lyon.edu
Last scanned July 24, 2026
A cookie scan of lyon.edu completed on July 24, 2026 found 6 cookies and 39 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 39 third-party requests from 19 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.
Consent behaviour grade
53 / 100
This site set tracking cookies or loaded trackers before the visitor consented.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
A consent banner is present but does not restrain tracking. Trackers and cookies run before the visitor consents.
Observed before consent
Cookies set before consent (6)
-
alert_stateunknown -
sa-user-idunknown -
sa-user-id-v2unknown -
sa-user-id-v3unknown -
sa-user-id-v4unknown -
ASP.NET_SessionIdnecessary · ASP.NET
Tracking requests before consent (22)
- Cloudflare Inc. static.cloudflareinsights.com
- Google LLC www.googletagmanager.com
- Google LLC region1.analytics.google.com
- Microsoft www.clarity.ms
- New Relic js-agent.newrelic.com
- Google LLC www.google.com
- Google LLC maps.googleapis.com
- Vimeo Inc. player.vimeo.com set a cookie
- Innovid collector-16428.us.tvsquared.com
- mdhv.io jelly.mdhv.io
- Meta Platforms, Inc. connect.facebook.net
- Meta Platforms, Inc. www.facebook.com
- and 10 more
Cookies
6
Third-party
0
Trackers
39
Vendors
19
Consent banner
None detected
Scans
1
What this setup is missing
- Consent signals (IAB TCF) were detected, but the consent platform was not recognized.
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
39 requests detected from 19 vendors: Cloudflare Inc., Google LLC, Microsoft, New Relic, Vimeo Inc....
Third-Party Trackers
39 requests detected from 19 vendors: Cloudflare Inc., Google LLC, Microsoft, New Relic, Vimeo Inc....
Analytics
5
Marketing
9
Necessary
17
Functional
3
Other
5
| Vendor | Category | Type | Domain |
|---|---|---|---|
| Cloudflare Inc. before consent Cloudflare Web Analytics | Analytics | script | static.cloudflareinsights.com |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | region1.analytics.google.com |
| Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | www.clarity.ms |
| New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | js-agent.newrelic.com |
| Google LLC before consent Google reCAPTCHA bot protection | Functional | script | www.google.com |
| Google LLC before consent Google Maps API | Functional | script | maps.googleapis.com |
| Vimeo Inc. before consent Vimeo video embed | Functional | iframe | player.vimeo.com |
| Innovid before consent Innovid tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | collector-16428.us.tvsquared.com |
| mdhv.io before consent mdhv.io tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | jelly.mdhv.io |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| Meta Platforms, Inc. before consent Facebook tracking pixel | Marketing | pixel | www.facebook.com |
| Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | acdn.adnxs.com |
| NextRoll before consent NextRoll tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | s.adroll.com |
| Simpli.fi before consent Simpli.fi tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | tag.simpli.fi |
| StackAdapt before consent StackAdapt tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | tags.srv.stackadapt.com |
| TikTok before consent TikTok analytics pixel | Marketing | script | analytics.tiktok.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.google.dk |
| New Relic Inc. New Relic data beacon | Necessary | pixel | bam.nr-data.net |
| Paypal Paypal tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.paypal.com |
| PayPal Holdings PayPal SDK | Necessary | script | www.paypal.com |
| PayPal Holdings PayPal static resources | Necessary | script | www.paypalobjects.com |
| Stripe Stripe tracker domain (source: Disconnect.me, category: Content) | Necessary | script | r.stripe.com |
| Stripe Stripe tracker domain (source: Disconnect.me, category: Content) | Necessary | script | q.stripe.com |
| Stripe Stripe tracker domain (source: Disconnect.me, category: Content) | Necessary | script | merchant-ui-api.stripe.com |
| Stripe Inc. Stripe payment processing | Necessary | script | js.stripe.com |
| Stripe Inc. Stripe fraud detection | Necessary | script | m.stripe.com |
| UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) | Necessary | script | unpkg.com |
| Vimeo Vimeo tracker domain (source: Disconnect.me, category: Content) | Necessary | script | f.vimeocdn.com |
| Vimeo Vimeo tracker domain (source: Disconnect.me, category: Content) | Necessary | iframe | arclight.vimeo.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | www.googleadservices.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | www.google-analytics.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | googleads.g.doubleclick.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | ad.doubleclick.net |
| Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) | Unknown | script | m.stripe.network |
Scan history
One completed scan: cookies and trackers from the scan on July 24, 2026.
Recent scans
| July 24, 2026 | 6 39 |
More Cookie Compliance Reviews
Allen Centennial Garden – Open Daily from Daw...
allencentennialgarden.wisc.edu
USC American Language Institute | University of...
ali.usc.edu
Northeastern University Campus Alerts
alerts.northeastern.edu
Test new announcements block | FSU Alerts
alerts.fsu.edu
FSU Alert | FSU Alerts
alert.fsu.edu
Asian Languages and Cultures – College of Let...
alc.wisc.edu
Home
albdf.byu.edu
One moment, please...
alba.pdx.edu
Is lyon.edu your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.