headingtonaction.org
Last scanned September 27, 2026
A cookie scan of headingtonaction.org conducted on September 27, 2026 found 5 cookies and 9 third-party tracking requests. The assessment covered 8 pages across 8 unique page templates. The site employs CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 9 third-party requests were detected from 6 vendors.
Consent behaviour grade
55 / 100
This site set tracking cookies or loaded trackers before the visitor consented.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
A consent banner is present but does not restrain tracking. Trackers and cookies run before the visitor consents.
Consent banner as encountered
The first layer offers a Reject option alongside Accept.
Load timeline before consent
Milliseconds from navigation start until each request fired or each cookie was set.
Observed before consent
Cookies set before consent (4)
-
languagefunctional · Language -
site_sessionunknown -
__cf_bmnecessary · Cloudflare -
__cf_bmnecessary · Cloudflare
Tracking requests before consent (7)
- Google LLC www.googletagmanager.com at 213 ms
- syndication.twitter.com syndication.twitter.com at 982 ms
- The Website Intelligence Platform app-worker.visitor-analytics.io set by www.headingtonaction.org/hac-healthy-ageing-and-care-network-is-inviting-you-to-two-unmissable-events-on-20th-march-2025 · at 421 ms
- Google LLC www.google.com at 673 ms
- Meta Platforms, Inc. connect.facebook.net set by www.headingtonaction.org/hac-healthy-ageing-and-care-network-is-inviting-you-to-two-unmissable-events-on-20th-march-2025 · at 572 ms
- X Corp (Twitter) platform.twitter.com set by www.headingtonaction.org/hac-healthy-ageing-and-care-network-is-inviting-you-to-two-unmissable-events-on-20th-march-2025 · at 572 ms
- Google LLC region1.google-analytics.com set by www.googletagmanager.com/js · at 267 ms
How we tested
Browser: Chrome/150.0.7871.124 · Scan origin: EU · Viewport: 1440×900 · Checked: 27 Sep 2026 13:25
Cookies
5
Third-party
0
Trackers
9
Vendors
6
Consent banner
CookieYes
Scans
1
What this setup is missing
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Connection security
HTTPS supported
✓Redirects HTTP to HTTPS
✗HSTS
✗Content Security Policy
✗
Third-Party Trackers
9 requests detected from 6 vendors: Google LLC, syndication.twitter.com, The Website Intelligence Platform, Meta Platforms, Inc., X Corp (Twitter)...
Third-Party Trackers
9 requests detected from 6 vendors: Google LLC, syndication.twitter.com, The Website Intelligence Platform, Meta Platforms, Inc., X Corp (Twitter)...
Analytics
3
Marketing
2
Necessary
2
Functional
1
Other
1
| Vendor | Category | Type | Domain |
|---|---|---|---|
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| syndication.twitter.com before consent | Analytics | pixel | syndication.twitter.com |
| The Website Intelligence Platform before consent The Website Intelligence Platform tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | app-worker.visitor-analytics.io |
| Google LLC before consent Google reCAPTCHA bot protection | Functional | script | www.google.com |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| X Corp (Twitter) before consent X/Twitter platform widgets | Marketing | script | platform.twitter.com |
| CookieYes CookieYes consent management | Necessary | script | cdn-cookieyes.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | region1.google-analytics.com |
Scan history
One completed scan: cookies and trackers from the scan on September 27, 2026.
Recent scans
| September 27, 2026 | 5 9 |
More Cookie Compliance Reviews
220515_adventure_emotion.jpg (600×600)
healingwithjoy.org
Healing The Broken Hearted Ministries
healingthebroken-heartedministries.org
Healers, Psychics, Coaches - Book Now.
healingmarket.org
One moment, please...
healinglightsa.org
healingjusticeldn.org
healingjusticeldn.org
Log In ‹ Healing❤️Valves – North Americ...
healingheartvalves.org
Our Christian Perspective (What We Believe) - H...
healingfromcrossdressing.org
One moment, please...
healinggrounds.org
Is headingtonaction.org your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.