Does holyenergy.fr use cookies?

holyenergy.fr uses 10 cookies, 10 of which are set by third-party domains. The site uses Cookiebot as its consent management platform.

Does holyenergy.fr use a cookie banner (CMP)?

Yes. holyenergy.fr uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does holyenergy.fr use?

holyenergy.fr loads 17 third-party requests from 12 vendors, including api.reviews.io, FunctionalSoftware, Google LLC, Shopify, Klaviyo Inc..

How many marketing and analytics cookies does holyenergy.fr set?

holyenergy.fr sets 0 marketing and 0 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

holyenergy.fr

Item: holyenergy.fr
Rating: 24
Author: Passiro

https://holyenergy.fr

Last scanned September 29, 2026

A cookie scan of holyenergy.fr conducted on September 29, 2026 found 10 cookies and 17 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 17 third-party requests were detected from 12 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

10 cookies detected: 0 necessary, 0 analytics, 0 marketing, 10 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

10 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cart before consent	fr.holy.com	Functional	E-commerce	91 d	–	–	3rd
cart_currency before consent	fr.holy.com	Functional	E-commerce	91 d	–	–	3rd
localization before consent	fr.holy.com	Functional	Shopify	365 d	–	–	3rd
_shopify_essential before consent	fr.holy.com	Functional	Shopify	365 d	✓	✓	3rd
ssn_ct_anon_id before consent	.holy.com	Unknown	-	365 d	–	–	3rd
ssn_ct_ssn_id before consent	.holy.com	Unknown	-	365 d	–	–	3rd
ssn_int_ct_anon_id before consent	.holy.com	Unknown	-	365 d	–	–	3rd
ssn_int_ct_ssn_id before consent	.holy.com	Unknown	-	365 d	–	–	3rd
_wasCartRecreated before consent	fr.holy.com	Unknown	-	14 d	–	–	3rd
__ln_uid before consent	.holy.com	Unknown	-	365 d	–	–	3rd

Browser storage set by the site

Name	Domain	Party
localstorage.test set by sst.holy.com/5ubktooao.js	https://fr.holy.com	3rd	before consent
consentHeader set by fr.holy.com/trekkie.storefront.f1ba865b3fecd812ad617f74ac079261075e9edb.min.js:1:100396	https://fr.holy.com	3rd	before consent
ssn_script_status set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
ssn_ga_hit_counter set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
ssn_session_type set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
_xsd set by sst.holy.com/5ubktooao.js	https://fr.holy.com	3rd	before consent
selectedVariant set by fr.holy.com/index.js	https://fr.holy.com	3rd	before consent
wr_menu_ping_ts set by cdn.shopify.com/widerruf-button.js:496:34	https://fr.holy.com	3rd	before consent
_shs_state set by fr.holy.com/shopify-perf-kit-3.9.4.min.js:1:51578	https://fr.holy.com	3rd	before consent
shopCountryCode set by fr.holy.com/:1366:24	https://fr.holy.com	3rd	before consent
ssn_ct_identified set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
loyaltylion_localstorage_test set by sdk-static.loyaltylion.net/lion-loader-dc37a7f5af12101c.js:2:74937	https://fr.holy.com	3rd	before consent
loyaltylion_sessionstorage_test set by sdk-static.loyaltylion.net/lion-loader-dc37a7f5af12101c.js:2:75715	https://fr.holy.com	3rd	before consent
loyaltylion_persistent_data set by sdk-static.loyaltylion.net/lion-loader-dc37a7f5af12101c.js:2:75378	https://fr.holy.com	3rd	before consent
loyaltylion_temporary_data set by sdk-static.loyaltylion.net/lion-loader-dc37a7f5af12101c.js:2:76119	https://fr.holy.com	3rd	before consent
shopify:webmcp_adapter_loaded set by fr.holy.com/:1079:256	https://fr.holy.com	3rd	before consent
__storage_test__ set by static.klaviyo.com/default~signup_forms~in_app_forms.5049b78368393.js	https://fr.holy.com	3rd	before consent
klaviyoOnsite set by static.klaviyo.com/default~signup_forms~in_app_forms.5049b78368393.js	https://fr.holy.com	3rd	before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/3117.048d2c9956720.js	https://fr.holy.com	3rd	before consent
theme:recently-viewed-products set by fr.holy.com/syrup-mix-and-match:925:20	https://fr.holy.com	3rd	before consent
ssn_ct_ssn_id set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
ssn_ct_ssn_id set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
ssn_ct_ssn_last_seen set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
ssn_ct_anon_id set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
ssn_ct_anon_id set by fr.holy.com/wgs.bundle.js	https://fr.holy.com	3rd	before consent
hive_delivery_promise_model_version set by app.hive.app/delivery_promise_script.js	https://fr.holy.com	3rd	before consent
hive_delivery_promise_invalid_country_response set by app.hive.app/delivery_promise_script.js	https://fr.holy.com	3rd	before consent

Third-Party Trackers

17 requests detected from 12 vendors: api.reviews.io, FunctionalSoftware, Google LLC, Shopify, Klaviyo Inc....

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
api.reviews.io before consent	Analytics	xhr	api.reviews.io
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o1123257.ingest.us.sentry.io
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o460851.ingest.us.sentry.io
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	analytics.google.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	otlp-http-production.shopifysvc.com
Klaviyo Inc. before consent Klaviyo email marketing	Marketing	script	static.klaviyo.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing	Marketing	script	bat.bing.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d19ayerf5ehaab.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	shop.app
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com