Skip to main content
lofta.com

lofta.com

https://lofta.com

Last scanned July 24, 2026

A cookie scan of lofta.com conducted on July 24, 2026 found 31 cookies and 29 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 29 third-party requests were detected from 17 vendors.

Cookies

31

Third-party

0

Trackers

29

Vendors

17

Consent banner

OneTrust

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

31 cookies detected: 2 necessary, 3 analytics, 4 marketing

Total

31

Necessary

2

Functional

2

Analytics

3

Marketing

4

Unknown

20

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .lofta.com Analytics Google Analytics 1.1 yr 1st
_ga_CLKZM5PS8Y before consent .lofta.com Analytics Google Analytics 1.1 yr 1st
_gcl_au before consent .lofta.com Analytics Google Analytics 80 d 1st
cart before consent lofta.com Functional E-commerce 21 d 1st
cart_currency before consent lofta.com Functional E-commerce 4 d 1st
_fbp before consent .lofta.com Marketing Facebook 80 d 1st
_rdt_uuid before consent .lofta.com Marketing Reddit 80 d 1st
_uetsid before consent .lofta.com Marketing Microsoft Ads Expired 1st
_uetvid before consent .lofta.com Marketing Microsoft Ads 1 yr 1st
OptanonAlertBoxClosed .lofta.com Necessary OneTrust 355 d 1st
OptanonConsent .lofta.com Necessary OneTrust 355 d 1st
ax_visitor before consent .lofta.com Unknown - 355 d 1st
checkout_continuity_service before consent lofta.com Unknown - 1.1 yr 1st
first_pla_call before consent lofta.com Unknown - 20 d 1st
localization before consent lofta.com Unknown - 355 d 1st
shopify_client_id before consent lofta.com Unknown - 355 d 1st
storefront_url before consent lofta.com Unknown - 20 d 1st
_axwrt before consent .lofta.com Unknown - 355 d 1st
_ax_last_event before consent .lofta.com Unknown - 355 d 1st
_ax_session_data before consent .lofta.com Unknown - 355 d 1st
_rsession before consent lofta.com Unknown - Expired 1st
_ruid before consent lofta.com Unknown - 1.1 yr 1st
_shopify_analytics before consent lofta.com Unknown - 355 d 1st
_shopify_essential before consent lofta.com Unknown - 355 d 1st
_shopify_marketing before consent lofta.com Unknown - 355 d 1st
_shopify_s before consent .lofta.com Unknown - Expired 1st
_shopify_y before consent .lofta.com Unknown - 355 d 1st
__apex_test__ before consent .lofta.com Unknown - Session 1st
__eventn_id before consent .lofta.com Unknown - 1.1 yr 1st
__kla_id before consent lofta.com Unknown - 1.1 yr 1st
__spdt before consent lofta.com Unknown - 355 d 1st

Third-Party Trackers

29 requests detected from 17 vendors: Google LLC, Audiense, Klaviyo Inc., Meta Platforms, Inc., Microsoft...

Analytics

2

Marketing

12

Necessary

10

Functional

0

Other

5

Vendor Category Type Domain
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Audiense before consent Audiense tracker domain (source: Disconnect.me, category: Advertising) Marketing script shopify-gtm-suite.getelevar.com
Google LLC before consent Google Ads Marketing script www.google.com
Klaviyo Inc. before consent Klaviyo email marketing Marketing script static.klaviyo.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) Marketing pixel bat.bing.com
MNTN before consent MNTN tracker domain (source: Disconnect.me, category: Advertising) Marketing script dx.mountain.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising) Marketing script www.redditstatic.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social) Marketing pixel alb.reddit.com
Spotify before consent Spotify tracker domain (source: Disconnect.me, category: Advertising) Marketing script pixels.spotify.com
Visually before consent Visually tracker domain (source: Disconnect.me, category: Advertising) Marketing script live.visually-io.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive) Marketing script cdn-widgetsrepository.yotpo.com
Affirm Affirm tracker domain (source: Disconnect.me, category: Content) Necessary script cdn1.affirm.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Gorgias Gorgias tracker domain (source: Disconnect.me, category: Content) Necessary script config.gorgias.chat
OneTrust LLC OneTrust consent management Necessary script cdn.cookielaw.org
RebuyInc RebuyInc tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.rebuyengine.com
reddit reddit tracker domain (source: Disconnect.me, category: Content) Necessary script pixel-config.reddit.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script otlp-http-production.shopifysvc.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script geolocation.onetrust.com

Scan history

One completed scan: cookies and trackers from the scan on July 24, 2026.

Recent scans

July 24, 2026 31 29

Is lofta.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.