Does hughwood.com use cookies?

hughwood.com uses 5 cookies, 5 of which are set by third-party domains. The site uses OneTrust as its consent management platform.

Does hughwood.com use a cookie banner (CMP)?

Yes. hughwood.com uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does hughwood.com use?

hughwood.com loads 12 third-party requests from 7 vendors, including Cloudflare Inc., Google LLC, HubSpot, HubSpot Inc., Adobe Fonts.

How many marketing and analytics cookies does hughwood.com set?

hughwood.com sets 0 marketing and 0 analytics cookies, alongside 5 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

hughwood.com

Item: hughwood.com
Rating: 55
Author: Passiro

https://hughwood.com

Last scanned September 30, 2026

A cookie scan of hughwood.com performed on September 30, 2026 found 5 cookies and 12 third-party tracking requests. The site relies on OneTrust as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 12 third-party requests were detected from 7 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

5 cookies detected: 5 necessary, 0 analytics, 0 marketing, 5 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

5 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cf_clearance	.bbrown.com	Necessary	Cloudflare	363 d	✓	✓	3rd
OptanonConsent	.bbrown.com	Necessary	OneTrust	365 d	–	–	3rd
_cfuvid	.us.bbrown.com	Necessary	Cloudflare	Session	✓	✓	3rd
__cf_bm	.us.bbrown.com	Necessary	Cloudflare	Expired	✓	✓	3rd
__cf_bm	.bbrown.com	Necessary	Cloudflare	Expired	✓	✓	3rd

Third-Party Trackers

12 requests detected from 7 vendors: Cloudflare Inc., Google LLC, HubSpot, HubSpot Inc., Adobe Fonts...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content)	Analytics	script	forms-na1.hsforms.com
HubSpot Inc. before consent HubSpot analytics	Analytics	script	js.hs-analytics.net
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
HubSpot Inc. before consent HubSpot forms	Functional	script	js.hsforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	api.hubapi.com
HubSpot Inc. before consent HubSpot marketing & CRM	Marketing	script	app.hubspot.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com