Skip to main content
mandalea.com

mandalea.com

https://mandalea.com

Last scanned October 22, 2026

A cookie scan of mandalea.com performed on October 22, 2026 found 17 cookies and 10 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Usercentrics as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 10 third-party requests were detected from 8 vendors.

Cookies

17

Third-party

0

Trackers

10

Vendors

8

Consent banner

Usercentrics

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

17 cookies detected: 3 necessary, 9 analytics, 2 marketing

Total

17

Necessary

3

Functional

1

Analytics

9

Marketing

2

Unknown

2

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
sbjs_current before consent .mandalea.com Analytics WooCommerce Session – – 1st
sbjs_current_add before consent .mandalea.com Analytics WooCommerce Session – – 1st
sbjs_first before consent .mandalea.com Analytics WooCommerce Session – – 1st
sbjs_first_add before consent .mandalea.com Analytics WooCommerce Session – – 1st
sbjs_migrations before consent .mandalea.com Analytics WooCommerce Session – – 1st
sbjs_session before consent .mandalea.com Analytics WooCommerce Expired – – 1st
sbjs_udata before consent .mandalea.com Analytics WooCommerce Session – – 1st
tk_qs before consent .mandalea.com Analytics WordPress Expired – – 1st
tk_r3d before consent .mandalea.com Analytics WordPress 3 d – – 1st
tk_ai before consent .mandalea.com Functional WooCommerce / Jetpack 1.1 yr lifetime over 13 months – – 1st
tk_lr before consent .mandalea.com Marketing WordPress 365 d – – 1st
tk_or before consent .mandalea.com Marketing WordPress 1.1 yr lifetime over 13 months – – 1st
__cf_bm .mandalea.com Necessary Cloudflare Expired ✓ ✓ 1st
__stripe_mid .mandalea.com Necessary Stripe 365 d ✓ – 1st
__stripe_sid .mandalea.com Necessary Stripe Expired ✓ – 1st
_webchat_visit before consent mandalea.com Unknown - Expired – – 1st
_webchat_visitor before consent mandalea.com Unknown - 1.1 yr lifetime over 13 months – – 1st

Browser storage set by the site

Name Domain Party
uc_ui_version set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
RAMDOM_KEY_LOCAL_STORAGE set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
RAMDOM_KEY_LOCAL_STORAGE set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
uc_user_country set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
wpEmojiSettingsSupports set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
uc_user_interaction set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
uc_settings set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent
NRBA_SESSION::f8a08780 set by privacy-proxy.usercentrics.eu/uc-block.bundle.js:1:82257 https://mandalea.com 1st before consent

Third-Party Trackers

10 requests detected from 8 vendors: Automattic, Google LLC, New Relic, New Relic Inc., Stripe Inc....

Analytics

5

Marketing

0

Necessary

3

Functional

0

Other

2

Vendor Category Type Domain
Automattic before consent Automattic tracker domain (source: Disconnect.me, category: Content) Analytics script stats.wp.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-agent.newrelic.com
New Relic Inc. before consent New Relic data beacon Analytics pixel bam.nr-data.net
Stripe Inc. before consent Stripe fraud detection Analytics script m.stripe.com
Stripe Stripe tracker domain (source: Disconnect.me, category: Content) Necessary script api.stripe.com
Stripe Inc. Stripe payment processing Necessary script js.stripe.com
Usercentrics GmbH Usercentrics consent management Necessary script app.usercentrics.eu
IntuitionMachines before consent IntuitionMachines tracker domain (source: Disconnect.me, category: Anti-fraud) Unknown script hcaptcha.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) Unknown script m.stripe.network

Scan history

One completed scan: cookies and trackers from the scan on October 22, 2026.

Recent scans

October 22, 2026 17 10

Is mandalea.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.