Does first.ro use cookies?

first.ro uses 8 cookies. The site uses Cookiebot as its consent management platform.

Does first.ro use a cookie banner (CMP)?

Yes. first.ro uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does first.ro use?

first.ro loads 13 third-party requests from 5 vendors, including Google LLC, www.google.com, Meta Platforms, Inc., Cybot A/S (Cookiebot), UserCentrics.

How many marketing and analytics cookies does first.ro set?

first.ro sets 1 marketing and 3 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

first.ro

Item: first.ro
Rating: 36
Author: Passiro

https://first.ro

Last scanned July 26, 2026

A cookie scan of first.ro completed on July 26, 2026 found 8 cookies and 13 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 13 third-party requests were detected from 5 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

8 cookies detected: 1 necessary, 3 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.first.ro	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_JNR366P75P before consent	.first.ro	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.first.ro	Analytics	Google Analytics	90 d	–	–	1st
NEXT_LOCALE before consent	first.ro	Functional	Next	Session	–	–	1st
__Host-next-auth.csrf-token before consent	first.ro	Functional	NextAuth.js	Session	✓	✓	1st
__Secure-next-auth.callback-url before consent	first.ro	Functional	NextAuth.js	Session	✓	✓	1st
_fbp before consent	.first.ro	Marketing	Facebook	90 d	–	–	1st
__cf_bm	.first.ro	Necessary	Cloudflare	Expired	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
language set by first.ro/6472-5f4aaec4bc83e60d.js:1:6284	https://first.ro	1st	before consent
seo-slug-mappings set by first.ro/5033-e2da41bc759954bb.js:1:4429	https://first.ro	1st	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://first.ro	1st	before consent
nextauth.message set by first.ro/605-bb0c6835f5eb3307.js:1:622	https://first.ro	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242	https://first.ro	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242	https://first.ro	1st	before consent
__sak set by maps.googleapis.com/main.js:368:1218	https://first.ro	1st	before consent

Third-Party Trackers

13 requests detected from 5 vendors: Google LLC, www.google.com, Meta Platforms, Inc., Cybot A/S (Cookiebot), UserCentrics

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
www.google.com before consent	Analytics	fetch	www.google.com
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	maps.gstatic.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com