Does costabox.it use cookies?

costabox.it uses 4 cookies. The site uses Cookiebot as its consent management platform.

Does costabox.it use a cookie banner (CMP)?

Yes. costabox.it uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does costabox.it use?

costabox.it loads 18 third-party requests from 9 vendors, including ContentSquare, Google LLC, ActiveCampaign, Meta Platforms, Inc., CookieYes.

How many marketing and analytics cookies does costabox.it set?

costabox.it sets 1 marketing and 2 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

costabox.it

Item: costabox.it
Rating: 38
Author: Passiro

https://costabox.it

Last scanned August 28, 2026

A cookie scan of costabox.it performed on August 28, 2026 found 4 cookies and 18 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 18 third-party requests were detected from 9 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

4 cookies detected: 0 necessary, 2 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_hjSessionUser_3493573 before consent	.costabox.it	Analytics	Hotjar	319 d	✓	–	1st
_hjSession_3493573 before consent	.costabox.it	Analytics	Hotjar	Expired	✓	–	1st
cookieyes-consent	.costabox.it	Functional	CookieYes	319 d	✓	–	1st
_fbp before consent	.costabox.it	Marketing	Facebook	44 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
_hjLocalStorageTest set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:217285	https://costabox.it	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:217510	https://costabox.it	1st	before consent
wpEmojiSettingsSupports set by costabox.it/wp-emoji-loader.min.js:3:327	https://costabox.it	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242	https://costabox.it	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242	https://costabox.it	1st	before consent
elementor set by costabox.it/frontend.min.js	https://costabox.it	1st	before consent
elementor set by costabox.it/frontend.min.js	https://costabox.it	1st	before consent
popup-9533-impressions-count set by costabox.it/elements-handlers.min.js	https://costabox.it	1st	before consent
__test__localStorage__ set by www.paypal.com/js	https://costabox.it	1st	before consent
__paypal_storage__ set by www.paypal.com/js	https://costabox.it	1st	before consent

Third-Party Trackers

18 requests detected from 9 vendors: ContentSquare, Google LLC, ActiveCampaign, Meta Platforms, Inc., CookieYes...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
ActiveCampaign before consent ActiveCampaign tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	diffuser-cdn.app-us1.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
CookieYes CookieYes consent management	Necessary	script	cdn-cookieyes.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	maps.gstatic.com
Paypal Paypal tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.paypal.com
PayPal Holdings PayPal static resources	Necessary	script	www.paypalobjects.com
PayPal Holdings PayPal SDK	Necessary	script	www.paypal.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com