Skip to main content
marta.de

marta.de

https://marta.de

Last scanned October 24, 2026

A cookie scan of marta.de conducted on October 24, 2026 found 8 cookies and 14 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses OneTrust as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 14 third-party requests were detected from 8 vendors.

Cookies

8

Third-party

0

Trackers

14

Vendors

8

Consent banner

OneTrust

Scans

1

What this setup is missing

  • No Reject option on the first layer; declining requires extra steps.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

8 cookies detected: 4 necessary, 0 analytics, 0 marketing

Total

8

Necessary

4

Functional

0

Analytics

0

Marketing

0

Unknown

4

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
OptanonAlertBoxClosed www.marta.de Necessary OneTrust 365 d – – 1st
OptanonConsent www.marta.de Necessary OneTrust 365 d – – 1st
_cfuvid .marta.de Necessary Cloudflare Session ✓ ✓ 1st
_cfuvid .www.marta.de Necessary Cloudflare Session ✓ ✓ 1st
plumPopupWebflowCurrentShownPerMonth before consent www.marta.de Unknown - 25 d – – 1st
plumPopupWebflowPerDayNew before consent www.marta.de Unknown - 1 d – – 1st
plumPopupWebflowStartDatePerDay before consent www.marta.de Unknown - 1 d – – 1st
plumPopupWebflowStartDatePerMonth before consent www.marta.de Unknown - 25 d – – 1st

Browser storage set by the site

Name Domain Party
heyflow-variant-marta-inquiry set by static.heyflow.app/webview.js:298:10451 https://www.marta.de 1st before consent
test set by assets.prd.heyflow.com/flow-CwXKpuZ_.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-0 set by assets.prd.heyflow.com/flow-CwXKpuZ_.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-new-1 set by assets.prd.heyflow.com/flow-DM9gbHbp.js https://www.marta.de 1st before consent
heyflow-marta-inquiry-persisted set by assets.prd.heyflow.com/flow-CwXKpuZ_.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-new-2 set by assets.prd.heyflow.com/flow-DM9gbHbp.js https://www.marta.de 1st before consent
heyflow-marta-inquiry-new-persisted set by assets.prd.heyflow.com/flow-DM9gbHbp.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-new-3 set by assets.prd.heyflow.com/flow-DM9gbHbp.js https://www.marta.de 1st before consent
plumPopupWebflowAfterPagesNumber set by app.plumpopup.com/p-1102.js:57:558695 https://www.marta.de 1st before consent
plumPopupWebflowAfterTimeNumber set by app.plumpopup.com/p-1102.js:57:558825 https://www.marta.de 1st before consent
__test set by widget.superchat.de/sdk.js:1:85307 https://www.marta.de 1st before consent
v3:superchat-session-WCPxDo0Ol8v91mng951bp4NVn6 set by widget.superchat.de/sdk.js:1:443909 https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-new-0 set by assets.prd.heyflow.com/flow-DM9gbHbp.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-partner-1 set by assets.prd.heyflow.com/flow-CwXKpuZ_.js https://www.marta.de 1st before consent
v3:superchat-session-previous-state-WCPxDo0Ol8v91mng951bp4NVn6 set by widget.superchat.de/sdk.js:1:443860 https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-partner-2 set by assets.prd.heyflow.com/flow-CwXKpuZ_.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-partner-3 set by assets.prd.heyflow.com/flow-CwXKpuZ_.js https://www.marta.de 1st before consent
heyflow-session-id:marta-inquiry-new-4 set by assets.prd.heyflow.com/flow-DM9gbHbp.js https://www.marta.de 1st before consent

Third-Party Trackers

14 requests detected from 8 vendors: app.optibase.io, Google LLC, Amazon, Cloudflare Inc., TrustPilot...

Analytics

2

Marketing

1

Necessary

8

Functional

0

Other

3

Vendor Category Type Domain
app.optibase.io before consent Analytics script app.optibase.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d3e54v103j8qbb.cloudfront.net
Cloudflare Inc. Cloudflare CDNJS Necessary script cdnjs.cloudflare.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content) Necessary script widget.trustpilot.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content) Necessary script unpkg.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script region1.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script geolocation.onetrust.com

Scan history

One completed scan: cookies and trackers from the scan on October 24, 2026.

Recent scans

October 24, 2026 8 14

Is marta.de your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.