Skip to main content
mcdonalds.com.my

mcdonalds.com.my

https://mcdonalds.com.my

Last scanned July 24, 2026

A cookie scan of mcdonalds.com.my performed on July 24, 2026 found 5 cookies and 10 third-party tracking requests. The assessment covered 3 pages across 3 unique page templates. The site employs Klaro as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 10 third-party requests were detected from 3 vendors.

Cookies

5

Third-party

0

Trackers

10

Vendors

3

Consent banner

Klaro

Scans

1

What this setup is missing

  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

5 cookies detected: 3 necessary, 0 analytics, 0 marketing

Total

5

Necessary

3

Functional

0

Analytics

0

Marketing

0

Unknown

2

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
cf_clearance .mcdonalds.com.my Necessary Cloudflare 363 d 1st
XSRF-TOKEN mcdonalds.com.my Necessary CSRF Protection Expired 1st
XSRF-TOKEN www.mcdonalds.com.my Necessary CSRF Protection Expired 1st
laravel_session before consent mcdonalds.com.my Unknown - Expired 1st
laravel_session before consent www.mcdonalds.com.my Unknown - Expired 1st

Third-Party Trackers

10 requests detected from 3 vendors: Google LLC, Cloudflare Inc., Volentio JSD

Analytics

0

Marketing

1

Necessary

8

Functional

0

Other

1

Vendor Category Type Domain
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Cloudflare Inc. Cloudflare CDNJS Necessary script cdnjs.cloudflare.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script rr1---sn-bavc5ajvooxju-j2il.googlevideo.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script jnn-pa.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) Necessary script cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script googleads.g.doubleclick.net

Scan history

One completed scan: cookies and trackers from the scan on July 24, 2026.

Recent scans

July 24, 2026 5 10

Is mcdonalds.com.my your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.