Skip to main content
castleson.it

castleson.it

https://castleson.it

Last scanned August 21, 2026

A cookie scan of castleson.it performed on August 21, 2026 found 10 cookies and 26 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 26 third-party requests from 14 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

10

Third-party

0

Trackers

26

Vendors

14

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

10 cookies detected: 0 necessary, 1 analytics, 0 marketing

Total

10

Necessary

0

Functional

4

Analytics

1

Marketing

0

Unknown

5

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_gcl_au before consent .castleson.it Analytics Google Analytics 42 d – – 1st
cart before consent castleson.it Functional E-commerce 43 d – – 1st
cart_currency before consent castleson.it Functional E-commerce Expired – – 1st
localization before consent castleson.it Functional Shopify 317 d – – 1st
_shopify_essential before consent castleson.it Functional Shopify 317 d ✓ ✓ 1st
ig-location before consent castleson.it Unknown - Expired ✓ – 1st
kiwi-sizing-token before consent castleson.it Unknown - Expired ✓ – 1st
_ks_countryCodeFromIP before consent castleson.it Unknown - Expired ✓ – 1st
_ks_scriptVersionChecked before consent castleson.it Unknown - Expired ✓ – 1st
_ks_userCountryUnit before consent castleson.it Unknown - Expired ✓ – 1st

Browser storage set by the site

Name Domain Party
ig-id set by cdn.intelligems.io/6ab3e307c1df.js:2:85447 https://castleson.it 1st before consent
ig-vars set by cdn.intelligems.io/6ab3e307c1df.js:2:105732 https://castleson.it 1st before consent
TriplePixel set by castleson.it/:20:334 https://castleson.it 1st before consent
TriplePixelU set by castleson.it/:20:428 https://castleson.it 1st before consent
__tw__ set by castleson.it/:3:222 https://castleson.it 1st before consent
consentHeader set by castleson.it/storefront-banner.js:1:5809 https://castleson.it 1st before consent
_gcl_ls set by www.googletagmanager.com/js https://castleson.it 1st before consent
test set by castleson.it/theme.js https://castleson.it 1st before consent
test set by castleson.it/theme.js https://castleson.it 1st before consent
_shs_state set by castleson.it/shopify-perf-kit-3.8.4.min.js:1:40480 https://castleson.it 1st before consent
shopify:webmcp_adapter_loaded set by castleson.it/:291:256 https://castleson.it 1st before consent
stickycart-discount-code set by cdn.shopify.com/stickycart-v2.js:562:86709 https://castleson.it 1st before consent
__storage_test__ set by static.klaviyo.com/default~in_app_forms~signup_forms.a03c775416f04.js https://castleson.it 1st before consent
klaviyoOnsite set by static.klaviyo.com/default~in_app_forms~signup_forms.a03c775416f04.js https://castleson.it 1st before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/5684.bd1b9054fc8a1.js https://castleson.it 1st before consent
zp_pages_a7c0f16a-7bc2-41ef-b7d7-d0dce64729ad set by www.zyncport.com/widget https://castleson.it 1st before consent
zyncport_session_a7c0f16a-7bc2-41ef-b7d7-d0dce64729ad set by www.zyncport.com/widget https://castleson.it 1st before consent
__test__localStorage__ set by www.paypal.com/js https://castleson.it 1st before consent
__paypal-httpswwwpaypalcomsdkjscomponentsbuttonscommitfalsecurrencyEURlocaleitITclientidAexZEtAxk09Ncgj6FSWFFyGKbxxAZLTyJ2DPdJWl1YUlecinmc5AfIaRF2qYjWlusWahlzz6SVkY5CimerchantidTR628PMG59YCJintentauthorize_storage__ set by www.paypal.com/js https://castleson.it 1st before consent
theme-recent set by castleson.it/theme.js https://castleson.it 1st before consent
kl-uid set by static.klaviyo.com/reviews.576a096cd7048.js https://castleson.it 1st before consent
kl-bloom-local set by static.klaviyo.com/reviews.576a096cd7048.js https://castleson.it 1st before consent
kl-bloom-session set by static.klaviyo.com/reviews.576a096cd7048.js https://castleson.it 1st before consent
_ks_shopSettings:thegarrison-it.myshopify.com set by app.kiwisizing.com/SizingPlugin.prod.js https://castleson.it 1st before consent

Third-Party Trackers

26 requests detected from 14 vendors: api.intelligems.io, app.kiwisizing.com, Google LLC, Microsoft, Paypal...

Analytics

10

Marketing

2

Necessary

11

Functional

1

Other

2

Vendor Category Type Domain
api.intelligems.io before consent Analytics other api.intelligems.io
app.kiwisizing.com before consent Analytics fetch app.kiwisizing.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
Paypal before consent Paypal tracker domain (source: Disconnect.me, category: Content) Analytics script www.paypal.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script error-analytics-sessions-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics Analytics pixel monorail-edge.shopifysvc.com
triplewhale-pixel.web.app before consent Analytics xhr triplewhale-pixel.web.app
www.google.com before consent Analytics fetch www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Klaviyo Inc. before consent Klaviyo email marketing Marketing script static.klaviyo.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Gorgias Gorgias tracker domain (source: Disconnect.me, category: Content) Necessary script config.gorgias.chat
PayPal Holdings PayPal static resources Necessary script www.paypalobjects.com
PayPal Holdings PayPal SDK Necessary script www.paypal.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content) Necessary script widget.trustpilot.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on August 21, 2026.

Recent scans

August 21, 2026 10 26

Is castleson.it your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.