Skip to main content
cija.ca

cija.ca

https://cija.ca

Last scanned August 24, 2026

A cookie scan of cija.ca conducted on August 24, 2026 found 13 cookies and 23 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 23 third-party requests were detected from 12 vendors.

Cookies

13

Third-party

9

Trackers

23

Vendors

12

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • The published cookie declaration does not include all cookies observed on the site.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

13 cookies detected: 4 necessary, 2 analytics, 0 marketing, 9 third-party

Total

13

Necessary

4

Functional

4

Analytics

2

Marketing

0

Unknown

3

9 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .jewishcanada.org Analytics Google Analytics 1 yr 3rd
_ga_WM98S1KVS0 before consent .jewishcanada.org Analytics Google Analytics 1 yr 3rd
auth0 before consent login.nationbuilder.com Functional Auth0 Expired 3rd
auth0_compat before consent login.nationbuilder.com Functional Auth0 Expired 3rd
did before consent login.nationbuilder.com Functional Auth0 334 d 3rd
did_compat before consent login.nationbuilder.com Functional Auth0 334 d 3rd
cf_clearance .cija.ca Necessary Cloudflare 334 d 1st
XSRF-TOKEN www.jewishcanada.org Necessary CSRF Protection Expired 3rd
_cfuvid .www.cija.ca Necessary Cloudflare Session 1st
_cfuvid .nationbuilder.com Necessary Cloudflare Session 3rd
fedweb_s before consent www.jewishcanada.org Unknown - Expired 3rd
_nbuild_session before consent www.cija.ca Unknown - Session 1st
_nbuild_token before consent www.cija.ca Unknown - Session 1st

Browser storage set by the site

Name Domain Party
homepage_modal set by assets.nationbuilder.com/main-08b9a33625436aefbdfccc262131f896a16e6bbd75d5684eec991b98b2af9fae.js:2:9116 https://www.cija.ca 1st before consent
___test set by cdn.fedwebplatform.org/theme_base.min.js https://www.jewishcanada.org 3rd before consent

Third-Party Trackers

23 requests detected from 12 vendors: Cloudflare Inc., Go Daddy, Google LLC, New Relic, New Relic Inc....

Analytics

7

Marketing

3

Necessary

8

Functional

1

Other

4

Vendor Category Type Domain
Cloudflare Inc. before consent Cloudflare Web Analytics Analytics script static.cloudflareinsights.com
Go Daddy before consent Go Daddy tracker domain (source: Disconnect.me, category: Content) Analytics script seal.godaddy.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-agent.newrelic.com
New Relic Inc. before consent New Relic data beacon Analytics pixel bam.nr-data.net
Twilio before consent Twilio tracker domain (source: Disconnect.me, category: Analytics) Analytics script api.segment.io
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Advertising) Marketing script ep1.adtrafficquality.google
Twilio before consent Twilio tracker domain (source: Disconnect.me, category: Advertising) Marketing script cdn.segment.com
X Corp (Twitter) before consent X/Twitter platform widgets Marketing script platform.twitter.com
Cloudflare Inc. Cloudflare CDNJS Necessary script cdnjs.cloudflare.com
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) Necessary script unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ssl.google-analytics.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on August 24, 2026.

Recent scans

August 24, 2026 13 23

Is cija.ca your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.