Does ikea.at use cookies?

ikea.at uses 7 cookies, 7 of which are set by third-party domains. The site uses OneTrust as its consent management platform.

Does ikea.at use a cookie banner (CMP)?

Yes. ikea.at uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does ikea.at use?

ikea.at loads 4 third-party requests from 3 vendors, including Cloudflare Inc., OneTrust LLC, OneTrust.

How many marketing and analytics cookies does ikea.at set?

ikea.at sets 0 marketing and 0 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

Hej bei IKEA Österreich - IKEA Österreich

Item: ikea.at
Rating: 78
Author: Passiro

https://ikea.at

Last scanned July 25, 2026

A cookie scan of ikea.at performed on July 25, 2026 found 7 cookies and 4 third-party tracking requests. The site uses OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 4 third-party requests were detected from 3 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Compliance by audience

European Union

✓ Meets this model

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✓ Meets this model

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

✓ Meets this model

PIPEDA + Québec Law 25 · Consent-based

Brazil

✓ Meets this model

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

7 cookies detected: 2 necessary, 0 analytics, 0 marketing, 7 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

7 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
OptanonConsent	.ikea.com	Necessary	OneTrust	363 d	✓	–	3rd
__cf_bm	.www.ikea.com	Necessary	Cloudflare	Expired	✓	✓	3rd
guest before consent	.ikea.com	Unknown	-	28 d	✓	–	3rd
ikea_cookieconsent_at before consent	.ikea.com	Unknown	-	363 d	✓	–	3rd
ikea_geo before consent	.ikea.com	Unknown	-	Session	✓	–	3rd
ikexp_id before consent	.ikea.com	Unknown	-	363 d	✓	–	3rd
IRMW_CART_COUNT_AT before consent	.ikea.com	Unknown	-	28 d	–	–	3rd

Browser storage set by the site

Name	Domain	Party
expt-hasVisited set by www.ikea.com/index-DWPFTT2Z.js:3:4998	https://www.ikea.com	3rd	before consent
hasCieRefreshToken_at set by accounts.ikea.com/cie-utils-fragment.js:2:18571	https://www.ikea.com	3rd	before consent
cie-token-library.silent-authentication.at set by www.ikea.com/token-service-bX6svUt7.js:1:4920	https://www.ikea.com	3rd	before consent
cart-state-at set by www.ikea.com/agent-2-0-118.B23G4jKk.js:2:37862	https://www.ikea.com	3rd	before consent
cart-data-at set by www.ikea.com/agent-2-0-118.B23G4jKk.js:2:37862	https://www.ikea.com	3rd	before consent

Third-Party Trackers

4 requests detected from 3 vendors: Cloudflare Inc., OneTrust LLC, OneTrust

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
Cloudflare Inc. Cloudflare Turnstile / bot protection	Necessary	script	challenges.cloudflare.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com