Skip to main content
gva.be

gva.be

https://gva.be

Last scanned September 26, 2026

A cookie scan of gva.be conducted on September 26, 2026 found 16 cookies and 13 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Didomi as its consent management platform with IAB TCF v2.3 and Google Consent Mode v2. 13 third-party requests were detected from 10 vendors.

Cookies

16

Third-party

0

Trackers

13

Vendors

10

Consent banner

Didomi

Scans

1

What this setup is missing

  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

16 cookies detected: 2 necessary, 1 analytics, 0 marketing

Total

16

Necessary

2

Functional

3

Analytics

1

Marketing

0

Unknown

10

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_sophiDataPoc before consent .gva.be Analytics Marfeel 31 d ✓ – 1st
AWSALB before consent www.gva.be Functional Amazon Web Services 7 d – – 1st
AWSALBCORS before consent www.gva.be Functional Amazon Web Services 7 d ✓ – 1st
_pctx before consent .gva.be Functional Piano 1.1 yr ✓ – 1st
cf_clearance .gva.be Necessary Cloudflare 365 d ✓ ✓ 1st
__cf_bm .gva.be Necessary Cloudflare Expired ✓ ✓ 1st
auth0_BaiXmK6f99rbTjTAKv2WiQkjdFgydGKX_config before consent www.gva.be Unknown - Session ✓ – 1st
auth0_BaiXmK6f99rbTjTAKv2WiQkjdFgydGKX_silent_auth before consent www.gva.be Unknown - Expired ✓ – 1st
ciam_active_client before consent www.gva.be Unknown - Session ✓ – 1st
didomi_dcs .gva.be Unknown - 1 yr – – 1st
dsy-color-mode before consent www.gva.be Unknown - 1.1 yr lifetime over 13 months – – 1st
glitr before consent .gva.be Unknown - 365 d ✓ – 1st
lux_uid before consent www.gva.be Unknown - Expired – – 1st
mh_pw_se before consent www.gva.be Unknown - 365 d ✓ ✓ 1st
_mhtc_cId before consent .gva.be Unknown - 31 d – – 1st
_mhtc_sId before consent .gva.be Unknown - Expired – – 1st

Browser storage set by the site

Name Domain Party
HAS_LOADED_BT_LOADER_SCRIPT set by www.gva.be/7488-ca48b474fd50b397.js:1:1737 https://www.gva.be 1st before consent
READERSHIP_POPUP_SHOWN set by www.gva.be/7488-ca48b474fd50b397.js:1:1737 https://www.gva.be 1st before consent
kachingPlacements_home set by cdn.kaching.eu.com/kaching.js:1:41018 https://www.gva.be 1st before consent
dmp_cache set by cdn.kaching.eu.com/dmp.js:1:2223 https://www.gva.be 1st before consent
_cX_check set by cdn.cxense.com/cx.js:6:43531 https://www.gva.be 1st before consent
_cX_check set by cdn.cxense.com/cx.js:6:43650 https://www.gva.be 1st before consent
didomi_dcs set by sdk.privacy-center.org/sdk.13bf66eed2f46cd960f33ddb63c29bac69702a05.js:2:73627 https://www.gva.be 1st before consent
dmp_userid set by cdn.kaching.eu.com/dmp.js:1:2223 https://www.gva.be 1st before consent
mhu_segments set by cdn.kaching.eu.com/dmp.js:1:2223 https://www.gva.be 1st before consent
job_segments set by cdn.kaching.eu.com/dmp.js:1:2223 https://www.gva.be 1st before consent
kachingPiano set by cdn.kaching.eu.com/dmp.js:1:2223 https://www.gva.be 1st before consent
dat_segments set by cdn.kaching.eu.com/dmp.js:1:2223 https://www.gva.be 1st before consent
sessionid set by www.gva.be/_app-c3a178aa88ecd5dc.js:4:84696 https://www.gva.be 1st before consent
CxExternalId set by cdn.kaching.eu.com/kaching.js:1:41018 https://www.gva.be 1st before consent
CxExternalId_exp set by cdn.kaching.eu.com/kaching.js:1:41047 https://www.gva.be 1st before consent
airship_prompt_last_asked_alert set by aswpsdkus.com/ua-html-prompt.min.js:1:29403 https://www.gva.be 1st before consent
_mhtc_cId set by prod.mhtr.be/tracker.min.js:15:47182 https://www.gva.be 1st before consent
_mhtc_sId set by prod.mhtr.be/tracker.min.js:15:47182 https://www.gva.be 1st before consent
test set by prod.mhtr.be/tracker.min.js:15:46552 https://www.gva.be 1st before consent
_previous set by prod.mhtr.be/tracker.min.js:15:47182 https://www.gva.be 1st before consent
demeter set by cdn.sophi.io/950426334.js:1:17481 https://www.gva.be 1st before consent
demeter set by cdn.sophi.io/950426334.js:1:40199 https://www.gva.be 1st before consent
kachingPlacements_detail set by cdn.kaching.eu.com/kaching.js:1:41018 https://www.gva.be 1st before consent
impressions set by prod.mhtr.be/tracker.min.js:15:47182 https://www.gva.be 1st before consent

Third-Party Trackers

13 requests detected from 10 vendors: Airship, cdn.sophi.io, Google LLC, prod.mhtr.be, SpeedCurve...

Analytics

5

Marketing

3

Necessary

1

Functional

0

Other

4

Vendor Category Type Domain
Airship before consent Airship tracker domain (source: Disconnect.me, category: Analytics) Analytics script aswpsdkus.com
cdn.sophi.io before consent Analytics script cdn.sophi.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
prod.mhtr.be before consent Analytics script prod.mhtr.be
SpeedCurve before consent SpeedCurve performance monitoring Analytics script cdn.speedcurve.com
Gemius before consent Gemius tracker domain (source: Disconnect.me, category: Advertising) Marketing script galu.hit.gemius.pl
Piano before consent Piano tracker domain (source: Disconnect.me, category: Advertising) Marketing script cdn.cxense.com
Pubstack before consent Pubstack tracker domain (source: Disconnect.me, category: Advertising) Marketing script boot.pbstck.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Didomi Didomi tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script sdk.privacy-center.org
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script securepubads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com

Scan history

One completed scan: cookies and trackers from the scan on September 26, 2026.

Recent scans

September 26, 2026 16 13

Is gva.be your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.