Does ccfoodbank.org use cookies?

ccfoodbank.org uses 16 cookies. The site uses Complianz as its consent management platform.

Does ccfoodbank.org use a cookie banner (CMP)?

Yes. ccfoodbank.org uses Complianz as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does ccfoodbank.org use?

ccfoodbank.org loads 35 third-party requests from 14 vendors, including cdn.rum-ingress-coralogix.com, Cloudflare Inc., Google LLC, ingress.us2.rum-ingress-coralogix.com, Paypal.

How many marketing and analytics cookies does ccfoodbank.org set?

ccfoodbank.org sets 1 marketing and 5 analytics cookies, alongside 5 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

ccfoodbank.org

Item: ccfoodbank.org
Rating: 16
Author: Passiro

https://ccfoodbank.org

Last scanned August 21, 2026

A cookie scan of ccfoodbank.org conducted on August 21, 2026 found 16 cookies and 35 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Complianz as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 35 third-party requests were detected from 14 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Complianz

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

16 cookies detected: 5 necessary, 5 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.ccfoodbank.org	Analytics	Google Analytics	362 d	–	–	1st
_gat_gtag_UA_194576694_1 before consent	.ccfoodbank.org	Analytics	Google Analytics	Expired	–	–	1st
_ga_GWFTS4PR7V before consent	.ccfoodbank.org	Analytics	Google Analytics	362 d	–	–	1st
_gcl_au before consent	.ccfoodbank.org	Analytics	Google Analytics	52 d	–	–	1st
_gid before consent	.ccfoodbank.org	Analytics	Google Analytics	Expired	–	–	1st
cmplz_id	ccfoodbank.org	Functional	Complianz	327 d	✓	–	1st
cmplz_saved_categories	ccfoodbank.org	Functional	Complianz	327 d	✓	–	1st
cmplz_saved_services	ccfoodbank.org	Functional	Complianz	327 d	✓	–	1st
connect.sid before consent	give.ccfoodbank.org	Functional	Zendesk	Expired	✓	✓	1st
sid before consent	give.ccfoodbank.org	Marketing	Google	Session	✓	✓	1st
PHPSESSID	volunteer.ccfoodbank.org	Necessary	PHP	Session	✓	✓	1st
XSRF-TOKEN	give.ccfoodbank.org	Necessary	CSRF Protection	Expired	✓	–	1st
__cf_bm	.give.ccfoodbank.org	Necessary	Cloudflare	Expired	✓	✓	1st
__stripe_mid	.give.ccfoodbank.org	Necessary	Stripe	327 d	✓	–	1st
__stripe_sid	.give.ccfoodbank.org	Necessary	Stripe	Expired	✓	–	1st
CSRF-TOKEN before consent	give.ccfoodbank.org	Unknown	-	Session	✓	–	1st

Browser storage set by the site

Name	Domain	Party
wpEmojiSettingsSupports set by ccfoodbank.org/wp-emoji-loader.min.js:3:327	https://ccfoodbank.org	1st	before consent
_gcl_ls set by www.googletagmanager.com/js	https://ccfoodbank.org	1st	before consent
rum_session set by cdn.rum-ingress-coralogix.com/coralogix-browser-sdk.js:10:38370	https://give.ccfoodbank.org	1st	before consent
mparticle set by jssdkcdns.mparticle.com/mparticle.js	https://give.ccfoodbank.org	1st	before consent
mprtcl-v4_735D2C10-id-cache set by jssdkcdns.mparticle.com/mparticle.js	https://give.ccfoodbank.org	1st	before consent
mprtcl-v4_735D2C10 set by jssdkcdns.mparticle.com/mparticle.js	https://give.ccfoodbank.org	1st	before consent
mprtcl-tos-735D2C10 set by jssdkcdns.mparticle.com/mparticle.js	https://give.ccfoodbank.org	1st	before consent
mprtcl-v4_735D2C10-events set by jssdkcdns.mparticle.com/mparticle.js	https://give.ccfoodbank.org	1st	before consent
mprtcl-v4_735D2C10-batches set by jssdkcdns.mparticle.com/mparticle.js	https://give.ccfoodbank.org	1st	before consent

Third-Party Trackers

35 requests detected from 14 vendors: cdn.rum-ingress-coralogix.com, Cloudflare Inc., Google LLC, ingress.us2.rum-ingress-coralogix.com, Paypal...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
cdn.rum-ingress-coralogix.com before consent	Analytics	script	cdn.rum-ingress-coralogix.com
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
ingress.us2.rum-ingress-coralogix.com before consent	Analytics	fetch	ingress.us2.rum-ingress-coralogix.com
Paypal before consent Paypal tracker domain (source: Disconnect.me, category: Content)	Analytics	script	www.paypal.com
play.google.com before consent	Analytics	fetch	play.google.com
Rokt before consent Rokt tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	jssdkcdns.mparticle.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: Content)	Analytics	script	r.stripe.com
Stripe Inc. before consent Stripe fraud detection	Analytics	script	m.stripe.com
www.google.com before consent	Analytics	fetch	www.google.com
Google LLC before consent Google Translate widget	Functional	script	translate.google.com
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Accessibe before consent Accessibe tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	acsbapp.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s3.amazonaws.com
Cloudflare Inc. Cloudflare Turnstile / bot protection	Necessary	script	challenges.cloudflare.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	translate.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	maps.gstatic.com
PayPal Holdings PayPal static resources	Necessary	script	www.paypalobjects.com
PayPal Holdings PayPal SDK	Necessary	script	www.paypal.com
Stripe Stripe tracker domain (source: Disconnect.me, category: Content)	Necessary	script	q.stripe.com
Stripe Stripe tracker domain (source: Disconnect.me, category: Content)	Necessary	script	merchant-ui-api.stripe.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.googleadservices.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	stats.g.doubleclick.net
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network