Skip to main content
holyflowers.com

holyflowers.com

https://holyflowers.com

Last scanned September 29, 2026

A cookie scan of holyflowers.com completed on September 29, 2026 found 5 cookies and 11 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 11 third-party requests from 5 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

5

Third-party

1

Trackers

11

Vendors

5

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

5 cookies detected: 0 necessary, 1 analytics, 0 marketing, 1 third-party

Total

5

Necessary

0

Functional

4

Analytics

1

Marketing

0

Unknown

0

1 third-party cookie detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_gcl_au before consent .holyflowers.com Analytics Google Analytics 90 d – – 1st
cart_currency before consent holyflowers.com Functional E-commerce 14 d – – 1st
localization before consent holyflowers.com Functional Shopify 365 d – – 1st
_shopify_essential before consent holyflowers.com Functional Shopify 365 d ✓ ✓ 1st
_shopify_essential before consent account.holyflowers.de Functional Shopify 365 d ✓ ✓ 3rd

Browser storage set by the site

Name Domain Party
consentHeader set by holyflowers.com/shopify-perf-kit-3.9.4.min.js:1:7955 https://holyflowers.com 1st before consent
_shs_state set by holyflowers.com/shopify-perf-kit-3.9.4.min.js:1:51578 https://holyflowers.com 1st before consent
storage-compatibility-test set by cdn.shopify.com/upcart-bundle.js:14:8721 https://holyflowers.com 1st before consent
upcart-traffic-allocation-random set by cdn.shopify.com/upcart-bundle.js:435:24537 https://holyflowers.com 1st before consent
storage-compatibility-test set by cdn.shopify.com/upcart-bundle.js:14:8721 https://holyflowers.com 1st before consent
upcart_cached_product_is_bundle set by cdn.shopify.com/upcart-bundle.js:14:9124 https://holyflowers.com 1st before consent
upcart_cached_compare_at_prices_currency set by cdn.shopify.com/upcart-bundle.js:14:9124 https://holyflowers.com 1st before consent
shopify:webmcp_adapter_loaded set by holyflowers.com/:494:256 https://holyflowers.com 1st before consent
_gcl_ls set by holyflowers.com/ba5bf51cfwabd6c495p49b74ff1maa529d2bm.js:1:193205 https://holyflowers.com 1st before consent
theme:recently-viewed-products set by holyflowers.com/forever-love-infinity-rose-heart-xl:1735:18 https://holyflowers.com 1st before consent

Third-Party Trackers

11 requests detected from 5 vendors: Google LLC, Shopify, Shopify Inc., www.google.com, Amazon

Analytics

5

Marketing

0

Necessary

5

Functional

0

Other

1

Vendor Category Type Domain
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script error-analytics-sessions-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics Analytics pixel monorail-edge.shopifysvc.com
www.google.com before consent Analytics fetch www.google.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d1liekpayvooaz.cloudfront.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script customizery.s3.amazonaws.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script storage.googleapis.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on September 29, 2026.

Recent scans

September 29, 2026 5 11

Is holyflowers.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.