Does colourbox.es use cookies?

colourbox.es uses 12 cookies. No consent management platform was detected.

Does colourbox.es use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on colourbox.es. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does colourbox.es use?

colourbox.es loads 67 third-party requests from 9 vendors, including Google LLC, MaxMind, PostHog, Amazon, Cybot A/S (Cookiebot).

How many marketing and analytics cookies does colourbox.es set?

colourbox.es sets 0 marketing and 0 analytics cookies, alongside 4 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

colourbox.es

Item: colourbox.es
Rating: 51
Author: Passiro

https://colourbox.es

Last scanned July 21, 2026

A cookie scan of colourbox.es performed on July 21, 2026 found 12 cookies and 67 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 67 third-party requests from 9 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

12 cookies detected: 4 necessary, 0 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
language before consent	www.colourbox.es	Functional	Language	Session	–	–	1st
PHPSESSID	www.colourbox.es	Necessary	PHP	26 d	✓	✓	1st
XSRF-TOKEN	www.colourbox.es	Necessary	CSRF Protection	Expired	✓	–	1st
__stripe_mid	.www.colourbox.es	Necessary	Stripe	361 d	✓	–	1st
__stripe_sid	.www.colourbox.es	Necessary	Stripe	Expired	✓	–	1st
aws-waf-token before consent	.www.colourbox.es	Unknown	-	Expired	✓	–	1st
AWSALBTG before consent	www.colourbox.es	Unknown	-	3 d	–	–	1st
AWSALBTGCORS before consent	www.colourbox.es	Unknown	-	3 d	✓	–	1st
colourbox_session before consent	www.colourbox.es	Unknown	-	Expired	✓	✓	1st
encryptedsession before consent	.colourbox.es	Unknown	-	Session	✓	✓	1st
__CBX_CMS_SEARCH_RESULT_THUMBNAIL_VIEW_SIZE__ before consent	www.colourbox.es	Unknown	-	26 d	–	–	1st
__CBX_UI_FONT_LOADER_ACTIVE__ before consent	www.colourbox.es	Unknown	-	Expired	–	–	1st

Third-Party Trackers

67 requests detected from 9 vendors: Google LLC, MaxMind, PostHog, Amazon, Cybot A/S (Cookiebot)...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	analytics.google.com
MaxMind before consent MaxMind tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	geoip-js.com
PostHog before consent PostHog tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	eu-assets.i.posthog.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1bpwp39v5w9wa.cloudfront.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d2b6mif4mxqac1.cloudfront.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d3acja3ybn8ixf.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Sentry (Functional Software) Sentry error tracking	Necessary	script	js.sentry-cdn.com
Sentry (Functional Software) Sentry browser SDK	Necessary	script	browser.sentry-cdn.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
Stripe Inc. Stripe fraud detection	Necessary	script	m.stripe.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com