Does expediataap.es use cookies?

expediataap.es uses 31 cookies, 13 of which are set by third-party domains. The site uses OneTrust as its consent management platform.

Does expediataap.es use a cookie banner (CMP)?

Yes. expediataap.es uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does expediataap.es use?

expediataap.es loads 8 third-party requests from 8 vendors, including Akamai, www.uciservice.com, Amazon, OneTrust LLC, ArkoseLabs.

How many marketing and analytics cookies does expediataap.es set?

expediataap.es sets 3 marketing and 0 analytics cookies, alongside 9 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

expediataap.es

Item: expediataap.es
Rating: 18
Author: Passiro

https://expediataap.es

Last scanned September 13, 2026

A cookie scan of expediataap.es completed on September 13, 2026 found 31 cookies and 8 third-party tracking requests. The assessment covered 6 pages across 6 unique page templates. The site employs OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 8 third-party requests were detected from 8 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

31 cookies detected: 9 necessary, 0 analytics, 3 marketing, 13 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

13 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
currency before consent	.expediataap.es	Functional	Currency	1.1 yr lifetime over 13 months	✓	✓	1st
datadome before consent	.expedia.es	Functional	Datadome	365 d	✓	–	3rd
MC1 before consent	.expediataap.es	Marketing	Bing / Microsoft	1.1 yr lifetime over 13 months	✓	–	1st
MC1 before consent	.expedia.es	Marketing	Bing / Microsoft	1.1 yr lifetime over 13 months	✓	–	3rd
tpid before consent	.expediataap.es	Marketing	Tailtarget	12 d	✓	–	1st
ak_bmsc	.expediataap.es	Necessary	Akamai	Expired	✓	✓	1st
ak_bmsc	.expedia.es	Necessary	Akamai	Expired	–	✓	3rd
bm_mi	.expedia.es	Necessary	Akamai	Expired	✓	–	3rd
bm_sv	.expediataap.es	Necessary	Akamai	Expired	✓	–	1st
bm_sv	.expedia.es	Necessary	Akamai	Expired	✓	–	3rd
bm_sz	.expedia.es	Necessary	Akamai	Expired	–	–	3rd
JSESSIONID	www.expediataap.es	Necessary	Java	Session	✓	✓	1st
OptanonConsent	.expediataap.es	Necessary	OneTrust	365 d	–	–	1st
_abck	.expedia.es	Necessary	Akamai	365 d	✓	–	3rd
bm_s before consent	.expedia.es	Unknown	-	31 d	✓	✓	3rd
bm_so before consent	.expedia.es	Unknown	-	1 d	✓	–	3rd
CRQS before consent	.expediataap.es	Unknown	-	1.1 yr lifetime over 13 months	✓	✓	1st
CRQSS before consent	.expediataap.es	Unknown	-	Session	✓	✓	1st
DUAID before consent	.expediataap.es	Unknown	-	1.1 yr lifetime over 13 months	✓	–	1st
DUAID before consent	.expedia.es	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
eg_adblock before consent	www.expediataap.es	Unknown	-	7 d	–	–	1st
EG_ANONTOKEN before consent	.expediataap.es	Unknown	-	1.1 yr lifetime over 13 months	✓	✓	1st
EG_ANONTOKEN before consent	.expedia.es	Unknown	-	1.1 yr lifetime over 13 months	✓	✓	3rd
HMS before consent	.expediataap.es	Unknown	-	Expired	✓	–	1st
HMS before consent	.expedia.es	Unknown	-	Expired	✓	–	3rd
iEAPID before consent	.expediataap.es	Unknown	-	Session	✓	–	1st
linfo before consent	.expediataap.es	Unknown	-	1.1 yr lifetime over 13 months	✓	–	1st
OIP before consent	.expediataap.es	Unknown	-	1.1 yr lifetime over 13 months	✓	–	1st
OIP before consent	.expedia.es	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
PIM-SESSION-ID before consent	.expediataap.es	Unknown	-	Session	–	–	1st
xdid before consent	.expediataap.es	Unknown	-	1.1 yr lifetime over 13 months	✓	–	1st

Browser storage set by the site

Name	Domain	Party
dctk_clientLogging_firstInteractionTimestamp set by c.travel-assets.com/pap.037ac7515f3486b19c35.js:2:56490	https://www.expediataap.es	1st	before consent
dctk_clientLogging_lastInteractionTimestamp set by c.travel-assets.com/pap.037ac7515f3486b19c35.js:2:56521	https://www.expediataap.es	1st	before consent
eg_adblock set by www.uciservice.com/bernie-loader.js:1:109876	https://www.expediataap.es	1st	before consent
xdid set by b.travel-assets.com/app.js:9:15444	https://www.expediataap.es	1st	before consent
GULP_TH2 set by www.expediataap.es/1755724ae698e1719c08a467254eee26539056d59fa56c:136:392	https://www.expediataap.es	1st	before consent
PIM-SESSION-ID set by www.expediataap.es/1755724ae698e1719c08a467254eee26539056d59fa56c:136:392	https://www.expediataap.es	1st	before consent
ablyjs-storage-test set by c.travel-assets.com/app-shared.9a42a8ad97f980bcf8b3.js:2:479432	https://www.expediataap.es	1st	before consent
ablyjs-storage-test set by c.travel-assets.com/app-shared.9a42a8ad97f980bcf8b3.js:2:479554	https://www.expediataap.es	1st	before consent
io_f604be51-ccf5-4d26-9cc2-3c44e1fdceb9 set by mpsnare.iesnare.com/wdp.js	https://www.expediataap.es	1st	before consent
fp_f604be51-ccf5-4d26-9cc2-3c44e1fdceb9 set by www.expediataap.es/static_wdp.js	https://www.expediataap.es	1st	before consent
__akfp_storage_test__ set by www.expedia.es/25d1c091:2:5894	https://www.expedia.es	3rd	before consent
__akfp_storage_test__ set by www.expedia.es/25d1c091:2:5894	https://www.expedia.es	3rd	before consent
dctk_clientLogging_firstInteractionTimestamp set by c.travel-assets.com/pap.7acd2c2a76792750.js:2:79141	https://www.expedia.es	3rd	before consent
dctk_clientLogging_lastInteractionTimestamp set by c.travel-assets.com/pap.7acd2c2a76792750.js:2:79172	https://www.expedia.es	3rd	before consent
ddSession set by www.expedia.es/tags.js:2:18270	https://www.expedia.es	3rd	before consent
ddCookieCandidateDomain set by www.expedia.es/tags.js:2:3024	https://www.expedia.es	3rd	before consent

Third-Party Trackers

8 requests detected from 8 vendors: Akamai, www.uciservice.com, Amazon, OneTrust LLC, ArkoseLabs...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Content)	Analytics	script	p11.techlab-cdn.com
www.uciservice.com before consent	Analytics	script	www.uciservice.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	taap-terms-service-us-west-2-epsdecaf-prod.s3.amazonaws.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
ArkoseLabs before consent ArkoseLabs tracker domain (source: Disconnect.me, category: Anti-fraud)	Unknown	script	expedia-api.arkoselabs.com
Datadome before consent Datadome tracker domain (source: Disconnect.me, category: Anti-fraud)	Unknown	script	geo.captcha-delivery.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
TransUnion before consent TransUnion tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	mpsnare.iesnare.com