Skip to main content
challenges.fr

challenges.fr

https://challenges.fr

Last scanned August 23, 2026

A cookie scan of challenges.fr completed on August 23, 2026 found 5 cookies and 10 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Didomi as its consent management platform with IAB TCF v2.3 and Google Consent Mode v2. 10 third-party requests were detected from 7 vendors.

Cookies

5

Third-party

0

Trackers

10

Vendors

7

Consent banner

Didomi

Scans

1

What this setup is missing

  • Google Consent Mode v2 is present but does not default to denied for all storage types.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

5 cookies detected: 0 necessary, 1 analytics, 0 marketing

Total

5

Necessary

0

Functional

4

Analytics

1

Marketing

0

Unknown

0

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
atuserid before consent .challenges.fr Analytics AT Internet 358 d ✓ – 1st
didomi_token .challenges.fr Functional Didomi 145 d ✓ – 1st
_pcid before consent .challenges.fr Functional Piano 357 d ✓ – 1st
_pctx before consent .challenges.fr Functional Piano 357 d ✓ – 1st
_pprv before consent .challenges.fr Functional Piano 357 d ✓ – 1st

Browser storage set by the site

Name Domain Party
nuxt-color-mode set by www.challenges.fr/Csp9KKCX.js:23:1174 https://www.challenges.fr 1st before consent
didomi_token set by www.challenges.fr/sdk.34eff82b7f66070f6f88273f13a74f986b5c60dc.js:2:81555 https://www.challenges.fr 1st before consent
__test_session_storage__ set by sdk.mrf.io/marfeel-sdk.js https://www.challenges.fr 1st before consent
__test_local_storage__ set by sdk.mrf.io/marfeel-sdk.js https://www.challenges.fr 1st before consent
___nrbic set by sdk.mrf.io/marfeel-sdk.js https://www.challenges.fr 1st before consent
___nrbi set by sdk.mrf.io/marfeel-sdk.js https://www.challenges.fr 1st before consent
marfeel-sdk-store set by sdk.mrf.io/marfeel-sdk.js https://www.challenges.fr 1st before consent
test set by disco.headliner.link/widget.js:2:147460 https://www.challenges.fr 1st before consent
disco_session_6071022316402938 set by disco.headliner.link/widget.js:2:148217 https://www.challenges.fr 1st before consent
__tcigc__ set by cdn.taboola.com/loader.js:1:727409 https://www.challenges.fr 1st before consent
__tcigc__ set by cdn.taboola.com/loader.js:1:727538 https://www.challenges.fr 1st before consent
tbl-sesn-ref set by cdn.taboola.com/loader.js:1:727538 https://www.challenges.fr 1st before consent

Third-Party Trackers

10 requests detected from 7 vendors: api.headliner.link, cczfrbk.pa-cd.com, FunctionalSoftware, Google LLC, Piano...

Analytics

5

Marketing

2

Necessary

2

Functional

0

Other

1

Vendor Category Type Domain
api.headliner.link before consent Analytics xhr api.headliner.link
cczfrbk.pa-cd.com before consent Analytics fetch cczfrbk.pa-cd.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics) Analytics script o4508398023606272.ingest.de.sentry.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Piano before consent Piano tracker domain (source: Disconnect.me, category: Analytics) Analytics script tag.aticdn.net
Marfeel before consent Marfeel tracker domain (source: Disconnect.me, category: Advertising) Marketing script sdk.mrf.io
Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising) Marketing script cdn.taboola.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com

Scan history

One completed scan: cookies and trackers from the scan on August 23, 2026.

Recent scans

August 23, 2026 5 10

Is challenges.fr your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.