Skip to main content
herograft.com

herograft.com

https://herograft.com

Last scanned September 28, 2026

A cookie scan of herograft.com completed on September 28, 2026 found 2 cookies and 3 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on CookieYes as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 3 third-party requests were detected from 3 vendors.

Cookies

2

Third-party

2

Trackers

3

Vendors

3

Consent banner

CookieYes

Scans

1

Compliance by audience

European Union

! Needs attention

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

! Needs attention

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

✓ Meets this model

PIPEDA + Québec Law 25 · Consent-based

Brazil

✓ Meets this model

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

2 cookies detected: 0 necessary, 0 analytics, 0 marketing, 2 third-party

Total

2

Necessary

0

Functional

1

Analytics

0

Marketing

0

Unknown

1

2 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
cookieyes-consent www.merit.com Functional CookieYes 365 d ✓ – 3rd
selected_lang before consent www.merit.com Unknown - 1 d – – 3rd

Browser storage set by the site

Name Domain Party
mdcSubNav set by www.merit.com/_static https://www.merit.com 3rd before consent
wpEmojiSettingsSupports set by www.merit.com/wp-emoji-loader.min.js:3:327 https://www.merit.com 3rd before consent

Third-Party Trackers

3 requests detected from 3 vendors: Automattic, CookieYes, Google LLC

Analytics

1

Marketing

0

Necessary

2

Functional

0

Other

0

Vendor Category Type Domain
Automattic before consent Automattic tracker domain (source: Disconnect.me, category: Content) Analytics script stats.wp.com
CookieYes CookieYes consent management Necessary script cdn-cookieyes.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com

Scan history

One completed scan: cookies and trackers from the scan on September 28, 2026.

Recent scans

September 28, 2026 2 3

Is herograft.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.