Does luciavanille.fr use cookies?

luciavanille.fr uses 11 cookies, 7 of which are set by third-party domains. The site uses Didomi as its consent management platform.

Does luciavanille.fr use a cookie banner (CMP)?

Yes. luciavanille.fr uses Didomi as its consent management platform. IAB TCF v2.3 consent signals were detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does luciavanille.fr use?

luciavanille.fr loads 18 third-party requests from 9 vendors, including Piano, Stripe Inc., Google LLC, Cloudflare Inc., ElfSight.

How many marketing and analytics cookies does luciavanille.fr set?

luciavanille.fr sets 0 marketing and 0 analytics cookies, alongside 3 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

luciavanille.fr

Item: luciavanille.fr
Rating: 9
Author: Passiro

https://luciavanille.fr

Last scanned October 20, 2026

A cookie scan of luciavanille.fr conducted on October 20, 2026 found 11 cookies and 18 third-party tracking requests. The assessment covered 6 pages across 6 unique page templates. The site uses Didomi as its consent management platform with IAB TCF v2.3 and Google Consent Mode v2. 18 third-party requests were detected from 9 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Didomi

Scans

What this setup is missing

Google Consent Mode v2 is present but does not default to denied for all storage types.
No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

11 cookies detected: 3 necessary, 0 analytics, 0 marketing, 7 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

7 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
didomi_token	.luciavanille.fr	Functional	Didomi	1 yr	–	–	1st
_pcid before consent	.luciavanille.fr	Functional	Piano	1.1 yr	✓	–	1st
_pcid before consent	.boutique-clickandcollect.fr	Functional	Piano	1.1 yr	✓	–	3rd
_pctx before consent	.luciavanille.fr	Functional	Piano	1.1 yr	✓	–	1st
_pctx before consent	.boutique-clickandcollect.fr	Functional	Piano	1.1 yr	✓	–	3rd
PHPSESSID	boutique-clickandcollect.fr	Necessary	PHP	30 d	✓	✓	3rd
__stripe_mid	.boutique-clickandcollect.fr	Necessary	Stripe	365 d	✓	–	3rd
__stripe_sid	.boutique-clickandcollect.fr	Necessary	Stripe	Expired	✓	–	3rd
as_shop before consent	boutique-clickandcollect.fr	Unknown	-	365 d	✓	✓	3rd
pa_privacy before consent	www.luciavanille.fr	Unknown	-	1.1 yr	✓	–	1st
pa_privacy before consent	boutique-clickandcollect.fr	Unknown	-	1.1 yr	✓	–	3rd

Browser storage set by the site

Name	Domain	Party
didomi_token set by sdk.privacy-center.org/sdk.4c1a29c54a79c0510319e8f71a14beae14358f57.js:2:74058	https://www.luciavanille.fr	1st	before consent
ElfsightLibraryStorageTest set by universe-static.elfsightcdn.com/whatsappChat.js:11:62888	https://www.luciavanille.fr	1st	before consent
WhatsappChat.startTime.41b29bdf-9837-4d75-8f7b-d4e0e8f72e60 set by universe-static.elfsightcdn.com/whatsappChat.js:11:64071	https://www.luciavanille.fr	1st	before consent

Third-Party Trackers

18 requests detected from 9 vendors: Piano, Stripe Inc., Google LLC, Cloudflare Inc., ElfSight...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Piano before consent Piano tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	tag.aticdn.net
Piano before consent Piano tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	logs1412.xiti.com
Stripe Inc. before consent Stripe fraud detection	Analytics	script	m.stripe.com
Google LLC before consent Google Translate widget	Functional	script	translate.google.com
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
ElfSight ElfSight tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.elfsight.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	translate.googleapis.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Didomi Didomi tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	sdk.privacy-center.org
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network