Skip to main content
hellofresh.be

hellofresh.be

https://hellofresh.be

Last scanned September 28, 2026

A cookie scan of hellofresh.be conducted on September 28, 2026 found 12 cookies and 14 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 14 third-party requests from 7 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

12

Third-party

0

Trackers

14

Vendors

7

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

12 cookies detected: 2 necessary, 0 analytics, 0 marketing

Total

12

Necessary

2

Functional

1

Analytics

0

Marketing

0

Unknown

9

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
locale before consent www.hellofresh.be Functional Language Session – – 1st
cf_clearance .hellofresh.be Necessary Cloudflare 365 d ✓ ✓ 1st
__cf_bm .hellofresh.be Necessary Cloudflare Expired ✓ ✓ 1st
f0_sid before consent www.hellofresh.be Unknown - 1 d – – 1st
f0_uid before consent www.hellofresh.be Unknown - 365 d – – 1st
hf_initial_page before consent www.hellofresh.be Unknown - 30 d – – 1st
hf_landing_page before consent www.hellofresh.be Unknown - 14 d – – 1st
hf_public_id before consent www.hellofresh.be Unknown - 365 d – – 1st
hf_public_id before consent .hellofresh.be Unknown - 365 d – – 1st
hf_ssr_e_plans_config_is_freebie before consent www.hellofresh.be Unknown - Session – – 1st
hf_ssr_funnel_drop_off_point before consent www.hellofresh.be Unknown - 14 d – – 1st
hf_system_country before consent www.hellofresh.be Unknown - Session – – 1st

Browser storage set by the site

Name Domain Party
localstorage.test set by www.googletagmanager.com/gtm.js https://www.hellofresh.be 1st before consent
__test set by www.hellofresh.be/_app-269c5406720a29f0.js:13:164712 https://www.hellofresh.be 1st before consent
hf_route_history set by www.hellofresh.be/_app-269c5406720a29f0.js:13:788237 https://www.hellofresh.be 1st before consent
session_tracked set by www.hellofresh.be/_app-269c5406720a29f0.js:13:538995 https://www.hellofresh.be 1st before consent
statsig.session_id.1880730496 set by www.hellofresh.be/_app-269c5406720a29f0.js:13:640996 https://www.hellofresh.be 1st before consent
statsig.session_id.859946295 set by www.hellofresh.be/_app-269c5406720a29f0.js:13:640996 https://www.hellofresh.be 1st before consent
f0_uid set by api.fraud0.com/fz.js https://www.hellofresh.be 1st before consent
f0_sid set by api.fraud0.com/fz.js https://www.hellofresh.be 1st before consent
page_microTags set by www.hellofresh.be/_app-269c5406720a29f0.js:13:538995 https://www.hellofresh.be 1st before consent
__storage_test__ set by www.hellofresh.be/10775.026770a217d7abe2.js:12:63689 https://www.hellofresh.be 1st before consent
__storage_test__ set by www.hellofresh.be/10775.026770a217d7abe2.js:12:63689 https://www.hellofresh.be 1st before consent
statsig.stable_id.1880730496 set by www.hellofresh.be/_app-269c5406720a29f0.js:13:640996 https://www.hellofresh.be 1st before consent
statsig.last_modified_time.specs set by www.hellofresh.be/_app-269c5406720a29f0.js:13:640996 https://www.hellofresh.be 1st before consent
statsig.stable_id.859946295 set by www.hellofresh.be/_app-269c5406720a29f0.js:13:640996 https://www.hellofresh.be 1st before consent
userleap.ids set by www.hellofresh.be/10775.026770a217d7abe2.js:12:63854 https://www.hellofresh.be 1st before consent
sprig.anon.env.vid.map set by www.hellofresh.be/10775.026770a217d7abe2.js:12:63854 https://www.hellofresh.be 1st before consent
DelayedDataLayerEvents set by www.googletagmanager.com/gtm.js https://www.hellofresh.be 1st before consent
hf_urgency_banner_counter set by www.hellofresh.be/urgency-banner.1b7924a8d532212a.js:1:11926 https://www.hellofresh.be 1st before consent

Third-Party Trackers

14 requests detected from 7 vendors: api.sprig.com, cdn.sprig.com, FunctionalSoftware, Google LLC, STG...

Analytics

5

Marketing

2

Necessary

6

Functional

0

Other

1

Vendor Category Type Domain
api.sprig.com before consent Analytics fetch api.sprig.com
cdn.sprig.com before consent Analytics script cdn.sprig.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics) Analytics script o46710.ingest.sentry.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
STG before consent STG tracker domain (source: Disconnect.me, category: Analytics) Analytics script w.usabilla.com
Fraud0 before consent Fraud0 tracker domain (source: Disconnect.me, category: Advertising) Marketing script api.fraud0.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Contentful Contentful tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.contentful.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script yt3.ggpht.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script jnn-pa.googleapis.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on September 28, 2026.

Recent scans

September 28, 2026 12 14

Is hellofresh.be your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.