Does hortiloc.ca use cookies?

hortiloc.ca uses 6 cookies. No consent management platform was detected.

Does hortiloc.ca use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on hortiloc.ca. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does hortiloc.ca use?

hortiloc.ca loads 16 third-party requests from 10 vendors, including frog.wix.com, Microsoft, panorama.wixapps.net, Sentry (Functional Software), syndication.twitter.com.

How many marketing and analytics cookies does hortiloc.ca set?

hortiloc.ca sets 1 marketing and 0 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

hortiloc.ca

Item: hortiloc.ca
Rating: 36
Author: Passiro

https://hortiloc.ca

Last scanned September 30, 2026

A cookie scan of hortiloc.ca completed on September 30, 2026 found 6 cookies and 16 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 16 third-party requests from 10 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

6 cookies detected: 2 necessary, 0 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
hs before consent	.www.hortiloc.ca	Functional	Wix.com	Session	✓	✓	1st
server-session-bind before consent	www.hortiloc.ca	Functional	Wix.com	Session	✓	✓	1st
ssr-caching before consent	www.hortiloc.ca	Functional	Wix.com	Expired	–	–	1st
svSession before consent	.www.hortiloc.ca	Marketing	Wix.com	1.1 yr lifetime over 13 months	✓	✓	1st
XSRF-TOKEN	.www.hortiloc.ca	Necessary	CSRF Protection	Session	✓	–	1st
__cf_bm	.www.hortiloc.ca	Necessary	Cloudflare	Expired	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
mpaSessionId set by www.hortiloc.ca/:891:5497	https://www.hortiloc.ca	1st	before consent
fedops.logger.sessionId set by static.parastorage.com/main.f9375119.bundle.min.js:1:100037	https://www.hortiloc.ca	1st	before consent
hideGoogleReviewsWidget set by mkp-prod.nyc3.cdn.digitaloceanspaces.com/google-reviews-script.js	https://www.hortiloc.ca	1st	before consent

Third-Party Trackers

16 requests detected from 10 vendors: frog.wix.com, Microsoft, panorama.wixapps.net, Sentry (Functional Software), syndication.twitter.com...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
frog.wix.com before consent	Analytics	other	frog.wix.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
panorama.wixapps.net before consent	Analytics	other	panorama.wixapps.net
Sentry (Functional Software) before consent Sentry browser SDK	Analytics	script	browser.sentry-cdn.com
syndication.twitter.com before consent	Analytics	pixel	syndication.twitter.com
The Website Intelligence Platform before consent The Website Intelligence Platform tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	app-worker.visitor-analytics.io
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
Meta Platforms, Inc. before consent Facebook social plugins	Marketing	iframe	www.facebook.com
X Corp (Twitter) before consent X/Twitter platform widgets	Marketing	script	platform.twitter.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com