Skip to main content
grex.it

grex.it

https://grex.it

Last scanned September 24, 2026

A cookie scan of grex.it conducted on September 24, 2026 found 15 cookies and 15 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Axeptio as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 15 third-party requests were detected from 11 vendors.

Cookies

15

Third-party

15

Trackers

15

Vendors

11

Consent banner

Axeptio

Scans

1

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

15 cookies detected: 2 necessary, 2 analytics, 0 marketing, 15 third-party

Total

15

Necessary

2

Functional

7

Analytics

2

Marketing

0

Unknown

4

15 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_sp_id.027d before consent .nolan-helmets.com Analytics Snowplow 1.1 yr lifetime over 13 months ✓ – 3rd
_sp_ses.027d before consent .nolan-helmets.com Analytics Snowplow Expired ✓ – 3rd
axeptio_all_vendors before consent nolan-helmets.com Functional Axeptio 189 d ✓ – 3rd
axeptio_authorized_vendors before consent nolan-helmets.com Functional Axeptio 189 d ✓ – 3rd
axeptio_cookies before consent nolan-helmets.com Functional Axeptio 189 d ✓ – 3rd
cart before consent nolan-helmets.com Functional E-commerce 90 d – – 3rd
cart_currency before consent nolan-helmets.com Functional E-commerce 13 d – – 3rd
localization before consent nolan-helmets.com Functional Shopify 364 d – – 3rd
_shopify_essential before consent nolan-helmets.com Functional Shopify 364 d ✓ ✓ 3rd
__stripe_mid .nolan-helmets.com Necessary Stripe 364 d ✓ – 3rd
__stripe_sid .nolan-helmets.com Necessary Stripe Expired ✓ – 3rd
yotpo_pixel before consent nolan-helmets.com Unknown - Expired – – 3rd
yotpo_pixel before consent .nolan-helmets.com Unknown - Expired ✓ – 3rd
_dd_s before consent nolan-helmets.com Unknown - 364 d – – 3rd
__apex_test__ before consent .nolan-helmets.com Unknown - Session – – 3rd

Browser storage set by the site

Name Domain Party
consentHeader set by nolan-helmets.com/consent-tracking-api.js:1:5853 https://nolan-helmets.com 3rd before consent
_shs_state set by nolan-helmets.com/shopify-perf-kit-3.9.4.min.js:1:51578 https://nolan-helmets.com 3rd before consent
shopify:webmcp_adapter_loaded set by nolan-helmets.com/:148:256 https://nolan-helmets.com 3rd before consent
__storage_test__ set by static.klaviyo.com/default~signup_forms~in_app_forms.974901e175d2d.js https://nolan-helmets.com 3rd before consent
klaviyoOnsite set by static.klaviyo.com/default~signup_forms~in_app_forms.974901e175d2d.js https://nolan-helmets.com 3rd before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/3117.c15b8db8bf42f.js https://nolan-helmets.com 3rd before consent
gorgias.version set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
gorgias.language-loaded set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
4bbaf956-1d20-425f-b357-6dafabc8eb54 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
f23124e9-f6f0-48af-b1d6-62c87928ee2c set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
b805edd0-f347-4954-9da0-09d0d1109614 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
gorgias.ai-agent-state set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
gorgias.storage-updated-at set by assets.gorgias.chat/395.46ab86de2a771f90.js:1:6059 https://nolan-helmets.com 3rd before consent
gorgias.conversation-starters-timeout-cohort set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
gorgias.renderedOnceSent set by content.9gtb.com/script.js https://nolan-helmets.com 3rd before consent
gorgias.product-context set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21699 https://nolan-helmets.com 3rd before consent
gorgias.storage-updated-at set by assets.gorgias.chat/395.46ab86de2a771f90.js:1:6059 https://nolan-helmets.com 3rd before consent
6fae10a3-1492-4996-878e-e937d9bce397 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
f61ce81e-4a1c-4a6e-a780-24b4659a1005 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
76418be5-e293-48ed-89f8-870c87746bdc set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
ad1f7071-fcca-45a1-a712-2f2cc8333f12 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
af4edfc6-5f7b-41ce-8e27-3ffee928e3ce set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
99b9ce8c-039b-45e9-8d04-0179d5da7806 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
d3cab159-65c7-4601-bb64-17b8fd1f8dfd set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
gorgias.guest-id set by content.9gtb.com/script.js https://nolan-helmets.com 3rd before consent
gorgias.session-id set by content.9gtb.com/script.js https://nolan-helmets.com 3rd before consent
1b38418c-7ce4-4f06-a78c-23330948f4d3 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
17bce191-d5ea-422d-911a-5dadc699cac8 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
gorgias.cart-synced set by content.9gtb.com/script.js https://nolan-helmets.com 3rd before consent
59f8f8ed-79a6-4a14-acbd-fe60d2c3c065 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
cc1ae0bc-c06e-4d44-945e-d9a345a3af99 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
f6e00841-a240-4d4c-947e-3ab5f892d38b set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
70079efd-4dad-48e3-97f3-e0efc59aa74c set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
d74da0b6-4333-4a5b-bf36-d0e08e4f9930 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
588d0e77-af46-44a8-ac2e-1308233fa608 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
60273521-e0d3-4a1f-bab8-4aed214847e6 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
7dd28987-2d07-47e3-a419-b160d3daec79 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
63522487-9655-4b58-b55b-89e3f9a69e2e set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
cb8c0b83-da01-45b8-91b2-208a385669a4 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
bd56a1b9-43b5-4cfd-bc96-5a1ce4e36e43 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
29f705a5-a875-486f-a212-e337b40d3534 set by assets.gorgias.chat/render-chat-app.0ed4c0735f88d18a.js:19:21391 https://nolan-helmets.com 3rd before consent
baback set by cdn1.baback.co/index.js:17:1195 https://nolan-helmets.com 3rd before consent
__openreplay_tabid set by cdn1.baback.co/index.js:98:16191 https://nolan-helmets.com 3rd before consent
ld:66056ce1915e640faea65745:$diagnostics set by cdn1.baback.co/index.js:12:94274 https://nolan-helmets.com 3rd before consent

Third-Party Trackers

15 requests detected from 11 vendors: Microsoft, Shopify, Stripe Inc., LaunchDarkly, Klaviyo Inc....

Analytics

3

Marketing

3

Necessary

7

Functional

1

Other

1

Vendor Category Type Domain
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
Stripe Inc. before consent Stripe fraud detection Analytics script m.stripe.com
LaunchDarkly before consent LaunchDarkly feature flags Functional script app.launchdarkly.com
Klaviyo Inc. before consent Klaviyo email marketing Marketing script static.klaviyo.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive) Marketing script cdn-widgetsrepository.yotpo.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: Advertising) Marketing script p.yotpo.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Gorgias Gorgias tracker domain (source: Disconnect.me, category: Content) Necessary script config.gorgias.chat
Imgix Imgix tracker domain (source: Disconnect.me, category: Content) Necessary script axeptio.imgix.net
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
Stripe Inc. Stripe payment processing Necessary script js.stripe.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script m.stripe.network

Scan history

One completed scan: cookies and trackers from the scan on September 24, 2026.

Recent scans

September 24, 2026 15 15

Is grex.it your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.