Skip to main content
heleva.ca

heleva.ca

https://heleva.ca

Last scanned September 27, 2026

A cookie scan of heleva.ca performed on September 27, 2026 found 14 cookies and 15 third-party tracking requests. The assessment covered 4 pages across 4 unique page templates. The site employs CookieYes as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 15 third-party requests were detected from 7 vendors.

Cookies

14

Third-party

0

Trackers

15

Vendors

7

Consent banner

CookieYes

Scans

1

What this setup is missing

  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

14 cookies detected: 1 necessary, 4 analytics, 1 marketing

Total

14

Necessary

1

Functional

5

Analytics

4

Marketing

1

Unknown

3

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
hubspotutk before consent .heleva.ca Analytics HubSpot 180 d – – 1st
__hssc before consent .heleva.ca Analytics HubSpot Expired – – 1st
__hssrc before consent .heleva.ca Analytics HubSpot Session – – 1st
__hstc before consent .heleva.ca Analytics HubSpot 180 d – – 1st
bSession before consent .www.heleva.ca Functional Wix.com Expired ✓ – 1st
cookieyes-consent www.heleva.ca Functional CookieYes 365 d ✓ – 1st
hs before consent .www.heleva.ca Functional Wix.com Session ✓ ✓ 1st
server-session-bind before consent www.heleva.ca Functional Wix.com Session ✓ ✓ 1st
ssr-caching before consent www.heleva.ca Functional Wix.com Expired – – 1st
svSession before consent .www.heleva.ca Marketing Wix.com 1.1 yr lifetime over 13 months ✓ ✓ 1st
XSRF-TOKEN .www.heleva.ca Necessary CSRF Protection Session ✓ – 1st
cf_5422_first_touch before consent .heleva.ca Unknown - 1.1 yr lifetime over 13 months ✓ – 1st
cf_5422_id before consent .heleva.ca Unknown - 1.1 yr lifetime over 13 months ✓ – 1st
cf_5422_person_last_update before consent .heleva.ca Unknown - Session ✓ – 1st

Browser storage set by the site

Name Domain Party
mpaSessionId set by www.heleva.ca/:1781:5497 https://www.heleva.ca 1st before consent
fedops.logger.sessionId set by static.parastorage.com/main.c8b9bed4.bundle.min.js:1:100037 https://www.heleva.ca 1st before consent
cf_ctas set by js.convertflow.co/5422.js:5:8986 https://www.heleva.ca 1st before consent
cf_5422_person set by js.convertflow.co/5422.js:16:19249 https://www.heleva.ca 1st before consent
cf_5422_session set by js.convertflow.co/5422.js:16:19249 https://www.heleva.ca 1st before consent
cta34337 set by js.convertflow.co/5422.js:16:19249 https://www.heleva.ca 1st before consent

Third-Party Trackers

15 requests detected from 7 vendors: frog.wix.com, Google LLC, HubSpot, panorama.wixapps.net, Sentry (Functional Software)...

Analytics

6

Marketing

4

Necessary

4

Functional

0

Other

1

Vendor Category Type Domain
frog.wix.com before consent Analytics other frog.wix.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-na3.hs-analytics.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content) Analytics script forms-na3.hsforms.com
panorama.wixapps.net before consent Analytics other panorama.wixapps.net
Sentry (Functional Software) before consent Sentry browser SDK Analytics script browser.sentry-cdn.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-na3.hs-scripts.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-na3.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-na3.hscollectedforms.net
HubSpot Inc. before consent HubSpot marketing & CRM Marketing script track-na3.hubspot.com
CookieYes CookieYes consent management Necessary script cdn-cookieyes.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com

Scan history

One completed scan: cookies and trackers from the scan on September 27, 2026.

Recent scans

September 27, 2026 14 15

Is heleva.ca your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.