gitlab.org
Last scanned July 22, 2026
A cookie scan of gitlab.org conducted on July 22, 2026 found 1 cookies and 5 third-party tracking requests. The site uses OneTrust as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 5 third-party requests were detected from 4 vendors.
Consent behaviour grade
89 / 100
This site's consent setup works, with minor issues observed before consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Strict Article 5(3) This site
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Observed before consent
Tracking requests before consent (2)
- Google LLC www.googletagmanager.com
- Google LLC pagead2.googlesyndication.com
Cookies
1
Third-party
1
Trackers
5
Vendors
4
Consent banner
OneTrust
Scans
1
What this setup is missing
- Google Consent Mode v2 is present but does not default to denied for all storage types.
Compliance by audience
European Union
✓ Meets this modelGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✓ Meets this modelUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
✓ Meets this modelPIPEDA + Québec Law 25 · Consent-based
Brazil
✓ Meets this modelLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
5 requests detected from 4 vendors: Google LLC, Cloudinary, OneTrust LLC, OneTrust
Third-Party Trackers
5 requests detected from 4 vendors: Google LLC, Cloudinary, OneTrust LLC, OneTrust
Analytics
1
Marketing
0
Necessary
2
Functional
0
Other
2
| Vendor | Category | Type | Domain |
|---|---|---|---|
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Cloudinary Cloudinary tracker domain (source: Disconnect.me, category: Content) | Necessary | script | res.cloudinary.com |
| OneTrust LLC OneTrust consent management | Necessary | script | cdn.cookielaw.org |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | pagead2.googlesyndication.com |
| OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) | Unknown | script | geolocation.onetrust.com |
Scan history
One completed scan: cookies and trackers from the scan on July 22, 2026.
Recent scans
| July 22, 2026 | 1 5 |
More Cookie Compliance Reviews
1830mercantile.org -
1830mercantile.org
Program - Sustainable Networking
17academy.org
165th Anniversary Coalition
165th.org
1606 (Weymouth) Royal Air Force Air Cadets
1606atc.org
148 (Barnsley) Squadron – Royal Air Force Air...
148sqn.org
Vivi insieme ai frati la Festa di Sant'Antonio
13giugno.org
138klub.org | 521: Web server is down
138klub.org
The 12 Steps & 12 Step Programs - 12 Step Recov...
12steppers.org
Is gitlab.org your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.