Does hqo.com use cookies?

hqo.com uses 13 cookies. The site uses CookieYes as its consent management platform.

Does hqo.com use a cookie banner (CMP)?

Yes. hqo.com uses CookieYes as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does hqo.com use?

hqo.com loads 20 third-party requests from 14 vendors, including Adobe, Google LLC, HubSpot, Mouseflow, Adobe Fonts.

How many marketing and analytics cookies does hqo.com set?

hqo.com sets 0 marketing and 10 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

hqo.com

Item: hqo.com
Rating: 8
Author: Passiro

https://hqo.com

Last scanned September 30, 2026

A cookie scan of hqo.com performed on September 30, 2026 found 13 cookies and 20 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs CookieYes as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 20 third-party requests were detected from 14 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

CookieYes

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

13 cookies detected: 2 necessary, 10 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
hubspotutk before consent	.hqo.com	Analytics	HubSpot	180 d	–	–	1st
_vis_opt_s before consent	.hqo.com	Analytics	VWO	100 d	–	–	1st
_vis_opt_test_cookie before consent	.hqo.com	Analytics	VWO	Session	–	–	1st
_vwo_ds before consent	.hqo.com	Analytics	VWO	7 d	–	–	1st
_vwo_sn before consent	.hqo.com	Analytics	VWO	Expired	–	–	1st
_vwo_uuid before consent	.hqo.com	Analytics	VWO	365 d	–	–	1st
_vwo_uuid_v2 before consent	.hqo.com	Analytics	VWO	1 yr	–	–	1st
__hssc before consent	.hqo.com	Analytics	HubSpot	Expired	–	–	1st
__hssrc before consent	.hqo.com	Analytics	HubSpot	Session	–	–	1st
__hstc before consent	.hqo.com	Analytics	HubSpot	180 d	–	–	1st
cookieyes-consent	www.hqo.com	Functional	CookieYes	365 d	✓	–	1st
__cf_bm	.hqo.com	Necessary	Cloudflare	Expired	✓	✓	1st
__cf_bm	.www.hqo.com	Necessary	Cloudflare	Expired	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
vwoSn	https://www.hqo.com	1st	before consent
_vwo_818450_config	https://www.hqo.com	1st	before consent
mf_supportsLocalStorage set by cdn.mouseflow.com/148b957e-140d-4880-bfdf-b0231d4dd760.js:1:50128	https://www.hqo.com	1st	before consent
_vwo_nls_q_818450	https://www.hqo.com	1st	before consent
uw-uid set by cdn.userway.org/widget_app_base_1790678002737.js:4:22982	https://www.hqo.com	1st	before consent
uw-tunings set by cdn.userway.org/widget_app_base_1790678002737.js:3:14088	https://www.hqo.com	1st	before consent
uw-tunings-checksum set by cdn.userway.org/widget_app_base_1790678002737.js:3:14125	https://www.hqo.com	1st	before consent
uw-icon-locales set by cdn.userway.org/widget_app_base_1790678002737.js:2:27666	https://www.hqo.com	1st	before consent

Third-Party Trackers

20 requests detected from 14 vendors: Adobe, Google LLC, HubSpot, Mouseflow, Adobe Fonts...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	191-nat-809.mktoresp.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.googleoptimize.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	js-na2.hs-analytics.net
Mouseflow before consent Mouseflow tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	cdn.mouseflow.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Font Awesome before consent Font Awesome CDN: icon font and CSS delivery	Functional	script	use.fontawesome.com
Vimeo Inc. before consent Vimeo video embed	Functional	iframe	player.vimeo.com
Adobe Marketo before consent Marketo Munchkin tracking	Marketing	script	munchkin.marketo.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js-na2.hs-scripts.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js-na2.hscollectedforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js-na2.hs-banner.com
HubSpot Inc. before consent HubSpot marketing & CRM	Marketing	script	api-na2.hubspot.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ddwl4m2hdecbv.cloudfront.net
Automattic Automattic tracker domain (source: Disconnect.me, category: Content)	Necessary	script	secure.gravatar.com
CookieYes CookieYes consent management	Necessary	script	cdn-cookieyes.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	js-na2.usemessages.com
Wingify Wingify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	dev.visualwebsiteoptimizer.com
TrustARC TrustARC tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consent.trustarc.com