Does oilily.com use cookies?

oilily.com uses 14 cookies. No consent management platform was detected.

Does oilily.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on oilily.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does oilily.com use?

oilily.com loads 31 third-party requests from 26 vendors, including Bombora, Dun & Bradstreet, Google LLC, Microsoft, Criteo.

How many marketing and analytics cookies does oilily.com set?

oilily.com sets 1 marketing and 0 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

oilily.com

Item: oilily.com
Rating: 8
Author: Passiro

https://oilily.com

Last scanned July 22, 2026

A cookie scan of oilily.com conducted on July 22, 2026 found 14 cookies and 31 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 31 third-party requests from 26 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

14 cookies detected: 0 necessary, 0 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cart_currency before consent	www.oilily.com	Functional	E-commerce	7 d	–	–	1st
__adroll_fpc before consent	.oilily.com	Marketing	AdRoll	359 d	–	–	1st
localization before consent	www.oilily.com	Unknown	-	358 d	–	–	1st
SIZEBAY_SESSION_ID_V4 before consent	.oilily.com	Unknown	-	Session	–	–	1st
smc_ls_session before consent	.oilily.com	Unknown	-	Session	–	–	1st
szb-current-product-id before consent	.oilily.com	Unknown	-	Session	–	–	1st
yotpo_pixel before consent	.oilily.com	Unknown	-	Expired	✓	–	1st
_gtmeec before consent	.oilily.com	Unknown	-	83 d	✓	✓	1st
_sbpee before consent	.oilily.com	Unknown	-	Expired	✓	✓	1st
_shopify_essential before consent	www.oilily.com	Unknown	-	358 d	✓	✓	1st
_sp_id.5bef before consent	.oilily.com	Unknown	-	1.1 yr	✓	–	1st
_sp_ses.5bef before consent	.oilily.com	Unknown	-	Expired	✓	–	1st
__apex_test__ before consent	.oilily.com	Unknown	-	Session	–	–	1st
__ar_v4 before consent	.www.oilily.com	Unknown	-	358 d	–	–	1st

Third-Party Trackers

31 requests detected from 26 vendors: Bombora, Dun & Bradstreet, Google LLC, Microsoft, Criteo...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Bombora before consent Bombora tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	ml314.com
Dun & Bradstreet before consent Dun & Bradstreet tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	ps.eyeota.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	analytics.google.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	x.bidswitch.net
IndexExchange before consent IndexExchange tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	dsum-sec.casalemedia.com
Klaviyo Inc. before consent Klaviyo email marketing	Marketing	script	static.klaviyo.com
Magnite before consent Magnite tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	pixel.rubiconproject.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	ib.adnxs.com
NextRoll before consent NextRoll tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	s.adroll.com
PubMatic before consent PubMatic tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	image2.pubmatic.com
Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.taboola.com
Teads before consent Teads tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.outbrain.com
Tradedoubler before consent Tradedoubler tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sdk.tradedoubler.com
TripleLift before consent TripleLift tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	eb2.3lift.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	cdn-widgetsrepository.yotpo.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d2d7do8qaecbru.cloudfront.net
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Gorgias Gorgias tracker domain (source: Disconnect.me, category: Content)	Necessary	script	config.gorgias.chat
Shopify Shopify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	otlp-http-production.shopifysvc.com
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
UNPKG UNPKG tracker domain (source: Disconnect.me, category: Content)	Necessary	script	unpkg.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	cm.g.doubleclick.net
intent.ly before consent intent.ly tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	js.smct.io
OpenX before consent OpenX tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	us-u.openx.net
Tapad before consent Tapad tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pixel.tapad.com
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com