Skip to main content
dreamfit.es

dreamfit.es

https://dreamfit.es

Last scanned September 5, 2026

A cookie scan of dreamfit.es performed on September 5, 2026 found 5 cookies and 26 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 26 third-party requests were detected from 13 vendors.

Cookies

5

Third-party

0

Trackers

26

Vendors

13

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

5 cookies detected: 2 necessary, 0 analytics, 0 marketing

Total

5

Necessary

2

Functional

0

Analytics

0

Marketing

0

Unknown

3

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
PHPSESSID alta.dreamfit.es Necessary PHP Session – – 1st
XSRF-TOKEN www.dreamfit.es Necessary CSRF Protection Expired – – 1st
dreamfit_session before consent www.dreamfit.es Unknown - Expired – ✓ 1st
__spdt before consent www.dreamfit.es Unknown - 340 d – – 1st
__spdt before consent alta.dreamfit.es Unknown - 340 d – – 1st

Browser storage set by the site

Name Domain Party
__spdt set by pixel.byspotify.com/ping.min.js:1:7536 https://www.dreamfit.es 1st before consent
spdt-1788632497.15-337 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
taboolaStorageDetection set by cdn.taboola.com/tfa.js:3:19128 https://www.dreamfit.es 1st before consent
_taboolaStorageDetection set by cdn.taboola.com/tfa.js:3:40283 https://www.dreamfit.es 1st before consent
_taboolaStorageDetection set by cdn.taboola.com/tfa.js:3:40283 https://www.dreamfit.es 1st before consent
eng_mt set by cdn.taboola.com/tfa.js:3:40082 https://www.dreamfit.es 1st before consent
__spdt set by pixel.byspotify.com/ping.min.js:1:7536 https://alta.dreamfit.es 1st before consent
spdt-1788632512.445-760 set by pixel.byspotify.com/ping.min.js:1:7861 https://alta.dreamfit.es 1st before consent
spdt-1788632512.261-376 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632512.227-104 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632514.772-450 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632515.963-350 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632516.012-372 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632518.305-220 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632518.645-351 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632518.891-758 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent
spdt-1788632521.328-112 set by pixel.byspotify.com/ping.min.js:1:7861 https://www.dreamfit.es 1st before consent

Third-Party Trackers

26 requests detected from 13 vendors: Cloudflare Inc., Google LLC, HubSpot, Microsoft, pixel.byspotify.com...

Analytics

6

Marketing

9

Necessary

6

Functional

1

Other

4

Vendor Category Type Domain
Cloudflare Inc. before consent Cloudflare Web Analytics Analytics script static.cloudflareinsights.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-eu1.hs-analytics.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
pixel.byspotify.com before consent Analytics script pixel.byspotify.com
tracker.metricool.com before consent Analytics pixel tracker.metricool.com
Google LLC before consent Google reCAPTCHA bot protection Functional script www.google.com
Acuity before consent Acuity tracker domain (source: Disconnect.me, category: Advertising) Marketing script e.acuityplatform.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-scripts.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hsadspixel.net
HubSpot Inc. before consent HubSpot marketing & CRM Marketing script track-eu1.hubspot.com
SiriusXM before consent SiriusXM tracker domain (source: Disconnect.me, category: Advertising) Marketing script kriteria-760-adswizz.attribution.adswizz.com
Spotify before consent Spotify tracker domain (source: Disconnect.me, category: Advertising) Marketing script pixels.spotify.com
Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising) Marketing script cdn.taboola.com
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script jnn-pa.googleapis.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on September 5, 2026.

Recent scans

September 5, 2026 5 26

Is dreamfit.es your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.