model-cv.com
Last scanned October 29, 2026
A cookie scan of model-cv.com completed on October 29, 2026 found 17 cookies and 40 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site uses Cookiebot as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 40 third-party requests were detected from 28 vendors.
Consent behaviour grade
8 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
A consent banner is present but does not restrain tracking. Trackers and cookies run before the visitor consents.
Consent banner as encountered
The first layer offers a Reject option alongside Accept.
Load timeline before consent
Milliseconds from navigation start until each request fired or each cookie was set.
and 56 more
Observed before consent
Cookies set before consent (17)
-
__adroll_fpcmarketing · AdRoll -
_fbpmarketing · Facebook -
_pin_unauthmarketing · Pinterest -
_tt_enable_cookiemarketing · TikTok -
_ttpmarketing · TikTok -
dicbo_idmarketing · Outbrain -
ttcsidmarketing · TikTok -
ttcsid_CK0RL8RC77U5TJEU09DGmarketing · TikTok -
_gaanalytics · Google Analytics -
_ga_XG6DFRF88Canalytics · Google Analytics -
_hjSession_3166064analytics · Hotjar -
_hjSessionUser_3166064analytics · Hotjar -
__ar_v4unknown -
__obrefunknown -
footprintsunknown -
model_cv_sessionunknown -
XSRF-TOKENnecessary · CSRF Protection
Tracking requests before consent (31)
- analytics-ipv6.tiktokw.us analytics-ipv6.tiktokw.us set by analytics.tiktok.com/main.MTJjYzk1MmQ1OQ.js · at 746 ms
- Bombora ml314.com at 747 ms
- bzr.openai.com bzr.openai.com set a cookie set by bzrcdn.openai.com/oaiq.min.js · at 1496 ms
- bzrcdn.openai.com bzrcdn.openai.com set a cookie set by model-cv.com · at 379 ms
- ContentSquare static.hotjar.com set by model-cv.com · at 383 ms
- Dun & Bradstreet ps.eyeota.net set a cookie at 748 ms
- Google LLC www.googletagmanager.com at 329 ms
- Pinterest s.pinimg.com set by model-cv.com · at 383 ms
- Criteo x.bidswitch.net at 747 ms
- Google LLC www.youtube.com set a cookie at 607 ms
- HubSpot js-eu1.hs-scripts.com set a cookie at 330 ms
- IndexExchange dsum-sec.casalemedia.com set a cookie at 748 ms
- and 19 more
How we tested
Browser: Chrome/150.0.7871.124 · Scan origin: EU · Viewport: 1440×900 · Checked: 29 Oct 2026 20:44
Cookies
17
Third-party
0
Trackers
40
Vendors
28
Consent banner
Cookiebot
Scans
1
What this setup is missing
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Connection security
HTTPS supported
✓Redirects HTTP to HTTPS
✓HSTS
✗Content Security Policy
✗
Third-Party Trackers
40 requests detected from 28 vendors: analytics-ipv6.tiktokw.us, Bombora, bzr.openai.com, bzrcdn.openai.com, ContentSquare...
Third-Party Trackers
40 requests detected from 28 vendors: analytics-ipv6.tiktokw.us, Bombora, bzr.openai.com, bzrcdn.openai.com, ContentSquare...
Analytics
8
Marketing
17
Necessary
8
Functional
0
Other
7
| Vendor | Category | Type | Domain |
|---|---|---|---|
| analytics-ipv6.tiktokw.us before consent | Analytics | other | analytics-ipv6.tiktokw.us |
| Bombora before consent Bombora tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | ml314.com |
| bzr.openai.com before consent | Analytics | fetch | bzr.openai.com |
| bzrcdn.openai.com before consent | Analytics | script | bzrcdn.openai.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | static.hotjar.com |
| Dun & Bradstreet before consent Dun & Bradstreet tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | ps.eyeota.net |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Pinterest before consent Pinterest tracker domain (source: Disconnect.me, category: Content) | Analytics | script | s.pinimg.com |
| Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising) | Marketing | pixel | x.bidswitch.net |
| Google LLC before consent YouTube embedded video | Marketing | iframe | www.youtube.com |
| HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | js-eu1.hs-scripts.com |
| IndexExchange before consent IndexExchange tracker domain (source: Disconnect.me, category: Advertising) | Marketing | pixel | dsum-sec.casalemedia.com |
| LinkedIn Corporation before consent LinkedIn Insight Tag | Marketing | script | snap.licdn.com |
| LinkedIn Corporation before consent LinkedIn Ads tracking | Marketing | pixel | px.ads.linkedin.com |
| Magnite before consent Magnite tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | pixel.rubiconproject.com |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| Meta Platforms, Inc. before consent Facebook tracking pixel | Marketing | pixel | www.facebook.com |
| Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | ib.adnxs.com |
| NextRoll before consent NextRoll tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | s.adroll.com |
| Pinterest Inc. before consent Pinterest conversion tag | Marketing | pixel | ct.pinterest.com |
| PubMatic before consent PubMatic tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | image2.pubmatic.com |
| Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | cdn.taboola.com |
| Teads before consent Teads tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | amplify.outbrain.com |
| TikTok before consent TikTok analytics pixel | Marketing | script | analytics.tiktok.com |
| TripleLift before consent TripleLift tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | eb2.3lift.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Cybot A/S (Cookiebot) Cookiebot consent management | Necessary | script | consent.cookiebot.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | i.ytimg.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | jnn-pa.googleapis.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) | Necessary | script | cdn.jsdelivr.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | googleads.g.doubleclick.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | region1.google-analytics.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | pagead2.googlesyndication.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | cm.g.doubleclick.net |
| OpenX before consent OpenX tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | us-u.openx.net |
| Tapad before consent Tapad tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | pixel.tapad.com |
| UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers) | Unknown | script | consentcdn.cookiebot.com |
Scan history
One completed scan: cookies and trackers from the scan on October 29, 2026.
Recent scans
| October 29, 2026 | 17 40 |
More Cookie Compliance Reviews
Model No. | 3D Printed Commercial Furniture & B...
model-no.com
Catalog, Value & Track Your Herd | Model Horse ...
model-horse-vault.com
LiFE Pledge - Lifestyle for Environment
modeindia.com
Hier entsteht die Website Präsenz von heidimat...
modehausschlueter.com
Modefriseur Gabriele Steiner - Kontakt
modefriseur.com
Modeditor - Android
modeditor.com
Unsere Datenschutzbestimmungen - Mode Derby
modederby.com
modebim — Expert BIM Revit | Modélisation, C...
modebim.com
Is model-cv.com your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.