Skip to main content
hiasjcore.org.uk

hiasjcore.org.uk

https://hiasjcore.org.uk

Last scanned September 28, 2026

A cookie scan of hiasjcore.org.uk performed on September 28, 2026 found 6 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 16 third-party requests were detected from 7 vendors.

Cookies

6

Third-party

0

Trackers

16

Vendors

7

Consent banner

CookieYes

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

6 cookies detected: 1 necessary, 2 analytics, 0 marketing

Total

6

Necessary

1

Functional

1

Analytics

2

Marketing

0

Unknown

2

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .hiasjcore.org.uk Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_ga_MBV9E13KL5 before consent .hiasjcore.org.uk Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
cookieyes-consent hiasjcore.org.uk Functional CookieYes 365 d – – 1st
PHPSESSID hiasjcore.org.uk Necessary PHP 23 d – – 1st
hias-popup before consent hiasjcore.org.uk Unknown - 1 d – – 1st
mcforms-218154158-sessionId before consent hiasjcore.org.uk Unknown - Session – – 1st

Browser storage set by the site

Name Domain Party
__wpDataTestLocalStorage set by hiasjcore.org.uk/data.min.js https://hiasjcore.org.uk 1st before consent
mcforms-218154158-session set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent
mcforms-218154158-lastEvents set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent
mcforms_event_218154158 set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent
mcforms-218154158-pageviews set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent
mcforms-218154158-state set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent
mcforms-218154158-experienceConfigVersion set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent
mcforms-218154158-timeQueueEvents set by form-assets.mailchimp.com/218154158 https://hiasjcore.org.uk 1st before consent

Third-Party Trackers

16 requests detected from 7 vendors: eventcollector.mcf-prod.a.intuit.com, Google LLC, Stripe Inc., Intuit, Amazon...

Analytics

3

Marketing

3

Necessary

7

Functional

0

Other

3

Vendor Category Type Domain
eventcollector.mcf-prod.a.intuit.com before consent Analytics xhr eventcollector.mcf-prod.a.intuit.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Stripe Inc. before consent Stripe fraud detection Analytics script m.stripe.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) Marketing script chimpstatic.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) Marketing script form-assets.mailchimp.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) Marketing script cdn-images.mailchimp.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script s3.amazonaws.com
Cloudflare Inc. Cloudflare CDNJS Necessary script cdnjs.cloudflare.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Stripe Inc. Stripe payment processing Necessary script js.stripe.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Anti-fraud) Unknown script www.recaptcha.net
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script m.stripe.network

Scan history

One completed scan: cookies and trackers from the scan on September 28, 2026.

Recent scans

September 28, 2026 6 16

Is hiasjcore.org.uk your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.