Skip to main content
castleroyle.com

castleroyle.com

https://castleroyle.com

Last scanned August 21, 2026

A cookie scan of castleroyle.com completed on August 21, 2026 found 6 cookies and 17 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform with IAB TCF v2.3; Google Consent Mode v2 was not observed. 17 third-party requests were detected from 7 vendors.

Cookies

6

Third-party

4

Trackers

17

Vendors

7

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

6 cookies detected: 4 necessary, 0 analytics, 0 marketing, 4 third-party

Total

6

Necessary

4

Functional

0

Analytics

0

Marketing

0

Unknown

2

4 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
PHPSESSID www.castleroyle.com Necessary PHP Session 1st
XSRF-TOKEN www.theclubcompany.com Necessary CSRF Protection Expired 3rd
__stripe_mid .www.theclubcompany.com Necessary Stripe 365 d 3rd
__stripe_sid .www.theclubcompany.com Necessary Stripe Expired 3rd
source_data before consent www.castleroyle.com Unknown - 14 d 1st
the-club-company-session before consent www.theclubcompany.com Unknown - Expired 3rd

Browser storage set by the site

Name Domain Party
__sak set by maps.googleapis.com/main.js:370:1218 https://www.castleroyle.com 1st before consent
_grecaptcha set by www.gstatic.com/recaptcha__en.js:185:449 https://www.castleroyle.com 1st before consent

Third-Party Trackers

17 requests detected from 7 vendors: Google LLC, Stripe Inc., Adobe Fonts, Amazon, Cybot A/S (Cookiebot)...

Analytics

2

Marketing

0

Necessary

5

Functional

3

Other

7

Vendor Category Type Domain
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Stripe Inc. before consent Stripe fraud detection Analytics script m.stripe.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Google LLC before consent Google reCAPTCHA bot protection Functional script www.google.com
Google LLC before consent Google Maps API Functional script maps.googleapis.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d1z8xsvdu0pky2.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Stripe Inc. Stripe payment processing Necessary script js.stripe.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel adservice.google.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script m.stripe.network
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com
UserCentrics before consent UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consent.cookiebot.eu

Scan history

One completed scan: cookies and trackers from the scan on August 21, 2026.

Recent scans

August 21, 2026 6 17

Is castleroyle.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.