Does costar.com use cookies?

costar.com uses 5 cookies. The site uses Osano as its consent management platform.

Does costar.com use a cookie banner (CMP)?

Yes. costar.com uses Osano as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does costar.com use?

costar.com loads 16 third-party requests from 6 vendors, including Akamai, Google LLC, ZoomInfo, Brightcove, UNPKG.

How many marketing and analytics cookies does costar.com set?

costar.com sets 0 marketing and 0 analytics cookies, alongside 3 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

costar.com

Item: costar.com
Rating: 67
Author: Passiro

https://costar.com

Last scanned August 28, 2026

A cookie scan of costar.com performed on August 28, 2026 found 5 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Osano as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 16 third-party requests were detected from 6 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Osano

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✗

HSTS

✗

Content Security Policy

✗

Cookies

5 cookies detected: 3 necessary, 0 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
RT before consent	.www.costar.com	Functional	Tripadvisor	7 d	–	–	1st
ak_bmsc	.costar.com	Necessary	Akamai	Expired	✓	✓	1st
bm_mi	.costar.com	Necessary	Akamai	Expired	✓	–	1st
bm_sv	.costar.com	Necessary	Akamai	Expired	✓	–	1st
cs_newsContext before consent	.costar.com	Unknown	-	31 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
_boomr_clss set by s.go-mpulse.net/BK6PL-RXW93-V54RD-W2RP2-7BKNB:10:4807	https://www.costar.com	1st	before consent
__akfp_storage_test__ set by www.costar.com/34451826:2:5907	https://www.costar.com	1st	before consent
__akfp_storage_test__ set by www.costar.com/34451826:2:5907	https://www.costar.com	1st	before consent
_1787938845474 set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
osano_consentmanager_tattles set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
_boomr_akamaiXhrRetry set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
ziPendingTelemetry set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
ziScriptSession set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
_1787938851857 set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
_1787938851059 set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent
_1787938851696 set by cmp.osano.com/osano.js	https://www.costar.com	1st	before consent

Third-Party Trackers

16 requests detected from 6 vendors: Akamai, Google LLC, ZoomInfo, Brightcove, UNPKG...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	s.go-mpulse.net
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	02179915.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	684dd32a.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	02179916.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	0217991d.akstat.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
ZoomInfo before consent ZoomInfo tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	js.zi-scripts.com
ZoomInfo before consent ZoomInfo tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	ws.zoominfo.com
Brightcove Brightcove tracker domain (source: Disconnect.me, category: Content)	Necessary	script	players.brightcove.net
Brightcove Brightcove tracker domain (source: Disconnect.me, category: Content)	Necessary	script	player.interactivity.brightcove.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	securepubads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Osano Osano tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	cmp.osano.com