Does gwapt.co.uk use cookies?

gwapt.co.uk uses 6 cookies. The site uses CookieYes as its consent management platform.

Does gwapt.co.uk use a cookie banner (CMP)?

Yes. gwapt.co.uk uses CookieYes as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does gwapt.co.uk use?

gwapt.co.uk loads 16 third-party requests from 7 vendors, including ContentSquare, Google LLC, hexagon-analytics.com, Stripe Inc., CookieYes.

How many marketing and analytics cookies does gwapt.co.uk set?

gwapt.co.uk sets 0 marketing and 2 analytics cookies, alongside 3 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

gwapt.co.uk

Item: gwapt.co.uk
Rating: 48
Author: Passiro

https://gwapt.co.uk

Last scanned September 26, 2026

A cookie scan of gwapt.co.uk completed on September 26, 2026 found 6 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on CookieYes as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 16 third-party requests were detected from 7 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

CookieYes

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

6 cookies detected: 3 necessary, 2 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_hjSessionUser_6415078 before consent	.gwapt.co.uk	Analytics	Hotjar	365 d	✓	–	1st
_hjSession_6415078 before consent	.gwapt.co.uk	Analytics	Hotjar	Expired	✓	–	1st
cookieyes-consent	www.gwapt.co.uk	Functional	CookieYes	365 d	✓	–	1st
PHPSESSID	www.gwapt.co.uk	Necessary	PHP	Session	–	–	1st
__stripe_mid	.www.gwapt.co.uk	Necessary	Stripe	365 d	✓	–	1st
__stripe_sid	.www.gwapt.co.uk	Necessary	Stripe	Expired	✓	–	1st

Browser storage set by the site

Name	Domain	Party
_hjLocalStorageTest set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:217285	https://www.gwapt.co.uk	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:217510	https://www.gwapt.co.uk	1st	before consent
hjViewportId set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:80374	https://www.gwapt.co.uk	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:80510	https://www.gwapt.co.uk	1st	before consent
__wpDataTestLocalStorage set by www.gwapt.co.uk/data.min.js	https://www.gwapt.co.uk	1st	before consent
storeApiNonce set by www.gwapt.co.uk/wc-blocks-middleware.js	https://www.gwapt.co.uk	1st	before consent
storeApiCartData set by www.gwapt.co.uk/wc-blocks-data.js	https://www.gwapt.co.uk	1st	before consent
WOOCOMMERCE_CHECKOUT_IS_CUSTOMER_DATA_DIRTY set by www.gwapt.co.uk/wc-blocks-data.js	https://www.gwapt.co.uk	1st	before consent

Third-Party Trackers

16 requests detected from 7 vendors: ContentSquare, Google LLC, hexagon-analytics.com, Stripe Inc., CookieYes...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	content.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
hexagon-analytics.com before consent	Analytics	pixel	hexagon-analytics.com
Stripe Inc. before consent Stripe fraud detection	Analytics	script	m.stripe.com
CookieYes CookieYes consent management	Necessary	script	cdn-cookieyes.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	stats.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
SiftScience before consent SiftScience tracker domain (source: Disconnect.me, category: Anti-fraud)	Unknown	script	cdn.sift.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network