Does hz.de use cookies?

hz.de uses 4 cookies. The site uses consentmanager as its consent management platform.

Does hz.de use a cookie banner (CMP)?

Yes. hz.de uses consentmanager as its consent management platform. IAB TCF v2.3 consent signals were detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does hz.de use?

hz.de loads 9 third-party requests from 9 vendors, including adnz.co, files.upscore.com, hit-pool.upscore.com, hl.upscore.com, static.cleverpush.com.

How many marketing and analytics cookies does hz.de set?

hz.de sets 0 marketing and 2 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

hz.de

Item: hz.de
Rating: 44
Author: Passiro

https://hz.de

Last scanned October 1, 2026

A cookie scan of hz.de completed on October 1, 2026 found 4 cookies and 9 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on consentmanager as its consent management platform with IAB TCF v2.3 and Google Consent Mode v2. 9 third-party requests were detected from 9 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

consentmanager

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

4 cookies detected: 0 necessary, 2 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_sp_id.bce2 before consent	.hz.de	Analytics	Snowplow	1 yr	✓	–	1st
_sp_ses.bce2 before consent	.hz.de	Analytics	Snowplow	Expired	✓	–	1st
__cmpcccu91351	.hz.de	Functional	Consentmanager.net	Expired	✓	–	1st
__cmpconsent91351	.hz.de	Functional	Consentmanager.net	Expired	✓	–	1st

Browser storage set by the site

Name	Domain	Party
currentView set by www.hz.de/chunk-ZH6ZNVE5.js:23:27118	https://www.hz.de	1st	before consent
lastView set by www.hz.de/chunk-ZH6ZNVE5.js:12:21586	https://www.hz.de	1st	before consent
lastVisitedPath set by www.hz.de/chunk-P2VMNUBR.js:1:6180	https://www.hz.de	1st	before consent
modernizr set by d1g10ri6vav3ja.cloudfront.net/latest.js	https://www.hz.de	1st	before consent
snowplowOutQueue_drive_DriveTracker_post2.expires set by d1g10ri6vav3ja.cloudfront.net/latest.js	https://www.hz.de	1st	before consent
snowplowOutQueue_drive_DriveTracker_post2 set by d1g10ri6vav3ja.cloudfront.net/latest.js	https://www.hz.de	1st	before consent
cmp_gpcConsentModeEligible.ba6f39d772d9d set by b.delivery.consentmanager.net/cmp.php	https://www.hz.de	1st	before consent
__cmpconsent91351_.hz.de set by cdn.consentmanager.net/cmp_final.min.js	https://www.hz.de	1st	before consent
__cmpconsent91351_expire_.hz.de set by cdn.consentmanager.net/cmp_final.min.js	https://www.hz.de	1st	before consent
__cmpcccu91351_.hz.de set by cdn.consentmanager.net/cmp_final.min.js	https://www.hz.de	1st	before consent
__cmpcccu91351_expire_.hz.de set by cdn.consentmanager.net/cmp_final.min.js	https://www.hz.de	1st	before consent
htag.priorityCreativeIds set by adnz.co/header.js	https://www.hz.de	1st	before consent
tagId set by adnz.co/header.js	https://www.hz.de	1st	before consent
ay_c set by pmtae6gdwwnlfghxs.ay.delivery/client-v2.js:7:29727	https://www.hz.de	1st	before consent
ay_s set by pmtae6gdwwnlfghxs.ay.delivery/client-v2.js:7:31114	https://www.hz.de	1st	before consent
deviceId set by www.hz.de/main-XBXSLMCQ.js:5:4164	https://www.hz.de	1st	before consent
cleverpush-forced-opt-in-reset-at set by static.cleverpush.com/4005.3bbeda18ec33c7187531.js:1:1927	https://www.hz.de	1st	before consent

Third-Party Trackers

9 requests detected from 9 vendors: adnz.co, files.upscore.com, hit-pool.upscore.com, hl.upscore.com, static.cleverpush.com...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
adnz.co before consent	Analytics	script	adnz.co
files.upscore.com before consent	Analytics	script	files.upscore.com
hit-pool.upscore.com before consent	Analytics	other	hit-pool.upscore.com
hl.upscore.com before consent	Analytics	fetch	hl.upscore.com
static.cleverpush.com before consent	Analytics	script	static.cleverpush.com
AssertiveYield before consent AssertiveYield tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	pmtae6gdwwnlfghxs.ay.delivery
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1g10ri6vav3ja.cloudfront.net
consentmanager GmbH consentmanager CMP	Necessary	script	cdn.consentmanager.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	securepubads.g.doubleclick.net