Skip to main content
mcs.com

mcs.com

https://mcs.com

Last scanned October 25, 2026

A cookie scan of mcs.com conducted on October 25, 2026 found 10 cookies and 23 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site relies on Cookiebot as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 23 third-party requests were detected from 12 vendors.

Cookies

10

Third-party

0

Trackers

23

Vendors

12

Consent banner

Cookiebot

Scans

1

What this setup is missing

  • Script blocking is manual. Each script must be tagged by hand, and untagged scripts run before consent.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

10 cookies detected: 0 necessary, 4 analytics, 1 marketing

Total

10

Necessary

0

Functional

3

Analytics

4

Marketing

1

Unknown

2

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
hubspotutk before consent .mcs.com Analytics HubSpot 180 d – – 1st
__hssc before consent .mcs.com Analytics HubSpot Expired – – 1st
__hssrc before consent .mcs.com Analytics HubSpot Session – – 1st
__hstc before consent .mcs.com Analytics HubSpot 180 d – – 1st
cart_currency before consent www.mcs.com Functional E-commerce 14 d – – 1st
localization before consent www.mcs.com Functional Shopify 365 d – – 1st
_shopify_essential before consent www.mcs.com Functional Shopify 365 d ✓ ✓ 1st
_fbp before consent .www.mcs.com Marketing Facebook 90 d – – 1st
shopify_recently_viewed before consent .www.mcs.com Unknown - 90 d ✓ – 1st
_external_id before consent .www.mcs.com Unknown - 1.1 yr lifetime over 13 months – – 1st

Browser storage set by the site

Name Domain Party
consentHeader set by www.mcs.com/shopify-perf-kit-3.11.0.min.js:1:7738 https://www.mcs.com 1st before consent
_shs_state set by www.mcs.com/shopify-perf-kit-3.11.0.min.js:1:51963 https://www.mcs.com 1st before consent
shopify:webmcp_adapter_loaded set by www.mcs.com/:2393:256 https://www.mcs.com 1st before consent
uw-uid set by cdn.userway.org/widget_app_base_1790678002737.js:4:22982 https://www.mcs.com 1st before consent
__storage_test__ set by static.klaviyo.com/default~in_app_forms~signup_forms.201f86a5de814.js https://www.mcs.com 1st before consent
klaviyoOnsite set by static.klaviyo.com/default~in_app_forms~signup_forms.201f86a5de814.js https://www.mcs.com 1st before consent
klaviyoPagesVisitCountV2 set by static.klaviyo.com/5663.c10b1970f298b.js https://www.mcs.com 1st before consent
uw-tunings set by cdn.userway.org/widget_app_base_1790678002737.js:3:14088 https://www.mcs.com 1st before consent
uw-tunings-checksum set by cdn.userway.org/widget_app_base_1790678002737.js:3:14125 https://www.mcs.com 1st before consent
uw-icon-locales set by cdn.userway.org/widget_app_base_1790678002737.js:2:27666 https://www.mcs.com 1st before consent
_xsd set by sst.mcs.com/tpkgtahh.js https://www.mcs.com 1st before consent
_fbp set by sst.mcs.com/tpkgtahh.js https://www.mcs.com 1st before consent
_external_id set by sst.mcs.com/tpkgtahh.js https://www.mcs.com 1st before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:204:242 https://www.mcs.com 1st before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:204:242 https://www.mcs.com 1st before consent

Third-Party Trackers

23 requests detected from 12 vendors: Amazon, Google LLC, HubSpot, Shopify, Shopify Inc....

Analytics

7

Marketing

8

Necessary

6

Functional

1

Other

1

Vendor Category Type Domain
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Content) Analytics script d2wy8f7a9ursnm.cloudfront.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script analytics.google.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-eu1.hs-analytics.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Content) Analytics script forms-eu1.hsforms.com
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) Analytics script otlp-http-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics Analytics pixel monorail-edge.shopifysvc.com
SmartBear before consent SmartBear tracker domain (source: Disconnect.me, category: Analytics) Analytics script sessions.bugsnag.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery Functional script use.typekit.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script api-eu1.hubapi.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hscollectedforms.net
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) Marketing script js-eu1.hs-scripts.com
HubSpot Inc. before consent HubSpot marketing & CRM Marketing script track-eu1.hubspot.com
Klaviyo Inc. before consent Klaviyo email marketing Marketing script a.klaviyo.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d23dclunsivw3h.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management Necessary script consent.cookiebot.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Shopify Shopify tracker domain (source: Disconnect.me, category: Content) Necessary script shop.app
Shopify Inc. Shopify platform Necessary script cdn.shopify.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) Unknown script consentcdn.cookiebot.com

Scan history

One completed scan: cookies and trackers from the scan on October 25, 2026.

Recent scans

October 25, 2026 10 23

Is mcs.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.