Does cashflowdiary.com use cookies?

cashflowdiary.com uses 17 cookies. The site uses CookieYes as its consent management platform.

Does cashflowdiary.com use a cookie banner (CMP)?

Yes. cashflowdiary.com uses CookieYes as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does cashflowdiary.com use?

cashflowdiary.com loads 26 third-party requests from 16 vendors, including analytics-ipv6.tiktokw.us, cdn.usefathom.com, Cloudflare Inc., ContentSquare, FunctionalSoftware.

How many marketing and analytics cookies does cashflowdiary.com set?

cashflowdiary.com sets 4 marketing and 7 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

cashflowdiary.com

Item: cashflowdiary.com
Rating: 8
Author: Passiro

https://cashflowdiary.com

Last scanned August 21, 2026

A cookie scan of cashflowdiary.com completed on August 21, 2026 found 17 cookies and 26 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 26 third-party requests were detected from 16 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

CookieYes

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.
No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

17 cookies detected: 1 necessary, 7 analytics, 4 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_clck before consent	.cashflowdiary.com	Analytics	Microsoft Clarity	365 d	–	–	1st
_clsk before consent	.cashflowdiary.com	Analytics	Microsoft Clarity	1 d	–	–	1st
_ga before consent	.cashflowdiary.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_473D4WMD2H before consent	.cashflowdiary.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.cashflowdiary.com	Analytics	Google Analytics	90 d	–	–	1st
_hjSessionUser_184482 before consent	.cashflowdiary.com	Analytics	Hotjar	365 d	✓	–	1st
_hjSession_184482 before consent	.cashflowdiary.com	Analytics	Hotjar	Expired	✓	–	1st
AWSALBTG before consent	newsletter.cashflowdiary.com	Functional	Amazon Web Services	7 d	–	–	1st
AWSALBTGCORS before consent	newsletter.cashflowdiary.com	Functional	Amazon Web Services	7 d	✓	–	1st
cookieyes-consent	cashflowdiary.com	Functional	CookieYes	365 d	✓	–	1st
ttcsid before consent	.cashflowdiary.com	Marketing	TikTok	90 d	–	–	1st
ttcsid_CNBVVRJC77UBV4168140 before consent	.cashflowdiary.com	Marketing	TikTok	90 d	–	–	1st
_ttp before consent	.cashflowdiary.com	Marketing	TikTok	90 d	–	–	1st
_tt_enable_cookie before consent	.cashflowdiary.com	Marketing	TikTok	90 d	–	–	1st
__cf_bm	.newsletter.cashflowdiary.com	Necessary	Cloudflare	Expired	✓	✓	1st
cookie_storage_key before consent	.newsletter.cashflowdiary.com	Unknown	-	90 d	✓	–	1st
disable_experiments before consent	newsletter.cashflowdiary.com	Unknown	-	Session	–	–	1st

Browser storage set by the site

Name	Domain	Party
sentryReplaySession set by cashflowdiary.com/page.Dgk0Xwln.js:22:68556	https://cashflowdiary.com	1st	before consent
cfd_landing_page set by cashflowdiary.com/:56:767	https://cashflowdiary.com	1st	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://cashflowdiary.com	1st	before consent
_cltk set by scripts.clarity.ms/clarity.js:2:57586	https://cashflowdiary.com	1st	before consent
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208	https://cashflowdiary.com	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433	https://cashflowdiary.com	1st	before consent
mc_test_local_storage set by mccdn.me/widget.js:1:16466	https://cashflowdiary.com	1st	before consent
mc_pixel_session_data set by mccdn.me/widget.js:1:16093	https://cashflowdiary.com	1st	before consent
tt_sessionId set by analytics.tiktok.com/main.MThmMDBkY2E0MQ.js:1:61351	https://cashflowdiary.com	1st	before consent
tt_appInfo set by analytics.tiktok.com/main.MThmMDBkY2E0MQ.js:1:61351	https://cashflowdiary.com	1st	before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MThmMDBkY2E0MQ.js:1:64152	https://cashflowdiary.com	1st	before consent
hjViewportId set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80297	https://cashflowdiary.com	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:80433	https://cashflowdiary.com	1st	before consent
__storejs__test__ set by substackcdn.com/93060.d3b3bbfb.js:1:7429	https://newsletter.cashflowdiary.com	1st	before consent
__storejs__test__ set by substackcdn.com/93060.d3b3bbfb.js:1:8039	https://newsletter.cashflowdiary.com	1st	before consent
substack_ref_url set by substackcdn.com/93060.d3b3bbfb.js:1:7429	https://newsletter.cashflowdiary.com	1st	before consent
substack_ref set by substackcdn.com/93060.d3b3bbfb.js:1:7429	https://newsletter.cashflowdiary.com	1st	before consent
substack_ref_url set by substackcdn.com/93060.d3b3bbfb.js:1:8039	https://newsletter.cashflowdiary.com	1st	before consent
substack_ref set by substackcdn.com/93060.d3b3bbfb.js:1:8039	https://newsletter.cashflowdiary.com	1st	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://newsletter.cashflowdiary.com	1st	before consent

Third-Party Trackers

26 requests detected from 16 vendors: analytics-ipv6.tiktokw.us, cdn.usefathom.com, Cloudflare Inc., ContentSquare, FunctionalSoftware...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
analytics-ipv6.tiktokw.us before consent	Analytics	other	analytics-ipv6.tiktokw.us
cdn.usefathom.com before consent	Analytics	script	cdn.usefathom.com
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	content.hotjar.io
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o4511212618842112.ingest.us.sentry.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
mccdn.me before consent	Analytics	script	mccdn.me
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Sentry (Functional Software) before consent Sentry error tracking	Analytics	script	js.sentry-cdn.com
tracker.metricool.com before consent	Analytics	script	tracker.metricool.com
www.google.com before consent	Analytics	fetch	www.google.com
Google LLC before consent Google Ads	Marketing	script	www.google.com
Microsoft Corporation before consent Bing Ads tracking	Marketing	pixel	c.bing.com
Substack before consent Substack tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	substack.com
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
Cloudflare Inc. Cloudflare Turnstile / bot protection	Necessary	script	challenges.cloudflare.com
Cloudinary Cloudinary tracker domain (source: Disconnect.me, category: Content)	Necessary	script	res.cloudinary.com
CookieYes CookieYes consent management	Necessary	script	cdn-cookieyes.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	stats.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net