Skip to main content
lashadora.com

lashadora.com

https://lashadora.com

Last scanned October 16, 2026

A cookie scan of lashadora.com conducted on October 16, 2026 found 7 cookies and 17 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 17 third-party requests were detected from 10 vendors.

Cookies

7

Third-party

0

Trackers

17

Vendors

10

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Google Consent Mode v2 is present but does not default to denied for all storage types.
  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

7 cookies detected: 1 necessary, 2 analytics, 1 marketing

Total

7

Necessary

1

Functional

3

Analytics

2

Marketing

1

Unknown

0

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .lashadora.com Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
_ga_L9JB3MHXTY before consent .lashadora.com Analytics Google Analytics 1.1 yr lifetime over 13 months – – 1st
cart_currency before consent lashadora.com Functional E-commerce 14 d – – 1st
localization before consent lashadora.com Functional Shopify 365 d – – 1st
_shopify_essential before consent lashadora.com Functional Shopify 365 d ✓ ✓ 1st
_gcl_au before consent .lashadora.com Marketing Google Ads 90 d – – 1st
CookieConsent lashadora.com Necessary Cookie Consent Session ✓ – 1st

Browser storage set by the site

Name Domain Party
loyaltylion_localstorage_test set by sdk-static.loyaltylion.net/lion-loader-09a3a69785f70573.js:2:74937 https://lashadora.com 1st before consent
loyaltylion_sessionstorage_test set by sdk-static.loyaltylion.net/lion-loader-09a3a69785f70573.js:2:75715 https://lashadora.com 1st before consent
consentHeader set by lashadora.com/b957c9fdbw3fdd5ae0p166c77f8m3762736bm.js:1:87810 https://lashadora.com 1st before consent
_shs_state set by lashadora.com/shopify-perf-kit-3.11.0.min.js:1:51963 https://lashadora.com 1st before consent
_gcl_ls set by www.googletagmanager.com/gtm.js https://lashadora.com 1st before consent
cookiebottest set by consent.cookiebot.com/uc.js:2:69569 https://lashadora.com 1st before consent
shopify:webmcp_adapter_loaded set by lashadora.com/cart:279:256 https://lashadora.com 1st before consent

Third-Party Trackers

17 requests detected from 10 vendors: Amazon, Google LLC, Shopify, SmartBear, www.google.com...

Analytics

6

Marketing

1

Necessary

5

Functional

1

Other

4

Vendor Category Type Domain
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Content) Analytics script d2wy8f7a9ursnm.cloudfront.net
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
SmartBear before consent SmartBear tracker domain (source: Disconnect.me, category: Analytics) Analytics script sessions.bugsnag.com
www.google.com before consent Analytics fetch www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on October 16, 2026.

Recent scans

October 16, 2026 7 17

Is lashadora.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.