Does copilot.app use cookies?

copilot.app uses 12 cookies, 12 of which are set by third-party domains. No consent management platform was detected.

Does copilot.app use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on copilot.app. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does copilot.app use?

copilot.app loads 23 third-party requests from 11 vendors, including Amplitude, FunctionalSoftware, Google LLC, Microsoft, Twilio.

How many marketing and analytics cookies does copilot.app set?

copilot.app sets 1 marketing and 6 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

copilot.app

Item: copilot.app
Rating: 16
Author: Passiro

https://copilot.app

Last scanned July 24, 2026

A cookie scan of copilot.app completed on July 24, 2026 found 12 cookies and 23 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 23 third-party requests from 11 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

12 cookies detected: 2 necessary, 6 analytics, 1 marketing, 12 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

12 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
ajs_anonymous_id before consent	.assembly.com	Analytics	Segment	308 d	–	–	3rd
amplitude_idundefinedassembly.com before consent	.assembly.com	Analytics	Amplitude	Session	–	–	3rd
amplitude_id_2d5541de9068fe227606ac17310e4754assembly.com before consent	.assembly.com	Analytics	Amplitude	343 d	–	–	3rd
_ga before consent	.assembly.com	Analytics	Google Analytics	343 d	–	–	3rd
_ga_7MLHNJPJ2T before consent	.assembly.com	Analytics	Google Analytics	343 d	–	–	3rd
_gcl_au before consent	.assembly.com	Analytics	Google Analytics	33 d	–	–	3rd
_fbp before consent	.assembly.com	Marketing	Facebook	33 d	–	–	3rd
__stripe_mid	.dashboard.assembly.com	Necessary	Stripe	308 d	✓	–	3rd
__stripe_sid	.dashboard.assembly.com	Necessary	Stripe	Expired	✓	–	3rd
h38v29jajj9dje2bx before consent	dashboard.assembly.com	Unknown	-	Session	–	–	3rd
ph_phc_ISehEwzVuhteVwsR6ebrscFb2PGTk3l4opoqVk6dPnz_posthog before consent	.assembly.com	Unknown	-	308 d	✓	–	3rd
pscd before consent	.assembly.com	Unknown	-	33 d	–	–	3rd

Third-Party Trackers

23 requests detected from 11 vendors: Amplitude, FunctionalSoftware, Google LLC, Microsoft, Twilio...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Amplitude before consent Amplitude tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	cdn.amplitude.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o475810.ingest.sentry.io
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o4504254375133184.ingest.sentry.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Twilio before consent Twilio tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	api.segment.io
CustomerIO before consent CustomerIO tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	assets.customer.io
G2 before consent G2 tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	tracking.g2crowd.com
G2 before consent G2 tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	tracking-api.g2.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
PartnerStack before consent PartnerStack tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	partnerlinks.io
PartnerStack before consent PartnerStack tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	grsm.io
Twilio before consent Twilio tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.segment.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
Stripe Inc. Stripe fraud detection	Necessary	script	m.stripe.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network