Does cityroasters.eu use cookies?

cityroasters.eu uses 10 cookies, 1 of which are set by third-party domains. No consent management platform was detected.

Does cityroasters.eu use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on cityroasters.eu. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does cityroasters.eu use?

cityroasters.eu loads 11 third-party requests from 6 vendors, including ContentSquare, Shopify, Shopify Inc., Privy, Cloudflare Inc..

How many marketing and analytics cookies does cityroasters.eu set?

cityroasters.eu sets 0 marketing and 3 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

cityroasters.eu

Item: cityroasters.eu
Rating: 26
Author: Passiro

https://cityroasters.eu

Last scanned August 24, 2026

A cookie scan of cityroasters.eu conducted on August 24, 2026 found 10 cookies and 11 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 11 third-party requests from 6 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

10 cookies detected: 0 necessary, 3 analytics, 0 marketing, 1 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

1 third-party cookie detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_hjSessionUser_2589424 before consent	.cityroasters.eu	Analytics	Hotjar	339 d	✓	–	1st
_hjSession_2589424 before consent	.cityroasters.eu	Analytics	Hotjar	Expired	✓	–	1st
_ssw_cart_data before consent	cityroasters.eu	Analytics	Marfeel	Expired	✓	–	1st
cart_currency before consent	cityroasters.eu	Functional	E-commerce	Expired	–	–	1st
localization before consent	cityroasters.eu	Functional	Shopify	339 d	–	–	1st
_shopify_essential before consent	cityroasters.eu	Functional	Shopify	339 d	✓	✓	1st
_shopify_essential before consent	shopify.com	Functional	Shopify	339 d	✓	✓	3rd
hash_key before consent	cityroasters.eu	Unknown	-	4 d	✓	–	1st
hesid before consent	cityroasters.eu	Unknown	-	Session	✓	–	1st
_privy_52D2553A9D1CDCA68FB95208 before consent	.cityroasters.eu	Unknown	-	339 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
consentHeader set by cityroasters.eu/trekkie.storefront.c3de4351cec0b617fdf79b803eb104cc6c0d8097.min.js:1:92329	https://cityroasters.eu	1st	before consent
_shs_state set by cityroasters.eu/shopify-perf-kit-3.8.4.min.js:1:40480	https://cityroasters.eu	1st	before consent
shopify:webmcp_adapter_loaded set by cityroasters.eu/:168:256	https://cityroasters.eu	1st	before consent
_hjLocalStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217208	https://cityroasters.eu	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.75bf3488a101739acfe9.js:2:217433	https://cityroasters.eu	1st	before consent
Privy set by shopify.privy.com/widget.js	https://cityroasters.eu	1st	before consent
debug_login set by static.socialshopwave.com/core-3b8e1a0d70.critical.js:12:3640	https://cityroasters.eu	1st	before consent
_ssw_cart_data set by static.socialshopwave.com/core-3b8e1a0d70.critical.js:12:4835	https://cityroasters.eu	1st	before consent
sswLoadsCntr set by static.socialshopwave.com/core-4485bb0ccb.library.js:7:27851	https://cityroasters.eu	1st	before consent
igIcEvent set by static.socialshopwave.com/core-4485bb0ccb.library.js:7:27890	https://cityroasters.eu	1st	before consent
gapi.sessionStorageTest set by apis.google.com/cb=gapi.loaded_0	https://cityroasters.eu	1st	before consent

Third-Party Trackers

11 requests detected from 6 vendors: ContentSquare, Shopify, Shopify Inc., Privy, Cloudflare Inc....

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	otlp-http-production.shopifysvc.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	error-analytics-sessions-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
Privy before consent Privy tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	shopify.privy.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	shop.app
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
Shopify Inc. Shopify platform	Necessary	script	shopify.com