Does eoba.ro use cookies?

eoba.ro uses 20 cookies, 12 of which are set by third-party domains. The site uses CookieYes as its consent management platform.

Does eoba.ro use a cookie banner (CMP)?

Yes. eoba.ro uses CookieYes as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does eoba.ro use?

eoba.ro loads 9 third-party requests from 5 vendors, including Google LLC, Pendo.io Inc., Automattic, CookieYes, TrustARC.

How many marketing and analytics cookies does eoba.ro set?

eoba.ro sets 0 marketing and 7 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

eoba.ro

Item: eoba.ro
Rating: 36
Author: Passiro

https://eoba.ro

Last scanned September 11, 2026

A cookie scan of eoba.ro completed on September 11, 2026 found 20 cookies and 9 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs CookieYes as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 9 third-party requests were detected from 5 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

CookieYes

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

20 cookies detected: 0 necessary, 7 analytics, 0 marketing, 12 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

12 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
sbjs_current before consent	.eoba.ro	Analytics	WooCommerce	Session	–	–	1st
sbjs_current_add before consent	.eoba.ro	Analytics	WooCommerce	Session	–	–	1st
sbjs_first before consent	.eoba.ro	Analytics	WooCommerce	Session	–	–	1st
sbjs_first_add before consent	.eoba.ro	Analytics	WooCommerce	Session	–	–	1st
sbjs_migrations before consent	.eoba.ro	Analytics	WooCommerce	Session	–	–	1st
sbjs_session before consent	.eoba.ro	Analytics	WooCommerce	Expired	–	–	1st
sbjs_udata before consent	.eoba.ro	Analytics	WooCommerce	Session	–	–	1st
cfid before consent	shop.doterra.com	Functional	Adobe ColdFusion	1.1 yr lifetime over 13 months	✓	✓	3rd
cftoken before consent	shop.doterra.com	Functional	Adobe ColdFusion	1.1 yr lifetime over 13 months	✓	✓	3rd
cookieyes-consent	eoba.ro	Functional	CookieYes	361 d	✓	–	1st
incap_ses_1610_3138773 before consent	.doterra.com	Functional	Imperva	Session	✓	–	3rd
LANGUAGE before consent	shop.doterra.com	Functional	Language	Session	✓	✓	3rd
nlbi_3138773 before consent	.doterra.com	Functional	Imperva	Session	✓	✓	3rd
nlbi_3138773_2147483392 before consent	.doterra.com	Functional	Imperva	Session	✓	✓	3rd
visid_incap_3138773 before consent	.doterra.com	Functional	Imperva	361 d	✓	✓	3rd
notice_behavior before consent	.shop.doterra.com	Unknown	-	Session	✓	–	3rd
reese84 before consent	.doterra.com	Unknown	-	26 d	–	–	3rd
SHOPPINGCART_SHIPTOCOUNTRY before consent	shop.doterra.com	Unknown	-	Session	✓	✓	3rd
SKIN before consent	shop.doterra.com	Unknown	-	Session	✓	✓	3rd
TAsessionID before consent	.shop.doterra.com	Unknown	-	Expired	✓	–	3rd

Browser storage set by the site

Name	Domain	Party
modernizr set by eoba.ro/c319a68597646018821f59ab0f2bd5cc.min.js	https://eoba.ro	1st	before consent
modernizr set by eoba.ro/c319a68597646018821f59ab0f2bd5cc.min.js	https://eoba.ro	1st	before consent
__sak set by maps.googleapis.com/js	https://shop.doterra.com	3rd	before consent
__storage_test__ set by cdn.pendo.io/pendo.js:10:59610	https://shop.doterra.com	3rd	before consent
pendo_tabId set by cdn.pendo.io/pendo.js:10:57131	https://shop.doterra.com	3rd	before consent
pendo_cd set by cdn.pendo.io/pendo.js:10:57131	https://shop.doterra.com	3rd	before consent
_pendo_utm.1841041752 set by cdn.pendo.io/pendo.js:10:61366	https://shop.doterra.com	3rd	before consent
_pendo_visitorId.1841041752 set by cdn.pendo.io/pendo.js:10:61366	https://shop.doterra.com	3rd	before consent
_pendo_meta.1841041752 set by cdn.pendo.io/pendo.js:10:61366	https://shop.doterra.com	3rd	before consent
_pendo_sessionId.1841041752 set by cdn.pendo.io/pendo.js:10:61366	https://shop.doterra.com	3rd	before consent
previous_page_loads set by cdn.pendo.io/pendo.js:10:57131	https://shop.doterra.com	3rd	before consent
reese84 set by shop.doterra.com/e-and-fall-wearese-How-with-be-hane-the-no-my-hi:2:67446	https://shop.doterra.com	3rd	before consent
_pendo_guides_blocked.cc10505b-f286-4ed1-5cb8-3316e5ab005e set by cdn.pendo.io/pendo.js:10:61366	https://shop.doterra.com	3rd	before consent

Third-Party Trackers

9 requests detected from 5 vendors: Google LLC, Pendo.io Inc., Automattic, CookieYes, TrustARC

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Pendo.io Inc. before consent Pendo product analytics	Analytics	script	cdn.pendo.io
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Automattic Automattic tracker domain (source: Disconnect.me, category: Content)	Necessary	script	c0.wp.com
CookieYes CookieYes consent management	Necessary	script	cdn-cookieyes.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
TrustARC TrustARC tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consent.trustarc.com