Does loqued.com use cookies?

loqued.com uses 24 cookies, 24 of which are set by third-party domains. The site uses Cookiebot as its consent management platform.

Does loqued.com use a cookie banner (CMP)?

Yes. loqued.com uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

How many marketing and analytics cookies does loqued.com set?

loqued.com sets 3 marketing and 3 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

loqued.com

Item: loqued.com
Rating: 8
Author: Passiro

https://loqued.com

Last scanned October 20, 2026

A cookie scan of loqued.com completed on October 20, 2026 found 24 cookies and 40 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 40 third-party requests were detected from 32 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

24 cookies detected: 0 necessary, 3 analytics, 3 marketing, 24 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

24 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_hjHasCachedUserAttributes before consent	www.shelly.com	Analytics	Hotjar	Session	✓	–	3rd
_hjSessionUser_3425080 before consent	.shelly.com	Analytics	Hotjar	365 d	✓	–	3rd
_hjSession_3425080 before consent	.shelly.com	Analytics	Hotjar	Expired	✓	–	3rd
cart before consent	www.shelly.com	Functional	E-commerce	91 d	–	–	3rd
cart_currency before consent	www.shelly.com	Functional	E-commerce	14 d	–	–	3rd
localization before consent	www.shelly.com	Functional	Shopify	365 d	–	–	3rd
_shopify_essential before consent	www.shelly.com	Functional	Shopify	365 d	✓	✓	3rd
_fbp before consent	.shelly.com	Marketing	Facebook	90 d	–	–	3rd
_pin_unauth before consent	.shelly.com	Marketing	Pinterest	365 d	–	–	3rd
_rdt_uuid before consent	.shelly.com	Marketing	Reddit	90 d	✓	–	3rd
already_visited before consent	www.shelly.com	Unknown	-	60 d	–	–	3rd
forterToken before consent	.shelly.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	3rd
GE_ESSENTIALS_ONLY before consent	.www.shelly.com	Unknown	-	365 d	–	–	3rd
GlobalE_Consent before consent	.www.shelly.com	Unknown	-	Session	–	–	3rd
ig-fv before consent	.shelly.com	Unknown	-	365 d	–	–	3rd
ig-id before consent	.shelly.com	Unknown	-	365 d	–	–	3rd
ig-location before consent	www.shelly.com	Unknown	-	Expired	✓	–	3rd
ig-pv before consent	.shelly.com	Unknown	-	365 d	–	–	3rd
ig-vars before consent	.shelly.com	Unknown	-	365 d	–	–	3rd
magic_id before consent	www.shelly.com	Unknown	-	Session	–	–	3rd
september_id before consent	www.shelly.com	Unknown	-	Session	–	–	3rd
_pin_aem before consent	.shelly.com	Unknown	-	365 d	–	–	3rd
_twpid before consent	.shelly.com	Unknown	-	1.1 yr	✓	–	3rd
_twsid before consent	.shelly.com	Unknown	-	1.1 yr	✓	–	3rd

Browser storage set by the site

Name	Domain	Party
shelly-last-market set by www.shelly.com/shelly-loqed-smart-locks:1724:22	https://www.shelly.com	3rd	before consent
consentHeader set by www.shelly.com/trekkie.storefront.6efba1340ec6769622eb0d10b5cb070d43fb8d55.min.js:1:98506	https://www.shelly.com	3rd	before consent
ig-vars set by cdn.intelligems.io/bundle.js:2:13382	https://www.shelly.com	3rd	before consent
ig-fv set by cdn.intelligems.io/bundle.js:2:11333	https://www.shelly.com	3rd	before consent
_shs_state set by www.shelly.com/shopify-perf-kit-3.11.0.min.js:1:51963	https://www.shelly.com	3rd	before consent
GlobalE_Analytics_UTMs set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198628	https://www.shelly.com	3rd	before consent
GlobalE_Analytics_Borderfree set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198628	https://www.shelly.com	3rd	before consent
GlobalE_Analytics set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198262	https://www.shelly.com	3rd	before consent
GE_UTM_PARAMS set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198628	https://www.shelly.com	3rd	before consent
shopify:webmcp_adapter_loaded set by www.shelly.com/shelly-loqed-smart-locks:828:256	https://www.shelly.com	3rd	before consent
__klarna_sdk_version set by js.klarna.com/klarna.js:1:40336	https://www.shelly.com	3rd	before consent
__klarna_sdk_default-config set by js.klarna.com/sdk.js:2:294911	https://www.shelly.com	3rd	before consent
__klarna_sdk_identity-api set by js.klarna.com/sdk.js:2:294911	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--cart set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
__storage_test__ set by static.klaviyo.com/default~signup_forms~in_app_forms.78936b0a2c94d.js	https://www.shelly.com	3rd	before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/5663.300a1debec799.js	https://www.shelly.com	3rd	before consent
klaviyoFormSetting set by static.klaviyo.com/default~signup_forms~in_app_forms.78936b0a2c94d.js	https://www.shelly.com	3rd	before consent
_test set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198262	https://www.shelly.com	3rd	before consent
shl_hj_sampled set by www.shelly.com/shelly-loqed-smart-locks:950:28	https://www.shelly.com	3rd	before consent
ig-id set by cdn.intelligems.io/bundle.js:2:113643	https://www.shelly.com	3rd	before consent
klaviyoOnsite set by static.klaviyo.com/default~signup_forms~in_app_forms.78936b0a2c94d.js	https://www.shelly.com	3rd	before consent
september_id set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198262	https://www.shelly.com	3rd	before consent
_upf_fingerprint set by www.shelly.com/b05c62d7ewbe538af9pdeb4fec1me339d55am.js:1:198262	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--sessionId set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--sessionCount set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--sessionLandingPageUrl set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--sessionLandingPageTitle set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--lastDlPushTimestamp set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--params set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
___ELEVAR_GTM_SUITE--cookies set by www.shelly.com/dl-app-embed-block.js:1:7412	https://www.shelly.com	3rd	before consent
_rdt_cfg set by www.redditstatic.com/pixel.js:1:68376	https://www.shelly.com	3rd	before consent
is_eu set by s.pinimg.com/main.f1fea82a.js:1:95144	https://www.shelly.com	3rd	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:204:242	https://www.shelly.com	3rd	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:204:242	https://www.shelly.com	3rd	before consent

Third-Party Trackers

40 requests detected from 32 vendors: 013889a0d0c94729ab2ce303bf1f4a3b-7ce243a1e1a2.cdn.forter.com, abd05d2a6f0e4adc841624dd386ee925-7ce243a1e1a2.cdn.forter.com, Amazon, api.intelligems.io, ca3a2bad4a334875b145acbde429cded-7ce243a1e1a2.cdn.forter.com...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
013889a0d0c94729ab2ce303bf1f4a3b-7ce243a1e1a2.cdn.forter.com before consent	Analytics	other	013889a0d0c94729ab2ce303bf1f4a3b-7ce243a1e1a2.cdn.forter.com
abd05d2a6f0e4adc841624dd386ee925-7ce243a1e1a2.cdn.forter.com before consent	Analytics	other	abd05d2a6f0e4adc841624dd386ee925-7ce243a1e1a2.cdn.forter.com
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Content)	Analytics	script	d2o5idwacg3gyw.cloudfront.net
api.intelligems.io before consent	Analytics	fetch	api.intelligems.io
ca3a2bad4a334875b145acbde429cded-7ce243a1e1a2.cdn.forter.com before consent	Analytics	other	ca3a2bad4a334875b145acbde429cded-7ce243a1e1a2.cdn.forter.com
cdn0.forter.com before consent	Analytics	xhr	cdn0.forter.com
cdn3.forter.com before consent	Analytics	other	cdn3.forter.com
cdn6.forter.com before consent	Analytics	other	cdn6.forter.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
july.klarinsights.net before consent	Analytics	fetch	july.klarinsights.net
o.gsitrix.com before consent	Analytics	script	o.gsitrix.com
p.gsitrix.com before consent	Analytics	script	p.gsitrix.com
Pinterest before consent Pinterest tracker domain (source: Disconnect.me, category: Content)	Analytics	script	s.pinimg.com
september.klarinsights.net before consent	Analytics	fetch	september.klarinsights.net
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	otlp-http-production.shopifysvc.com
tracking.upfluence.co before consent	Analytics	script	tracking.upfluence.co
Accessibe before consent Accessibe tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	acsbapp.com
Audiense before consent Audiense tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	shopify-gtm-suite.getelevar.com
Klaviyo Inc. before consent Klaviyo email marketing	Marketing	script	static.klaviyo.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
Microsoft Advertising before consent Microsoft Advertising (Bing Ads) UET tag: conversion tracking and remarketing	Marketing	script	bat.bing.net
Pinterest Inc. before consent Pinterest conversion tag	Marketing	pixel	ct.pinterest.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	www.redditstatic.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social)	Marketing	pixel	alb.reddit.com
X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	static.ads-twitter.com
X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	t.co
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
reddit reddit tracker domain (source: Disconnect.me, category: Content)	Necessary	script	pixel-config.reddit.com
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
Awin before consent Awin tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.dwin1.com
FingerprintJS before consent FingerprintJS tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	openfpcdn.io
Forter before consent Forter tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	7ce243a1e1a2.cdn4.forter.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com