Skip to main content
cbmm.com

cbmm.com

https://cbmm.com

Last scanned August 21, 2026

A cookie scan of cbmm.com completed on August 21, 2026 found 16 cookies and 19 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 19 third-party requests were detected from 11 vendors.

Cookies

16

Third-party

0

Trackers

19

Vendors

11

Consent banner

OneTrust

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

16 cookies detected: 2 necessary, 5 analytics, 1 marketing

Total

16

Necessary

2

Functional

2

Analytics

5

Marketing

1

Unknown

6

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .cbmm.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_ga_4LKDT447XY before consent .cbmm.com Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gcl_au before consent .cbmm.com Analytics Google Analytics 90 d 1st
_hjSessionUser_3730375 before consent .cbmm.com Analytics Hotjar 365 d 1st
_hjSession_3730375 before consent .cbmm.com Analytics Hotjar Expired 1st
ARRAffinity before consent .cbmm.com Functional Azure / Microsoft Session 1st
ARRAffinitySameSite before consent .cbmm.com Functional Azure / Microsoft Session 1st
_fbp before consent .cbmm.com Marketing Facebook 90 d 1st
OptanonConsent .cbmm.com Necessary OneTrust 365 d 1st
__cf_bm .niobium.cbmm.com Necessary Cloudflare Expired 1st
cbmm-niobium#lang before consent cbmm.com Unknown - Session 1st
OnetrustChecked before consent cbmm.com Unknown - 365 d 1st
shell#lang before consent cbmm.com Unknown - Session 1st
sxa_site before consent cbmm.com Unknown - Session 1st
ubvs before consent niobium.cbmm.com Unknown - 180 d 1st
ubvt before consent .cbmm.com Unknown - 3 d 1st

Browser storage set by the site

Name Domain Party
_gcl_ls set by www.googletagmanager.com/js https://cbmm.com 1st before consent
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208 https://cbmm.com 1st before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433 https://cbmm.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242 https://cbmm.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242 https://cbmm.com 1st before consent

Third-Party Trackers

19 requests detected from 11 vendors: ContentSquare, Google LLC, Microsoft, www.google.com, LinkedIn Corporation...

Analytics

5

Marketing

5

Necessary

7

Functional

0

Other

2

Vendor Category Type Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script static.hotjar.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
www.google.com before consent Analytics fetch www.google.com
LinkedIn Corporation before consent LinkedIn Insight Tag Marketing script snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking Marketing pixel px.ads.linkedin.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Unbounce before consent Unbounce tracker domain (source: Disconnect.me, category: Advertising) Marketing script builder-assets.unbounce.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d9hhrg4mnvzow.cloudfront.net
Cloudflare Inc. Cloudflare CDNJS Necessary script cdnjs.cloudflare.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
OneTrust LLC OneTrust consent management Necessary script cdn.cookielaw.org
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script geolocation.onetrust.com

Scan history

One completed scan: cookies and trackers from the scan on August 21, 2026.

Recent scans

August 21, 2026 16 19

Is cbmm.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.