Skip to main content
hellomolly.com

hellomolly.com

https://hellomolly.com

Last scanned September 28, 2026

A cookie scan of hellomolly.com conducted on September 28, 2026 found 35 cookies and 43 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 43 third-party requests were detected from 32 vendors.

hellomolly.com
Claim & unlock

Cookies

35

Third-party

9

Trackers

43

Vendors

32

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
  • Google tags were observed, but Google Consent Mode v2 was not detected.
  • The published cookie declaration does not include all cookies observed on the site.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

35 cookies detected: 2 necessary, 6 analytics, 12 marketing, 9 third-party

Total

35

Necessary

2

Functional

2

Analytics

6

Marketing

12

Unknown

13

9 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .hellomolly.com Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_ga_2M8CLPGL2R before consent .hellomolly.com Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_ga_6JQMJ59FST before consent .hellomolly.com Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_gcl_au before consent .hellomolly.com Analytics Google Analytics 90 d – – 1st
_shdfp before consent .hellomolly.com Analytics Marfeel 365 d – – 1st
_shd_y before consent .hellomolly.com Analytics Marfeel 360 d – – 1st
wishlistSessionId before consent www.hellomolly.com Functional E-commerce 365 d – – 1st
wishlistSessionId before consent www.hellomolly.co.uk Functional E-commerce 365 d – – 3rd
ttcsid before consent .hellomolly.com Marketing TikTok 90 d – – 1st
ttcsid before consent .hellomolly.co.uk Marketing TikTok 90 d – – 3rd
ttcsid_C95QB2SU5B908I2NNN70 before consent .hellomolly.com Marketing TikTok 90 d – – 1st
ttcsid_CQ3NFD3C77UAOAV5CPV0 before consent .hellomolly.com Marketing TikTok 90 d – – 1st
ttcsid_D0RRTKJC77UD5J4UDBFG before consent .hellomolly.co.uk Marketing TikTok 90 d – – 3rd
_fbp before consent .hellomolly.com Marketing Facebook 90 d – – 1st
_pin_unauth before consent .hellomolly.com Marketing Pinterest 365 d – – 1st
_ttp before consent .hellomolly.com Marketing TikTok 90 d – – 1st
_ttp before consent .hellomolly.co.uk Marketing TikTok 90 d – – 3rd
_tt_enable_cookie before consent .hellomolly.com Marketing TikTok 90 d – – 1st
_tt_enable_cookie before consent .hellomolly.co.uk Marketing TikTok 90 d – – 3rd
__kla_id before consent www.hellomolly.com Marketing Klaviyo 1.1 yr lifetime over 13 months – – 1st
_csrfSecret www.hellomolly.com Necessary CSRF Protection Session ✓ ✓ 1st
_csrfSecret www.hellomolly.co.uk Necessary CSRF Protection Session ✓ ✓ 3rd
2c.cId before consent .hellomolly.com Unknown - 1.1 yr lifetime over 13 months – – 1st
2c.cId before consent .hellomolly.co.uk Unknown - 1.1 yr lifetime over 13 months – – 3rd
addshoppers.com before consent www.hellomolly.com Unknown - 1.1 yr lifetime over 13 months ✓ – 1st
forterToken before consent .hellomolly.com Unknown - 1.1 yr lifetime over 13 months – – 1st
forterToken before consent .hellomolly.co.uk Unknown - 1.1 yr lifetime over 13 months – – 3rd
inside-au9 before consent .hellomolly.com Unknown - 365 d ✓ – 1st
inside-au9 before consent .hellomolly.co.uk Unknown - 365 d ✓ – 3rd
shd_s before consent .hellomolly.com Unknown - Expired – – 1st
tf-version before consent .hellomolly.com Unknown - 365 d ✓ – 1st
tfExperimentId before consent .hellomolly.com Unknown - 1.1 yr lifetime over 13 months ✓ – 1st
_Elevar-apex before consent .hellomolly.com Unknown - 365 d ✓ – 1st
_mpxl_guid before consent .hellomolly.com Unknown - 365 d ✓ – 1st
_pin_aem before consent .hellomolly.com Unknown - 365 d – – 1st

Browser storage set by the site

Name Domain Party
__next set by www.hellomolly.com/0j4c-3qmjelot.js:6:37269 https://www.hellomolly.com 1st before consent
auth set by www.hellomolly.com/2fw9alfh6n99q.js:3:33946 https://www.hellomolly.com 1st before consent
locale-state set by www.hellomolly.com/2fw9alfh6n99q.js:3:33946 https://www.hellomolly.com 1st before consent
TriplePixel set by www.hellomolly.com/241fl9n_2-dv1.js:7:565122 https://www.hellomolly.com 1st before consent
TriplePixelU set by www.hellomolly.com/241fl9n_2-dv1.js:7:565122 https://www.hellomolly.com 1st before consent
di_pmt_wt set by www.hellomolly.com/241fl9n_2-dv1.js:7:565122 https://www.hellomolly.com 1st before consent
__tw__ https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--userId set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--sessionId set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--sessionCount set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--sessionLandingPageUrl set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--sessionLandingPageTitle set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--params set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--cookies set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
nosto:search:sessionParams:v2 set by connect.nosto.com/shopify-28120711254:76:3320 https://www.hellomolly.com 1st before consent
nosto:visit set by connect.nosto.com/shopify-28120711254:76:3214 https://www.hellomolly.com 1st before consent
_gcl_ls set by www.googletagmanager.com/gtm.js https://www.hellomolly.com 1st before consent
nosto:abTests set by connect.nosto.com/shopify-28120711254:76:3320 https://www.hellomolly.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:202:242 https://www.hellomolly.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:202:242 https://www.hellomolly.com 1st before consent
tvsci_session_tvscientific-pix-o-b0d2e5a7-5c4d-4f32-9c0a-a3bd93cb6536 set by assets.tvscipixel.com/tvscientific-pix-o-b0d2e5a7-5c4d-4f32-9c0a-a3bd93cb6536.js:1:3879 https://www.hellomolly.com 1st before consent
tvsci_universal_site_pixel_fired set by www.googletagmanager.com/gtm.js https://www.hellomolly.com 1st before consent
gc_placements_data_hello-molly-us set by assets.gocertify.me/gocertify.js:30:4923 https://www.hellomolly.com 1st before consent
__storage_test__ set by static.klaviyo.com/default~signup_forms~in_app_forms.5049b78368393.js https://www.hellomolly.com 1st before consent
klaviyoOnsite set by static.klaviyo.com/default~signup_forms~in_app_forms.5049b78368393.js https://www.hellomolly.com 1st before consent
_kla_test set by static-tracking.klaviyo.com/fender_analytics.afed75cbdca9e.js https://www.hellomolly.com 1st before consent
_kla_session_test set by static-tracking.klaviyo.com/fender_analytics.afed75cbdca9e.js https://www.hellomolly.com 1st before consent
__kl_key set by static-tracking.klaviyo.com/fender_analytics.afed75cbdca9e.js https://www.hellomolly.com 1st before consent
$referrer set by static-tracking.klaviyo.com/fender_analytics.afed75cbdca9e.js https://www.hellomolly.com 1st before consent
$last_referrer set by static-tracking.klaviyo.com/fender_analytics.afed75cbdca9e.js https://www.hellomolly.com 1st before consent
kl-post-identification-sync set by static-tracking.klaviyo.com/post_identification_sync.6795377d279ad.js https://www.hellomolly.com 1st before consent
tt_sessionId set by analytics.tiktok.com/main.MWU2MzIzODM0MQ.js:1:61530 https://www.hellomolly.com 1st before consent
tt_appInfo set by analytics.tiktok.com/main.MWU2MzIzODM0MQ.js:1:61530 https://www.hellomolly.com 1st before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MWU2MzIzODM0MQ.js:1:64560 https://www.hellomolly.com 1st before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/3117.048d2c9956720.js https://www.hellomolly.com 1st before consent
inside-au9 set by cdn9.au.inside.chat/ig.js:44:43 https://www.hellomolly.com 1st before consent
is_eu set by s.pinimg.com/main.340b6cee.js:1:93691 https://www.hellomolly.com 1st before consent
_shdls set by hellomollyfashion-usa.myshopify.com/unified.js https://www.hellomolly.com 1st before consent
___ELEVAR_GTM_SUITE--lastDlPushTimestamp set by shopify-gtm-suite.getelevar.com/dl-custom-pages.js:1:7412 https://www.hellomolly.com 1st before consent
asPageViews set by d2mjzob2nc713b.cloudfront.net/triggerRunner.js https://www.hellomolly.com 1st before consent
function getTime() { [native code] } set by d2mjzob2nc713b.cloudfront.net/widget.js https://www.hellomolly.com 1st before consent
AS_DATA_PRIVACY_DATA_REGULATED set by shopper.shop.pe/input.js:8:12794 https://www.hellomolly.com 1st before consent
asCartContents set by d2mjzob2nc713b.cloudfront.net/triggerRunner.js https://www.hellomolly.com 1st before consent
asHasViewedProductPage set by d2mjzob2nc713b.cloudfront.net/widget.js https://www.hellomolly.com 1st before consent
asProductViewHistory set by d2mjzob2nc713b.cloudfront.net/triggerRunner.js https://www.hellomolly.com 1st before consent
asTimeOnSiteValue set by d2mjzob2nc713b.cloudfront.net/triggerRunner.js https://www.hellomolly.com 1st before consent
asTimeOnSiteSetTime set by d2mjzob2nc713b.cloudfront.net/triggerRunner.js https://www.hellomolly.com 1st before consent
lastVisitedCollectionPage set by www.hellomolly.com/41yz99jf9xwvf.js:2:9511 https://www.hellomolly.com 1st before consent
__next set by www.hellomolly.co.uk/10wq-mcfd92xl.js:53:259800 https://www.hellomolly.co.uk 3rd before consent
auth set by www.hellomolly.co.uk/1hxn1lt73wb3x.js:2:46505 https://www.hellomolly.co.uk 3rd before consent
locale-state set by www.hellomolly.co.uk/1hxn1lt73wb3x.js:2:46505 https://www.hellomolly.co.uk 3rd before consent
gc_placements_data_hello-molly-gb set by assets.gocertify.me/gocertify.js:30:4923 https://www.hellomolly.co.uk 3rd before consent
forterToken set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--9fd29358 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--8ff2b28 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--e3a677a0 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
__test__ https://www.hellomolly.co.uk 3rd before consent
f3b83c8e592aef14c2204ee437d40785 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--30cb83 https://www.hellomolly.co.uk 3rd before consent
feh--330df5 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--1aea3 https://www.hellomolly.co.uk 3rd before consent
feh--c8c5bfc2 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--1bc22 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--19c44 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
nosto:search:sessionParams:v2 set by connect.nosto.com/shopify-89653510460:76:3320 https://www.hellomolly.co.uk 3rd before consent
nosto:visit set by connect.nosto.com/shopify-89653510460:76:3214 https://www.hellomolly.co.uk 3rd before consent
feh--37d28a https://www.hellomolly.co.uk 3rd before consent
feh--6bc5339 https://www.hellomolly.co.uk 3rd before consent
tt_sessionId set by analytics.tiktok.com/main.MWU2MzIzODM0Mw.js:1:61530 https://www.hellomolly.co.uk 3rd before consent
tt_appInfo set by analytics.tiktok.com/main.MWU2MzIzODM0Mw.js:1:61530 https://www.hellomolly.co.uk 3rd before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MWU2MzIzODM0Mw.js:1:64560 https://www.hellomolly.co.uk 3rd before consent
feh--c52 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--1bda6 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
inside-au9 set by cdn9.au.inside.chat/ig.js:44:43 https://www.hellomolly.co.uk 3rd before consent
feh--da4 set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
pst set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
psc set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
feh--1b2b8 https://www.hellomolly.co.uk 3rd before consent
__$intc set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent
__$intcm set by www.hellomolly.co.uk/10wq-mcfd92xl.js:3:6629 https://www.hellomolly.co.uk 3rd before consent

Third-Party Trackers

43 requests detected from 32 vendors: 44.228.85.26, 754d52521b074a6c9d301198edf68889-f552138fabf4.cdn.forter.com, 77346b43c2a14df39a89fe16b5ea2a57-f552138fabf4.cdn.forter.com, 922d02de2397431085c449a03ec9cf24-f552138fabf4.cdn.forter.com, api.config-security.com...

Analytics

16

Marketing

13

Necessary

8

Functional

1

Other

5

Vendor Category Type Domain
44.228.85.26 before consent Analytics fetch 44.228.85.26
754d52521b074a6c9d301198edf68889-f552138fabf4.cdn.forter.com before consent Analytics other 754d52521b074a6c9d301198edf68889-f552138fabf4.cdn.forter.com
77346b43c2a14df39a89fe16b5ea2a57-f552138fabf4.cdn.forter.com before consent Analytics other 77346b43c2a14df39a89fe16b5ea2a57-f552138fabf4.cdn.forter.com
922d02de2397431085c449a03ec9cf24-f552138fabf4.cdn.forter.com before consent Analytics other 922d02de2397431085c449a03ec9cf24-f552138fabf4.cdn.forter.com
api.config-security.com before consent Analytics xhr api.config-security.com
cdn0.forter.com before consent Analytics xhr cdn0.forter.com
cdn3.forter.com before consent Analytics other cdn3.forter.com
cdn6.forter.com before consent Analytics other cdn6.forter.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics) Analytics script o4509862896140288.ingest.us.sentry.io
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
Pinterest before consent Pinterest tracker domain (source: Disconnect.me, category: Content) Analytics script s.pinimg.com
shdid.me before consent Analytics fetch shdid.me
t.cfjump.com before consent Analytics script t.cfjump.com
www.google.com before consent Analytics fetch www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Audiense before consent Audiense tracker domain (source: Disconnect.me, category: Advertising) Marketing script shopify-gtm-suite.getelevar.com
Klaviyo Inc. before consent Klaviyo email marketing Marketing script static.klaviyo.com
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing Marketing script bat.bing.net
MNTN before consent MNTN tracker domain (source: Disconnect.me, category: Advertising) Marketing script dx.mountain.com
Nosto before consent Nosto tracker domain (source: Disconnect.me, category: Advertising) Marketing script nosto.stackla.com
Pinterest Inc. before consent Pinterest conversion tag Marketing pixel ct.pinterest.com
SafeOpt before consent SafeOpt tracker domain (source: Disconnect.me, category: Advertising) Marketing script shop.pe
SAP before consent SAP tracker domain (source: Disconnect.me, category: Advertising) Marketing script cdn.scarabresearch.com
TikTok before consent TikTok analytics pixel Marketing script analytics.tiktok.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive) Marketing script api-cdn.yotpo.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script addshoppers.s3.amazonaws.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d18eg7dreypte5.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Nosto Nosto tracker domain (source: Disconnect.me, category: Content) Necessary script connect.nosto.com
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
Forter before consent Forter tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script f552138fabf4.cdn4.forter.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on September 28, 2026.

Recent scans

September 28, 2026 35 43

More Cookie Compliance Reviews

Screenshot of henrikstensoneyewear.com

Site is undergoing maintenance

henrikstensoneyewear.com

Cookie report September 28, 2026
Screenshot of henrikschaefer.com

Wagner, Nietzsche, Bizet, Vilma Skäryd - Mezzo...

henrikschaefer.com

Cookie report September 28, 2026
Screenshot of henrikgabriel.com

REPUTATION SURVEY Balance Employee And Customer...

henrikgabriel.com

Cookie report September 28, 2026
Screenshot of henrikemppainen.com

One moment, please...

henrikemppainen.com

Cookie report September 28, 2026
Screenshot of henrike-redecker.com

Home | Henrike Redecker

henrike-redecker.com

Cookie report September 28, 2026
Screenshot of henrikbodin.com

Fotograf i Sundsvall för modernt bildspråk - ...

henrikbodin.com

Cookie report September 28, 2026
Screenshot of henrikbc.com

HENRIK BC - Contact

henrikbc.com

Cookie report September 28, 2026
Screenshot of henrihaanpaa.com

#97 Henri Haanpää / Haanpää Motorsport

henrihaanpaa.com

Cookie report September 28, 2026

Is hellomolly.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.

Claim hellomolly.com View pricing →