Skip to main content
caveat-toolkit.co.uk

caveat-toolkit.co.uk

https://caveat-toolkit.co.uk

Last scanned August 21, 2026

A cookie scan of caveat-toolkit.co.uk performed on August 21, 2026 found 10 cookies and 33 third-party tracking requests. The assessment covered 9 pages across 9 unique page templates. The site employs Cookiebot as its consent management platform with IAB TCF v2.3; Google Consent Mode v2 was not observed. 33 third-party requests were detected from 17 vendors.

Cookies

10

Third-party

0

Trackers

33

Vendors

17

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

10 cookies detected: 0 necessary, 0 analytics, 4 marketing

Total

10

Necessary

0

Functional

0

Analytics

0

Marketing

4

Unknown

6

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_fbp before consent .caveat-toolkit.co.uk Marketing Facebook 90 d 1st
_rdt_uuid before consent .caveat-toolkit.co.uk Marketing Reddit 90 d 1st
_scid before consent .caveat-toolkit.co.uk Marketing Snapchat 1.1 yr 1st
_scid_r before consent .caveat-toolkit.co.uk Marketing Snapchat 1.1 yr 1st
sa-user-id before consent www.caveat-toolkit.co.uk Unknown - 365 d 1st
sa-user-id-v2 before consent www.caveat-toolkit.co.uk Unknown - 365 d 1st
sa-user-id-v3 before consent www.caveat-toolkit.co.uk Unknown - 365 d 1st
sa-user-id-v4 before consent www.caveat-toolkit.co.uk Unknown - 365 d 1st
_msci before consent www.caveat-toolkit.co.uk Unknown - 365 d 1st
__obref before consent .caveat-toolkit.co.uk Unknown - 365 d 1st

Browser storage set by the site

Name Domain Party
u_sclid set by sc-static.net/scevent.min.js:2:12021 https://www.caveat-toolkit.co.uk 1st before consent
u_scsid set by sc-static.net/scevent.min.js:2:12021 https://www.caveat-toolkit.co.uk 1st before consent
u_sclid_r set by sc-static.net/scevent.min.js:2:12021 https://www.caveat-toolkit.co.uk 1st before consent
u_scsid_r set by sc-static.net/scevent.min.js:2:12021 https://www.caveat-toolkit.co.uk 1st before consent
cisession_dd set by cxppgbr1rdrect01sa02cdn-endpoint.azureedge.net/WebTracking.bundle.js:2:87206 https://www.caveat-toolkit.co.uk 1st before consent
cisession_previous set by cxppgbr1rdrect01sa02cdn-endpoint.azureedge.net/WebTracking.bundle.js:2:87206 https://www.caveat-toolkit.co.uk 1st before consent
sa-user-id set by tags.srv.stackadapt.com/events.js:31:15071 https://www.caveat-toolkit.co.uk 1st before consent
sa-user-id-v2 set by tags.srv.stackadapt.com/events.js:31:15124 https://www.caveat-toolkit.co.uk 1st before consent
sa-user-id-v3 set by tags.srv.stackadapt.com/events.js:31:15182 https://www.caveat-toolkit.co.uk 1st before consent
sa-user-id-v4 set by tags.srv.stackadapt.com/events.js:31:15266 https://www.caveat-toolkit.co.uk 1st before consent
_grecaptcha set by www.gstatic.com/recaptcha__en.js:185:449 https://www.caveat-toolkit.co.uk 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://www.caveat-toolkit.co.uk 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://www.caveat-toolkit.co.uk 1st before consent
tt_sessionId set by analytics.tiktok.com/main.MTgxMDg1OGQ1MQ.js:1:61351 https://www.caveat-toolkit.co.uk 1st before consent
tt_appInfo set by analytics.tiktok.com/main.MTgxMDg1OGQ1MQ.js:1:61351 https://www.caveat-toolkit.co.uk 1st before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTgxMDg1OGQ1MQ.js:1:64152 https://www.caveat-toolkit.co.uk 1st before consent
oaiq_cs:Lw8orBU8dQcK4X8JrVADdH set by bzrcdn.openai.com/oaiq.min.js:1:39180 https://www.caveat-toolkit.co.uk 1st before consent
tt_pixel_is_enrich_ipv6_triggered_by_enrich_am set by analytics.tiktok.com/main.MTgxMDg1OGQ1MQ.js:1:330679 https://www.caveat-toolkit.co.uk 1st before consent

Third-Party Trackers

33 requests detected from 17 vendors: analytics-ipv6.tiktokw.us, analytics.ahrefs.com, bzr.openai.com, bzrcdn.openai.com, Google LLC...

Analytics

6

Marketing

14

Necessary

7

Functional

1

Other

5

Vendor Category Type Domain
analytics-ipv6.tiktokw.us before consent Analytics other analytics-ipv6.tiktokw.us
analytics.ahrefs.com before consent Analytics script analytics.ahrefs.com
bzr.openai.com before consent Analytics fetch bzr.openai.com
bzrcdn.openai.com before consent Analytics script bzrcdn.openai.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
Google LLC before consent Google reCAPTCHA bot protection Functional script www.google.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
LinkedIn Corporation before consent LinkedIn Ads tracking Marketing pixel px.ads.linkedin.com
LinkedIn Corporation before consent LinkedIn Insight Tag Marketing script snap.licdn.com
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing Marketing script bat.bing.net
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social) Marketing pixel alb.reddit.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising) Marketing script www.redditstatic.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Social) Marketing script tr6.snapchat.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Advertising) Marketing script sc-static.net
Snap Inc. before consent Snapchat conversion tracking Marketing pixel tr.snapchat.com
StackAdapt before consent StackAdapt tracker domain (source: Disconnect.me, category: Advertising) Marketing script tags.srv.stackadapt.com
TikTok before consent TikTok analytics pixel Marketing script analytics.tiktok.com
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script jnn-pa.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) Necessary script unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel adservice.google.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on August 21, 2026.

Recent scans

August 21, 2026 10 33

Is caveat-toolkit.co.uk your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.