Does cola.org use cookies?

cola.org uses 16 cookies. No consent management platform was detected.

Does cola.org use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on cola.org. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does cola.org use?

cola.org loads 18 third-party requests from 5 vendors, including Automattic, HubSpot, HubSpot Inc., Google LLC, Meta Platforms, Inc..

How many marketing and analytics cookies does cola.org set?

cola.org sets 3 marketing and 12 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

cola.org

Item: cola.org
Rating: 18
Author: Passiro

https://cola.org

Last scanned August 26, 2026

A cookie scan of cola.org performed on August 26, 2026 found 16 cookies and 18 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 18 third-party requests from 5 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

16 cookies detected: 0 necessary, 12 analytics, 3 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
hubspotutk before consent	.cola.org	Analytics	HubSpot	146 d	–	–	1st
sbjs_current before consent	.cola.org	Analytics	WooCommerce	Session	–	–	1st
sbjs_current_add before consent	.cola.org	Analytics	WooCommerce	Session	–	–	1st
sbjs_first before consent	.cola.org	Analytics	WooCommerce	Session	–	–	1st
sbjs_first_add before consent	.cola.org	Analytics	WooCommerce	Session	–	–	1st
sbjs_migrations before consent	.cola.org	Analytics	WooCommerce	Session	–	–	1st
sbjs_session before consent	.cola.org	Analytics	WooCommerce	Expired	–	–	1st
sbjs_udata before consent	.cola.org	Analytics	WooCommerce	Session	–	–	1st
tk_r3d before consent	.cola.org	Analytics	WordPress	Expired	–	–	1st
__hssc before consent	.cola.org	Analytics	HubSpot	Expired	–	–	1st
__hssrc before consent	.cola.org	Analytics	HubSpot	Session	–	–	1st
__hstc before consent	.cola.org	Analytics	HubSpot	146 d	–	–	1st
tk_ai before consent	cola.org	Functional	WooCommerce / Jetpack	331 d	✓	–	1st
messagesUtk before consent	.cola.org	Marketing	Hubspot	146 d	✓	–	1st
tk_lr before consent	.cola.org	Marketing	WordPress	331 d	–	–	1st
tk_or before consent	.cola.org	Marketing	WordPress	1 yr	–	–	1st

Browser storage set by the site

Name	Domain	Party
wpEmojiSettingsSupports set by cola.org/wp-emoji-loader.min.js:3:327	https://cola.org	1st	before consent

Third-Party Trackers

18 requests detected from 5 vendors: Automattic, HubSpot, HubSpot Inc., Google LLC, Meta Platforms, Inc.

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Automattic before consent Automattic tracker domain (source: Disconnect.me, category: Content)	Analytics	script	stats.wp.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content)	Analytics	script	forms.hsforms.com
HubSpot Inc. before consent HubSpot analytics	Analytics	script	js.hs-analytics.net
Google LLC before consent Google Translate widget	Functional	script	translate.google.com
HubSpot Inc. before consent HubSpot forms	Functional	script	js.hsforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	forms.hscollectedforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js.hs-banner.com
HubSpot Inc. before consent HubSpot tracking script	Marketing	script	js.hs-scripts.com
HubSpot Inc. before consent HubSpot collected forms	Marketing	script	js.hscollectedforms.net
HubSpot Inc. before consent HubSpot marketing & CRM	Marketing	script	js.hubspot.com
Meta Platforms, Inc. before consent Instagram embed	Marketing	iframe	www.instagram.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	translate.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.hsappstatic.net
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	js.usemessages.com
Meta Platforms, Inc. Meta tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.cdninstagram.com