Does gnarlyhead.com use cookies?

gnarlyhead.com uses 8 cookies. No consent management platform was detected.

Does gnarlyhead.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on gnarlyhead.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does gnarlyhead.com use?

gnarlyhead.com loads 16 third-party requests from 8 vendors, including Automattic, Google LLC, www.google.com, Adobe Fonts, Meta Platforms, Inc..

How many marketing and analytics cookies does gnarlyhead.com set?

gnarlyhead.com sets 1 marketing and 5 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

gnarlyhead.com

Item: gnarlyhead.com
Rating: 34
Author: Passiro

https://gnarlyhead.com

Last scanned September 23, 2026

A cookie scan of gnarlyhead.com completed on September 23, 2026 found 8 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 16 third-party requests from 8 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

8 cookies detected: 0 necessary, 5 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
BVBRANDID before consent	.gnarlyhead.com	Analytics	Bazaar Voice	365 d	✓	–	1st
BVBRANDSID before consent	.gnarlyhead.com	Analytics	Bazaar Voice	Expired	✓	–	1st
_ga before consent	.gnarlyhead.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_FCQ94JGBVD before consent	.gnarlyhead.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.gnarlyhead.com	Analytics	Google Analytics	90 d	–	–	1st
tk_ai before consent	.gnarlyhead.com	Functional	WooCommerce / Jetpack	1.1 yr lifetime over 13 months	–	–	1st
_fbp before consent	.gnarlyhead.com	Marketing	Facebook	90 d	–	–	1st
wt_consent before consent	gnarlyhead.com	Unknown	-	365 d	✓	–	1st

Browser storage set by the site

Name	Domain	Party
_gcl_ls set by www.googletagmanager.com/gtm.js	https://gnarlyhead.com	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:202:242	https://gnarlyhead.com	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:202:242	https://gnarlyhead.com	1st	before consent

Third-Party Trackers

16 requests detected from 8 vendors: Automattic, Google LLC, www.google.com, Adobe Fonts, Meta Platforms, Inc....

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Automattic before consent Automattic tracker domain (source: Disconnect.me, category: Content)	Analytics	script	stats.wp.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
www.google.com before consent	Analytics	fetch	www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Bazaarvoice Bazaarvoice tracker domain (source: Disconnect.me, category: Content)	Necessary	script	apps.bazaarvoice.com
Cloudflare Inc. Cloudflare Turnstile / bot protection	Necessary	script	challenges.cloudflare.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net