Does heap.io use cookies?

heap.io uses 5 cookies. The site uses OneTrust as its consent management platform.

Does heap.io use a cookie banner (CMP)?

Yes. heap.io uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does heap.io use?

heap.io loads 39 third-party requests from 11 vendors, including HubSpot, Cloudflare Inc., Google LLC, Volentio JSD, Wistia.

How many marketing and analytics cookies does heap.io set?

heap.io sets 0 marketing and 1 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

heap.io

Item: heap.io
Author: Passiro

https://heap.io

Last scanned Jul 16, 2026

A cookie scan of heap.io completed on July 16, 2026 found 5 cookies and 39 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses OneTrust as its consent management platform but does not implement IAB TCF v2.3 or Google Consent Mode v2. 39 third-party requests were detected from 11 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Cookies

5 cookies detected: 1 necessary, 1 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_gcl_au	.heap.io	Analytics	Google Analytics	89 d	–	–	1st
OptanonConsent	.heap.io	Necessary	OneTrust	364 d	–	–	1st
rm_kHnsSB3u7Ao8x4acGK3D	.heap.io	Unknown	-	364 d	✓	–	1st
_rm_dr	.heap.io	Unknown	-	Expired	✓	–	1st
_vid_t	.heap.io	Unknown	-	364 d	–	–	1st

Third-Party Trackers

39 requests detected from 11 vendors: HubSpot, Cloudflare Inc., Google LLC, Volentio JSD, Wistia...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
HubSpot	Advertising	script	marketo.clearbit.com
HubSpot	Advertising	script	x.clearbitjs.com
Cloudflare Inc.	Analytics	script	static.cloudflareinsights.com
Google LLC	Analytics	script	www.googletagmanager.com
Volentio JSD	Essential	script	cdn.jsdelivr.net
Wistia	Essential	script	embed-ssl.wistia.com
LinkedIn Corporation	Marketing	script	snap.licdn.com
LinkedIn Corporation	Marketing	pixel	px.ads.linkedin.com
OneTrust LLC	Necessary	script	cdn.cookielaw.org
Sentry (Functional Software)	Necessary	script	browser.sentry-cdn.com
FingerprintJS	Other	script	fpjscdn.net
Google	Other	script	ad.doubleclick.net
OneTrust	Other	script	geolocation.onetrust.com