Does dufrei.com use cookies?

dufrei.com uses 9 cookies, 5 of which are set by third-party domains. No consent management platform was detected.

Does dufrei.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on dufrei.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does dufrei.com use?

dufrei.com loads 11 third-party requests from 8 vendors, including Cloudflare Inc., FunctionalSoftware, HubSpot Inc., www.facebook.com, X (Twitter).

How many marketing and analytics cookies does dufrei.com set?

dufrei.com sets 3 marketing and 0 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

dufrei.com

Item: dufrei.com
Rating: 21
Author: Passiro

https://dufrei.com

Last scanned September 6, 2026

A cookie scan of dufrei.com performed on September 6, 2026 found 9 cookies and 11 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 11 third-party requests from 8 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

9 cookies detected: 2 necessary, 0 analytics, 3 marketing, 5 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

5 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
tz before consent	www.dufrei.com	Functional	GitHub	Session	–	–	1st
frontend_lang before consent	www.dufrei.com	Marketing	Facebook	365 d	–	–	1st
gt before consent	.x.com	Marketing	X	Expired	✓	–	3rd
guest_id before consent	.x.com	Marketing	X	1.1 yr lifetime over 13 months	✓	–	3rd
cf_clearance	.dufrei.com	Necessary	Cloudflare	365 d	✓	✓	1st
__cf_bm	.x.com	Necessary	Cloudflare	Expired	✓	✓	3rd
session_id before consent	www.dufrei.com	Unknown	-	7 d	–	✓	1st
__cuid before consent	.x.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	3rd
__cuid before consent	x.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	3rd

Browser storage set by the site

Name	Domain	Party
__localStorage__ set by www.dufrei.com/web.assets_frontend_lazy.min.js:3151:215	https://www.dufrei.com	1st	before consent
EXPIRABLE_STORAGE_im_livechat_history set by www.dufrei.com/web.assets_frontend_lazy.min.js:17416:22	https://www.dufrei.com	1st	before consent
social_push_notifications.notification_request_config set by www.dufrei.com/web.assets_frontend_lazy.min.js:18063:299	https://www.dufrei.com	1st	before consent
__cuid set by abs.twimg.com/castle.umd-DD_JXeKL.js:1:49638	https://x.com	3rd	before consent
__ctst_1788693862430_zsybf7o1ynm set by abs.twimg.com/castle.umd-DD_JXeKL.js:6:34398	https://x.com	3rd	before consent

Third-Party Trackers

11 requests detected from 8 vendors: Cloudflare Inc., FunctionalSoftware, HubSpot Inc., www.facebook.com, X (Twitter)...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o30969.ingest.us.sentry.io
HubSpot Inc. before consent HubSpot forms	Functional	script	js.hsforms.net
www.facebook.com before consent	Marketing	other	www.facebook.com
X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Social)	Marketing	script	x.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	forms.hsforms.com
Meta Platforms, Inc. Meta tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.xx.fbcdn.net
X (Twitter) Twitter tracker domain (source: Disconnect.me, category: Content)	Necessary	script	pbs.twimg.com