Does citymuseum.org use cookies?

citymuseum.org uses 14 cookies. No consent management platform was detected.

Does citymuseum.org use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on citymuseum.org. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does citymuseum.org use?

citymuseum.org loads 292 third-party requests from 31 vendors, including analytics-ipv6.tiktokw.us, events.matterport.com, Google LLC, p.typekit.net, www.google.com.

How many marketing and analytics cookies does citymuseum.org set?

citymuseum.org sets 5 marketing and 3 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

citymuseum.org

Item: citymuseum.org
Rating: 8
Author: Passiro

https://citymuseum.org

Last scanned July 24, 2026

A cookie scan of citymuseum.org conducted on July 24, 2026 found 14 cookies and 292 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 292 third-party requests from 31 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

292

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

14 cookies detected: 1 necessary, 3 analytics, 5 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.citymuseum.org	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_H7Q1PCF0SK before consent	.citymuseum.org	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.citymuseum.org	Analytics	Google Analytics	90 d	–	–	1st
_fbp before consent	.citymuseum.org	Marketing	Facebook	90 d	–	–	1st
_scid before consent	.citymuseum.org	Marketing	Snapchat	1.1 yr	–	–	1st
_scid_r before consent	.citymuseum.org	Marketing	Snapchat	1.1 yr	–	–	1st
_ttp before consent	.citymuseum.org	Marketing	TikTok	90 d	–	–	1st
_tt_enable_cookie before consent	.citymuseum.org	Marketing	TikTok	90 d	–	–	1st
__cf_bm	.citymuseum.org	Necessary	Cloudflare	Expired	✓	✓	1st
ttcsid before consent	.citymuseum.org	Unknown	-	90 d	–	–	1st
ttcsid_CGVGUAJC77UCFTJECJDG before consent	.citymuseum.org	Unknown	-	90 d	–	–	1st
ttcsid_CJMC38BC77UEOD73ISCG before consent	.citymuseum.org	Unknown	-	90 d	–	–	1st
ttcsid_CN2038JC77U706ONV8E0 before consent	.citymuseum.org	Unknown	-	90 d	–	–	1st
__qca before consent	.citymuseum.org	Unknown	-	1.1 yr	–	–	1st

Browser storage set by the site

Name	Domain	Party
uw-uid set by cdn.userway.org/widget_app_base_1783421028734.js:4:23198	https://citymuseum.org	1st	before consent
wpEmojiSettingsSupports set by citymuseum.org/wp-emoji-loader.min.js:3:240	https://citymuseum.org	1st	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://citymuseum.org	1st	before consent
u_sclid set by sc-static.net/scevent.min.js:2:11964	https://citymuseum.org	1st	before consent
u_scsid set by sc-static.net/scevent.min.js:2:11964	https://citymuseum.org	1st	before consent
u_sclid_r set by sc-static.net/scevent.min.js:2:11964	https://citymuseum.org	1st	before consent
u_scsid_r set by sc-static.net/scevent.min.js:2:11964	https://citymuseum.org	1st	before consent
uw-tunings set by cdn.userway.org/widget_app_base_1783421028734.js:3:13331	https://citymuseum.org	1st	before consent
uw-tunings-checksum set by cdn.userway.org/widget_app_base_1783421028734.js:3:13368	https://citymuseum.org	1st	before consent
uw-icon-locales set by cdn.userway.org/widget_app_base_1783421028734.js:2:26553	https://citymuseum.org	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242	https://citymuseum.org	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242	https://citymuseum.org	1st	before consent
tt_sessionId set by analytics.tiktok.com/main.MTkwNzNhYjk5MQ.js:1:61319	https://citymuseum.org	1st	before consent
tt_appInfo set by analytics.tiktok.com/main.MTkwNzNhYjk5MQ.js:1:61319	https://citymuseum.org	1st	before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTkwNzNhYjk5MQ.js:1:64120	https://citymuseum.org	1st	before consent
__qca set by secure.quantserve.com/quant.js:2:13681	https://citymuseum.org	1st	before consent
_qcses_p-vMQuYWFTVvsQd set by secure.quantserve.com/quant.js:2:3757	https://citymuseum.org	1st	before consent

Third-Party Trackers

292 requests detected from 31 vendors: analytics-ipv6.tiktokw.us, events.matterport.com, Google LLC, p.typekit.net, www.google.com...

Analytics

Marketing

138

Necessary

Functional

Other

Vendor	Category	Type	Domain
analytics-ipv6.tiktokw.us before consent	Analytics	other	analytics-ipv6.tiktokw.us
events.matterport.com before consent	Analytics	xhr	events.matterport.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
p.typekit.net before consent	Analytics	stylesheet	p.typekit.net
www.google.com before consent	Analytics	fetch	www.google.com
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
AdmixerEU before consent AdmixerEU tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	inv-nets.admixer.net
Cadent before consent Cadent tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	e1.emxdgt.com
Comcast before consent Comcast tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	user-sync.fwmrm.net
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	x.bidswitch.net
Equativ before consent Equativ tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	rtb-csync.smartadserver.com
Equativ before consent Equativ tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	match.sharethrough.com
IndexExchange before consent IndexExchange tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	dsum-sec.casalemedia.com
Internet Brands before consent Internet Brands tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	bh.contextweb.com
LiveRamp before consent LiveRamp tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	idsync.rlcdn.com
Magnite before consent Magnite tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	pixel.rubiconproject.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	ib.adnxs.com
Nexxen before consent Nexxen tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	partners.tremorhub.com
Nexxen before consent Nexxen tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.1rx.io
PubMatic before consent PubMatic tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	image2.pubmatic.com
Quantcast before consent Quantcast tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	secure.quantserve.com
Quantcast before consent Quantcast tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	rules.quantcount.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sc-static.net
Snap before consent Snap tracker domain (source: Disconnect.me, category: Social)	Marketing	script	tr6.snapchat.com
Snap Inc. before consent Snapchat conversion tracking	Marketing	pixel	tr.snapchat.com
Sovrn before consent Sovrn tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	ce.lijit.com
Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.taboola.com
Teads before consent Teads tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.outbrain.com
Teads before consent Teads tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.teads.tv
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
TripleLift before consent TripleLift tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	eb2.3lift.com
Viant before consent Viant tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js.ipredictive.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.googleadservices.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	adservice.google.com
Infolinks before consent Infolinks tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	router.infolinks.com
OpenX before consent OpenX tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	us-u.openx.net
The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	match.adsrvr.org