Skip to main content
grantbot.co

grantbot.co

https://grantbot.co

Last scanned September 24, 2026

A cookie scan of grantbot.co performed on September 24, 2026 found 5 cookies and 13 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 13 third-party requests from 11 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

5

Third-party

5

Trackers

13

Vendors

11

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

5 cookies detected: 1 necessary, 2 analytics, 1 marketing, 5 third-party

Total

5

Necessary

1

Functional

0

Analytics

2

Marketing

1

Unknown

1

5 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .gpc.consulting Analytics Google Analytics 1.1 yr lifetime over 13 months 3rd
_ga_QWD79QPC2V before consent .gpc.consulting Analytics Google Analytics 1.1 yr lifetime over 13 months 3rd
_fbp before consent .gpc.consulting Marketing Facebook 90 d 3rd
_cfuvid .www.gpc.consulting Necessary Cloudflare Session 3rd
ph_phc_zarNhr68YnEsSJYuCLsyauyKP9HrnRmCVwLVos5dJe4X_posthog before consent .gpc.consulting Unknown - 365 d 3rd

Browser storage set by the site

Name Domain Party
_gcl_ls set by www.gpc.consulting/4_N3K0N1dp3tA8H-uqeSqiVP9b4:594:174 https://www.gpc.consulting 3rd before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:202:242 https://www.gpc.consulting 3rd before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:202:242 https://www.gpc.consulting 3rd before consent
__mplssupport__ set by us-assets.i.posthog.com/array.js:1:57828 https://www.gpc.consulting 3rd before consent
__support__ set by us-assets.i.posthog.com/array.js:1:59337 https://www.gpc.consulting 3rd before consent
ph_phc_zarNhr68YnEsSJYuCLsyauyKP9HrnRmCVwLVos5dJe4X_posthog set by us-assets.i.posthog.com/array.js:1:57828 https://www.gpc.consulting 3rd before consent
ph_phc_zarNhr68YnEsSJYuCLsyauyKP9HrnRmCVwLVos5dJe4X_primary_window_exists set by us-assets.i.posthog.com/array.js:1:59337 https://www.gpc.consulting 3rd before consent
test set by us-assets.i.posthog.com/array.js:1:291845 https://www.gpc.consulting 3rd before consent
ph_phc_zarNhr68YnEsSJYuCLsyauyKP9HrnRmCVwLVos5dJe4X_session_registered_properties set by us-assets.i.posthog.com/array.js:1:59337 https://www.gpc.consulting 3rd before consent
ph_phc_zarNhr68YnEsSJYuCLsyauyKP9HrnRmCVwLVos5dJe4X_posthog set by us-assets.i.posthog.com/array.js:1:59337 https://www.gpc.consulting 3rd before consent
ph_phc_zarNhr68YnEsSJYuCLsyauyKP9HrnRmCVwLVos5dJe4X_window_id set by us-assets.i.posthog.com/array.js:1:59337 https://www.gpc.consulting 3rd before consent

Third-Party Trackers

13 requests detected from 11 vendors: Google LLC, PostHog, HubSpot Inc., Meta Platforms, Inc., Substack...

Analytics

2

Marketing

4

Necessary

6

Functional

0

Other

1

Vendor Category Type Domain
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
PostHog before consent PostHog tracker domain (source: Disconnect.me, category: Analytics) Analytics script us-assets.i.posthog.com
HubSpot Inc. before consent HubSpot tracking script Marketing script js.hs-scripts.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Substack before consent Substack tracker domain (source: Disconnect.me, category: EmailAggressive) Marketing script ruben.substack.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d3e54v103j8qbb.cloudfront.net
Cloudflare Cloudflare tracker domain (source: Disconnect.me, category: Content) Necessary script customer-hyt5dnmruhcgx46c.cloudflarestream.com
Cloudflare Inc. Cloudflare Turnstile / bot protection Necessary script challenges.cloudflare.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content) Necessary script static.hsappstatic.net
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) Necessary script unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com

Scan history

One completed scan: cookies and trackers from the scan on September 24, 2026.

Recent scans

September 24, 2026 5 13

Is grantbot.co your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.