauto.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gcl_au before consent .casauto.com Analytics Google Analytics 90 d 1st
_hjSessionUser_1161042 before consent .casauto.com Analytics Hotjar 365 d 1st
_hjSession_1161042 before consent .casauto.com Analytics Hotjar Expired 1st
__hssc before consent .casauto.com Analytics HubSpot Expired 1st
__hssrc before consent .casauto.com Analytics HubSpot Session 1st
__hstc before consent .casauto.com Analytics HubSpot 180 d 1st
cookieyes-consent casauto.com Functional CookieYes 365 d 1st
tk_ai before consent .casauto.com Functional WooCommerce / Jetpack 1.1 yr lifetime over 13 months 1st
messagesUtk before consent .casauto.com Marketing Hubspot 180 d 1st
tk_lr before consent .casauto.com Marketing WordPress 365 d 1st
tk_or before consent .casauto.com Marketing WordPress 1.1 yr lifetime over 13 months 1st
_fbp before consent .casauto.com Marketing Facebook 90 d 1st
PHPSESSID casauto.com Necessary PHP Session 1st
__cf_bm .casauto.com Necessary Cloudflare Expired 1st
br_lgv_stat before consent .casauto.com Unknown - Session 1st
cust_utm_cmp before consent .casauto.com Unknown - 30 d 1st
cust_utm_med before consent .casauto.com Unknown - 30 d 1st
cust_utm_src before consent .casauto.com Unknown - 30 d 1st
mailchimp_landing_site before consent casauto.com Unknown - 28 d 1st
_uc_current_session before consent .casauto.com Unknown - Expired 1st
_uc_initial_landing_page before consent .casauto.com Unknown - 30 d 1st
_uc_last_referrer before consent .casauto.com Unknown - 30 d 1st
_uc_referrer before consent .casauto.com Unknown - 30 d 1st
_uc_visits before consent .casauto.com Unknown - 30 d 1st

Browser storage set by the site

Name Domain Party
wc set by c0.wp.com/cart-fragments.min.js:1:211 https://casauto.com 1st before consent
wc set by c0.wp.com/cart-fragments.min.js:1:291 https://casauto.com 1st before consent
wpEmojiSettingsSupports set by casauto.com/wp-emoji-loader.min.js:3:327 https://casauto.com 1st before consent
localstorage.test set by www.googletagmanager.com/gtm.js https://casauto.com 1st before consent
_gcl_ls set by www.googletagmanager.com/js https://casauto.com 1st before consent
wc_fragments_47ad182b1e9f615603908cf5848ba1f4 set by c0.wp.com/cart-fragments.min.js:1:829 https://casauto.com 1st before consent
wc_cart_hash_47ad182b1e9f615603908cf5848ba1f4 set by c0.wp.com/cart-fragments.min.js:1:473 https://casauto.com 1st before consent
wc_cart_hash_47ad182b1e9f615603908cf5848ba1f4 set by c0.wp.com/cart-fragments.min.js:1:501 https://casauto.com 1st before consent
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208 https://casauto.com 1st before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433 https://casauto.com 1st before consent
ElfsightLibraryStorageTest set by universe-static.elfsightcdn.com/googleReviews.js:24:180248 https://casauto.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://casauto.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://casauto.com 1st before consent
hjViewportId set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80297 https://casauto.com 1st before consent
hjActiveViewportIds set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80433 https://casauto.com 1st before consent

Third-Party Trackers

36 requests detected from 12 vendors: ContentSquare, Google LLC, HubSpot, www.google.com, Font Awesome...

Analytics

9

Marketing

13

Necessary

10

Functional

1

Other

3

Vendor Category Type Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script content.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script surveystats.hotjar.io
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-eu1.hs-analytics.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content) Analytics script forms-eu1.hsforms.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content) Analytics script perf-eu1.hsforms.com
www.google.com before consent Analytics fetch www.google.com
Font Awesome before consent Font Awesome CDN: icon font and CSS delivery Functional script use.fontawesome.com
Accessibe before consent Accessibe tracker domain (source: Disconnect.me, category: Advertising) Marketing script acsbapp.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script api-eu1.hubapi.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-scripts.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hscollectedforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hsadspixel.net
HubSpot Inc. before consent HubSpot marketing & CRM Marketing script js-eu1.hubspot.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) Marketing script chimpstatic.com
LinkedIn Corporation before consent LinkedIn Insight Tag Marketing script snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking Marketing pixel px.ads.linkedin.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Automattic Automattic tracker domain (source: Disconnect.me, category: Content) Necessary script c0.wp.com
ElfSight ElfSight tracker domain (source: Disconnect.me, category: Content) Necessary script apps.elfsight.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script jnn-pa.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content) Necessary script js-eu1.usemessages.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content) Necessary script static.hsappstatic.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on August 21, 2026.

Recent scans

August 21, 2026 36 36

Is casauto.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.