Does everdrop.com use cookies?

everdrop.com uses 10 cookies, 10 of which are set by third-party domains. The site uses Cookiebot as its consent management platform.

Does everdrop.com use a cookie banner (CMP)?

Yes. everdrop.com uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does everdrop.com use?

everdrop.com loads 20 third-party requests from 16 vendors, including assets1.unidays.world, fonts1.unidays.world, FunctionalSoftware, Google LLC, images.unidays.world.

How many marketing and analytics cookies does everdrop.com set?

everdrop.com sets 1 marketing and 4 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

everdrop.com

Item: everdrop.com
Rating: 24
Author: Passiro

https://everdrop.com

Last scanned September 13, 2026

A cookie scan of everdrop.com completed on September 13, 2026 found 10 cookies and 20 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 20 third-party requests were detected from 16 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.
No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

10 cookies detected: 0 necessary, 4 analytics, 1 marketing, 10 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

10 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_shopify_s before consent	.everdrop.de	Analytics	Shopify	Expired	–	–	3rd
_shopify_s before consent	.www.everdrop.de	Analytics	Shopify	Expired	–	–	3rd
_shopify_y before consent	.www.everdrop.de	Analytics	Shopify	360 d	–	–	3rd
_shopify_y before consent	.everdrop.de	Analytics	Shopify	365 d	–	–	3rd
_tracking_consent before consent	.everdrop.de	Marketing	Shopify	365 d	–	–	3rd
ed_ab_exposure before consent	.everdrop.de	Unknown	-	180 d	–	–	3rd
ed_ab_tests before consent	.everdrop.de	Unknown	-	180 d	–	–	3rd
ed_deployment_id before consent	.everdrop.de	Unknown	-	Session	–	–	3rd
kpi-session before consent	www.everdrop.de	Unknown	-	Session	–	–	3rd
shopify_cartId before consent	www.everdrop.de	Unknown	-	30 d	–	–	3rd

Browser storage set by the site

Name	Domain	Party
__next set by www.everdrop.de/main-88aa75b0427ccb83.js:1:82734	https://www.everdrop.de	3rd	before consent
visitedProducts set by www.everdrop.de/_app-1cccb5691bf86cac.js:1:13083	https://www.everdrop.de	3rd	before consent
ZD-suid set by static.zdassets.com/web-widget-main-7d884e2.js:2:519818	https://www.everdrop.de	3rd	before consent
ZD-testStorage set by static.zdassets.com/web-widget-main-7d884e2.js:2:520491	https://www.everdrop.de	3rd	before consent
61efe85d4a264d00ebdd2ce0.clientId set by static.zdassets.com/web-widget-main-7d884e2.js:2:519818	https://www.everdrop.de	3rd	before consent
ZD-buid set by static.zdassets.com/web-widget-main-7d884e2.js:2:519818	https://www.everdrop.de	3rd	before consent
ZD-suid set by static.zdassets.com/web-widget-main-7d884e2.js:2:519818	https://www.everdrop.de	3rd	before consent

Third-Party Trackers

20 requests detected from 16 vendors: assets1.unidays.world, fonts1.unidays.world, FunctionalSoftware, Google LLC, images.unidays.world...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
assets1.unidays.world before consent	Analytics	stylesheet	assets1.unidays.world
fonts1.unidays.world before consent	Analytics	other	fonts1.unidays.world
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o264092.ingest.sentry.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
images.unidays.world before consent	Analytics	pixel	images.unidays.world
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	js-agent.newrelic.com
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	bam.eu01.nr-data.net
Shopify Inc. before consent Shopify platform	Analytics	script	cdn.shopify.com
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
Twilio before consent Twilio tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	api.segment.io
Zendesk before consent Zendesk tracker domain (source: Disconnect.me, category: Content)	Analytics	script	everdrophelp.zendesk.com
Zendesk Inc. before consent Zendesk assets	Functional	script	static.zdassets.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d34e3vwr98gw1q.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s.ytimg.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Usercentrics GmbH Usercentrics consent management	Necessary	script	app.usercentrics.eu
Zendesk Zendesk tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ekr.zdassets.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com