Skip to main content
hilaycha.com

hilaycha.com

https://hilaycha.com

Last scanned September 28, 2026

A cookie scan of hilaycha.com completed on September 28, 2026 found 16 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 16 third-party requests from 9 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

16

Third-party

0

Trackers

16

Vendors

9

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

16 cookies detected: 0 necessary, 10 analytics, 3 marketing

Total

16

Necessary

0

Functional

2

Analytics

10

Marketing

3

Unknown

1

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
sbjs_current before consent .hilaycha.com Analytics WooCommerce Session – – 1st
sbjs_current_add before consent .hilaycha.com Analytics WooCommerce Session – – 1st
sbjs_first before consent .hilaycha.com Analytics WooCommerce Session – – 1st
sbjs_first_add before consent .hilaycha.com Analytics WooCommerce Session – – 1st
sbjs_migrations before consent .hilaycha.com Analytics WooCommerce Session – – 1st
sbjs_session before consent .hilaycha.com Analytics WooCommerce Expired – – 1st
sbjs_udata before consent .hilaycha.com Analytics WooCommerce Session – – 1st
tk_r3d before consent .hilaycha.com Analytics WordPress 3 d – – 1st
_hjSessionUser_2899666 before consent .hilaycha.com Analytics Hotjar 365 d ✓ – 1st
_hjSession_2899666 before consent .hilaycha.com Analytics Hotjar Expired ✓ – 1st
cookielawinfo-checkbox-necessary before consent www.hilaycha.com Functional Cookie Law Info 365 d – – 1st
cookielawinfo-checkbox-non-necessary before consent www.hilaycha.com Functional Cookie Law Info 365 d – – 1st
tk_lr before consent .hilaycha.com Marketing WordPress 365 d – – 1st
tk_or before consent .hilaycha.com Marketing WordPress 1.1 yr lifetime over 13 months – – 1st
_fbp before consent .hilaycha.com Marketing Facebook 90 d – – 1st
sib_cuid before consent .www.hilaycha.com Unknown - 181 d – – 1st

Browser storage set by the site

Name Domain Party
wc set by www.hilaycha.com/cart-fragments.min.js https://www.hilaycha.com 1st before consent
wc set by www.hilaycha.com/cart-fragments.min.js https://www.hilaycha.com 1st before consent
__test__localStorage__ set by www.paypal.com/js https://www.hilaycha.com 1st before consent
__PayPalSDK_storage__ set by www.paypal.com/js https://www.hilaycha.com 1st before consent
_hjLocalStorageTest set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:217285 https://www.hilaycha.com 1st before consent
_hjSessionStorageTest set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:217510 https://www.hilaycha.com 1st before consent
brave_popup_9604_viewed set by www.hilaycha.com/brave.js https://www.hilaycha.com 1st before consent
hjViewportId set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:80374 https://www.hilaycha.com 1st before consent
hjActiveViewportIds set by script.hotjar.com/modules.e762be2b6b709245aabb.js:2:80510 https://www.hilaycha.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:202:242 https://www.hilaycha.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:202:242 https://www.hilaycha.com 1st before consent

Third-Party Trackers

16 requests detected from 9 vendors: ContentSquare, Google LLC, tawk.to Inc., Brevo, Meta Platforms, Inc....

Analytics

3

Marketing

3

Necessary

6

Functional

2

Other

2

Vendor Category Type Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) Analytics script content.hotjar.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google reCAPTCHA bot protection Functional script www.google.com
tawk.to Inc. before consent tawk.to live chat Functional script embed.tawk.to
Brevo before consent Brevo tracker domain (source: Disconnect.me, category: Advertising) Marketing script sibautomation.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Automattic Automattic tracker domain (source: Disconnect.me, category: Content) Necessary script c0.wp.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Paypal Paypal tracker domain (source: Disconnect.me, category: Content) Necessary script www.paypal.com
PayPal Holdings PayPal SDK Necessary script www.paypal.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com

Scan history

One completed scan: cookies and trackers from the scan on September 28, 2026.

Recent scans

September 28, 2026 16 16

Is hilaycha.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.