Skip to main content
luthierwood.com

luthierwood.com

https://luthierwood.com

Last scanned October 21, 2026

A cookie scan of luthierwood.com performed on October 21, 2026 found 6 cookies and 19 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on CookieYes as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 19 third-party requests were detected from 10 vendors.

Cookies

6

Third-party

0

Trackers

19

Vendors

10

Consent banner

CookieYes

Scans

1

What this setup is missing

  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

6 cookies detected: 3 necessary, 0 analytics, 1 marketing

Total

6

Necessary

3

Functional

1

Analytics

0

Marketing

1

Unknown

1

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
cookieyes-consent luthierwood.com Functional CookieYes 365 d ✓ – 1st
_fbp before consent .luthierwood.com Marketing Facebook 90 d – – 1st
__cf_bm .luthierwood.com Necessary Cloudflare Expired ✓ ✓ 1st
__stripe_mid .luthierwood.com Necessary Stripe 365 d ✓ – 1st
__stripe_sid .luthierwood.com Necessary Stripe Expired ✓ – 1st
woocommerce_geo_hash before consent luthierwood.com Unknown - Expired – – 1st

Browser storage set by the site

Name Domain Party
__wpDataTestLocalStorage set by luthierwood.com/data.min.js https://luthierwood.com 1st before consent
storeApiCartData set by luthierwood.com/wc-blocks-data.js https://luthierwood.com 1st before consent
mcforms-182996266-session set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent
mcforms-182996266-lastEvents set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent
mcforms-182996266-pageviews set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent
mcforms-182996266-state set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent
mcforms_event_182996266 set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent
mcforms-182996266-timeQueueEvents set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:204:242 https://luthierwood.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:204:242 https://luthierwood.com 1st before consent
storeApiNonce set by luthierwood.com/wc-blocks-middleware.js https://luthierwood.com 1st before consent
woocs_sk set by luthierwood.com/front.js https://luthierwood.com 1st before consent
mcforms-182996266-experienceConfigVersion set by form-assets.mailchimp.com/182996266 https://luthierwood.com 1st before consent

Third-Party Trackers

19 requests detected from 10 vendors: eventcollector.mcf-prod.a.intuit.com, Google LLC, play.google.com, Stripe Inc., Intuit...

Analytics

4

Marketing

4

Necessary

7

Functional

0

Other

4

Vendor Category Type Domain
eventcollector.mcf-prod.a.intuit.com before consent Analytics xhr eventcollector.mcf-prod.a.intuit.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
play.google.com before consent Analytics fetch play.google.com
Stripe Inc. before consent Stripe fraud detection Analytics script m.stripe.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) Marketing script chimpstatic.com
Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) Marketing script form-assets.mailchimp.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
CookieYes CookieYes consent management Necessary script cdn-cookieyes.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Stripe Stripe tracker domain (source: Disconnect.me, category: Content) Necessary script api.stripe.com
Stripe Inc. Stripe payment processing Necessary script js.stripe.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
IntuitionMachines before consent IntuitionMachines tracker domain (source: Disconnect.me, category: Anti-fraud) Unknown script hcaptcha.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script m.stripe.network

Scan history

One completed scan: cookies and trackers from the scan on October 21, 2026.

Recent scans

October 21, 2026 6 19

Is luthierwood.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.