gaiyo.com
Last scanned September 20, 2026
A cookie scan of gaiyo.com conducted on September 20, 2026 found 12 cookies and 11 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Complianz as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 11 third-party requests were detected from 4 vendors.
Consent behaviour grade
30 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Partially enforced This site
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Consent banner as encountered
No Reject option on the first layer; declining requires extra steps.
Load timeline before consent
Milliseconds from navigation start until each request fired or each cookie was set.
Observed before consent
Cookies set before consent (6)
-
_gaanalytics · Google Analytics -
_ga_636ZGK5Y2Ranalytics · Google Analytics -
_ga_WV0G7X6KB2analytics · Google Analytics -
_hjSession_3215680analytics · Hotjar -
_hjSessionUser_3215680analytics · Hotjar -
session-5MiDnnmvikNr4lyHNp1Rfm0vPIj2LSl9unknown
Tracking requests before consent (7)
- ContentSquare static.hotjar.com set by www.googletagmanager.com/gtm.js · at 1720 ms
- ContentSquare vc.hotjar.io set by sdk.gleap.io/index.js · at 1913 ms
- ContentSquare content.hotjar.io set by sdk.gleap.io/index.js · at 1902 ms
- Google LLC www.googletagmanager.com at 116 ms
- HubSpot js-eu1.hs-scripts.com set a cookie set by www.googletagmanager.com/gtm.js · at 1720 ms
- Google LLC pagead2.googlesyndication.com set by sdk.gleap.io/index.js · at 896 ms
- Google LLC region1.google-analytics.com set by sdk.gleap.io/index.js · at 885 ms
How we tested
Browser: Chrome/150.0.7871.124 · Scan origin: EU · Viewport: 1440×900 · Checked: 20 Sep 2026 15:23
Cookies
12
Third-party
0
Trackers
11
Vendors
4
Consent banner
Complianz
Scans
1
What this setup is missing
- No Reject option on the first layer; declining requires extra steps.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Connection security
HTTPS supported
✓Redirects HTTP to HTTPS
✓HSTS
✓Content Security Policy
✗
Third-Party Trackers
11 requests detected from 4 vendors: ContentSquare, Google LLC, HubSpot, Automattic
Third-Party Trackers
11 requests detected from 4 vendors: ContentSquare, Google LLC, HubSpot, Automattic
Analytics
4
Marketing
1
Necessary
4
Functional
0
Other
2
| Vendor | Category | Type | Domain |
|---|---|---|---|
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | static.hotjar.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | vc.hotjar.io |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | content.hotjar.io |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | js-eu1.hs-scripts.com |
| Automattic Automattic tracker domain (source: Disconnect.me, category: Content) | Necessary | script | secure.gravatar.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | i.ytimg.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | pagead2.googlesyndication.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | region1.google-analytics.com |
Scan history
One completed scan: cookies and trackers from the scan on September 20, 2026.
Recent scans
| September 20, 2026 | 12 11 |
More Cookie Compliance Reviews
Privacy Policy - Galaxy of Emotions - Innovativ...
galaxyofemotions.com
galaxynailsnashua.com | 521: Web server is down
galaxynailsnashua.com
galaxylaunch | Affordable websites
galaxylaunch.com
Request More Information - Galaxy Home Care
galaxyhomecareny.com
Galaxy Golf Gift Card
galaxygolfco.com
The Best Custom Window Treatments & Awnings in ...
galaxydraperies.com
Deepanjali Tyagi - Galaxy Event Solutions
galaxyevs.com
Luxury Black Car Service in Uniondale NY
galaxyblackcarserviceusa.com
Is gaiyo.com your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.