Does crossroadmusic.ca use cookies?

crossroadmusic.ca uses 7 cookies. The site uses Cookiebot as its consent management platform.

Does crossroadmusic.ca use a cookie banner (CMP)?

Yes. crossroadmusic.ca uses Cookiebot as its consent management platform. IAB TCF v2.3 consent signals were detected. Google Consent Mode v2 was not detected.

Which third-party trackers does crossroadmusic.ca use?

crossroadmusic.ca loads 9 third-party requests from 7 vendors, including FunctionalSoftware, Meta Platforms, Inc., AfterPay, Cloudflare, Cybot A/S (Cookiebot).

How many marketing and analytics cookies does crossroadmusic.ca set?

crossroadmusic.ca sets 0 marketing and 0 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

crossroadmusic.ca

Item: crossroadmusic.ca
Rating: 55
Author: Passiro

https://crossroadmusic.ca

Last scanned August 29, 2026

A cookie scan of crossroadmusic.ca performed on August 29, 2026 found 7 cookies and 9 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Cookiebot as its consent management platform with IAB TCF v2.3; Google Consent Mode v2 was not observed. 9 third-party requests were detected from 7 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

7 cookies detected: 2 necessary, 0 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
XSRF-TOKEN	www.crossroadmusic.ca	Necessary	CSRF Protection	Expired	✓	–	1st
__cf_bm	.crossroadmusic.ca	Necessary	Cloudflare	Expired	✓	✓	1st
customer_session before consent	www.crossroadmusic.ca	Unknown	-	3 d	–	✓	1st
customer_xsrf before consent	www.crossroadmusic.ca	Unknown	-	3 d	–	–	1st
publishedsite-xsrf before consent	www.crossroadmusic.ca	Unknown	-	Expired	✓	–	1st
PublishedSiteSession before consent	www.crossroadmusic.ca	Unknown	-	Expired	✓	✓	1st
websitespring-xsrf before consent	www.crossroadmusic.ca	Unknown	-	Expired	✓	–	1st

Browser storage set by the site

Name	Domain	Party
site-visitor-uuid set by cdn3.editmysite.com/site.2d0f5e84b8a52d2685ae.js:373:116564	https://www.crossroadmusic.ca	1st	before consent
fulfillment-selection set by cdn3.editmysite.com/site.2d0f5e84b8a52d2685ae.js:373:116564	https://www.crossroadmusic.ca	1st	before consent
viewedProducts set by cdn3.editmysite.com/site.2d0f5e84b8a52d2685ae.js:373:116564	https://www.crossroadmusic.ca	1st	before consent

Third-Party Trackers

9 requests detected from 7 vendors: FunctionalSoftware, Meta Platforms, Inc., AfterPay, Cloudflare, Cybot A/S (Cookiebot)...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	sentry.io
Meta Platforms, Inc. before consent Facebook social plugins	Marketing	iframe	www.facebook.com
AfterPay AfterPay tracker domain (source: Disconnect.me, category: Content)	Necessary	script	js.afterpay.com
Cloudflare Cloudflare tracker domain (source: Disconnect.me, category: Content)	Necessary	script	customer-ugajlzvkncemhxjh.cloudflarestream.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Meta Platforms, Inc. Meta tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.xx.fbcdn.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com