Does luzt.nl use cookies?

luzt.nl uses 14 cookies, 13 of which are set by third-party domains. The site uses Cookiebot as its consent management platform.

Does luzt.nl use a cookie banner (CMP)?

Yes. luzt.nl uses Cookiebot as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does luzt.nl use?

luzt.nl loads 15 third-party requests from 9 vendors, including Cloudflare Inc., comScore, FunctionalSoftware, Google LLC, nl.indeed.com.

How many marketing and analytics cookies does luzt.nl set?

luzt.nl sets 0 marketing and 2 analytics cookies, alongside 7 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

luzt.nl

Item: luzt.nl
Rating: 32
Author: Passiro

https://luzt.nl

Last scanned October 21, 2026

A cookie scan of luzt.nl conducted on October 21, 2026 found 14 cookies and 15 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 15 third-party requests were detected from 9 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

Cookiebot

Scans

What this setup is missing

Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.
Google tags were observed, but Google Consent Mode v2 was not detected.
The published cookie declaration does not include all cookies observed on the site.
No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

14 cookies detected: 7 necessary, 2 analytics, 0 marketing, 13 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

13 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
CTK before consent	.indeed.com	Analytics	Indeed	1.1 yr lifetime over 13 months	✓	–	3rd
sp before consent	.indeed.com	Analytics	Snowplow	365 d	✓	✓	3rd
cf_clearance	.indeed.com	Necessary	Cloudflare	365 d	✓	✓	3rd
INDEED_CSRF_TOKEN	nl.indeed.com	Necessary	Indeed	Session	✓	–	3rd
JSESSIONID	nl.indeed.com	Necessary	Java	Session	✓	–	3rd
OptanonConsent	.indeed.com	Necessary	OneTrust	365 d	–	–	3rd
_cfuvid	.indeed.com	Necessary	Cloudflare	Session	✓	✓	3rd
__cf_bm	.luzt.nl	Necessary	Cloudflare	Expired	✓	✓	1st
__cf_bm	.indeed.com	Necessary	Cloudflare	Expired	✓	✓	3rd
cmpsmeta before consent	nl.indeed.com	Unknown	-	Session	–	–	3rd
g_state before consent	.indeed.com	Unknown	-	180 d	–	–	3rd
indeed_rcc before consent	.indeed.com	Unknown	-	1.1 yr lifetime over 13 months	✓	–	3rd
indeed_rcc before consent	nl.indeed.com	Unknown	-	1.1 yr lifetime over 13 months	–	–	3rd
SURF before consent	.indeed.com	Unknown	-	7 d	✓	✓	3rd

Browser storage set by the site

Name	Domain	Party
__test set by nl.indeed.com/snapshot-aurora.js:1:362724	https://nl.indeed.com	3rd	before consent
hasSeenCompaniesPage set by nl.indeed.com/snapshot-aurora.js:1:362987	https://nl.indeed.com	3rd	before consent
_sp_ses.27f6.expires set by c03.s3.indeed.com/880.1a78e47f8ccc78b5.js:1:21395	https://nl.indeed.com	3rd	before consent
_sp_ses.27f6 set by c03.s3.indeed.com/880.1a78e47f8ccc78b5.js:1:21443	https://nl.indeed.com	3rd	before consent
_sp_id.27f6.expires set by c03.s3.indeed.com/880.1a78e47f8ccc78b5.js:1:21395	https://nl.indeed.com	3rd	before consent
_sp_id.27f6 set by c03.s3.indeed.com/880.1a78e47f8ccc78b5.js:1:21443	https://nl.indeed.com	3rd	before consent
snowplowOutQueue_sp1 set by c03.s3.indeed.com/880.1a78e47f8ccc78b5.js:1:17111	https://nl.indeed.com	3rd	before consent
__sak set by accounts.google.com/client:342:641	https://nl.indeed.com	3rd	before consent
dwell.test set by nl.indeed.com/snapshot-aurora.js:1:227510	https://nl.indeed.com	3rd	before consent

Third-Party Trackers

15 requests detected from 9 vendors: Cloudflare Inc., comScore, FunctionalSoftware, Google LLC, nl.indeed.com...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
comScore before consent comScore tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	sb.scorecardresearch.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o4504615283654656.ingest.us.sentry.io
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
nl.indeed.com before consent	Analytics	other	nl.indeed.com
t.indeed.com before consent	Analytics	script	t.indeed.com
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d3fw5vlhllyvee.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com