Does hdf.fi use cookies?

hdf.fi uses 7 cookies. The site uses Cookiebot as its consent management platform.

Does hdf.fi use a cookie banner (CMP)?

Yes. hdf.fi uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does hdf.fi use?

hdf.fi loads 117 third-party requests from 8 vendors, including ContentSquare, Google LLC, Adobe Fonts, Meta Platforms, Inc., Amazon.

How many marketing and analytics cookies does hdf.fi set?

hdf.fi sets 1 marketing and 4 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

hdf.fi

Item: hdf.fi
Rating: 32
Author: Passiro

https://hdf.fi

Last scanned July 25, 2026

A cookie scan of hdf.fi conducted on July 25, 2026 found 7 cookies and 117 third-party tracking requests. The assessment covered 7 pages across 7 unique page templates. The site uses Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 117 third-party requests were detected from 8 vendors.

Claim & unlock

Third-party

Trackers

117

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

7 cookies detected: 1 necessary, 4 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.hdf.fi	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_HS6P9XL5B4 before consent	.hdf.fi	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_hjSessionUser_5202952 before consent	.hdf.fi	Analytics	Hotjar	365 d	✓	–	1st
_hjSession_5202952 before consent	.hdf.fi	Analytics	Hotjar	Expired	✓	–	1st
_fbp before consent	.hdf.fi	Marketing	Facebook	90 d	–	–	1st
_cfuvid	.hdf.fi	Necessary	Cloudflare	Session	✓	✓	1st
giosg_chat_id_2268 before consent	hdf.fi	Unknown	-	365 d	–	–	1st

Browser storage set by the site

Name	Domain	Party
_hjLocalStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217238	https://hdf.fi	1st	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217463	https://hdf.fi	1st	before consent
hjViewportId set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:80327	https://hdf.fi	1st	before consent
hjActiveViewportIds set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:80463	https://hdf.fi	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242	https://hdf.fi	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242	https://hdf.fi	1st	before consent

Third-Party Trackers

117 requests detected from 8 vendors: ContentSquare, Google LLC, Adobe Fonts, Meta Platforms, Inc., Amazon...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	content.hotjar.io
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d3e54v103j8qbb.cloudfront.net
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	stats.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com