Does oldnational.com use cookies?

oldnational.com uses 41 cookies. The site uses OneTrust as its consent management platform.

Does oldnational.com use a cookie banner (CMP)?

Yes. oldnational.com uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does oldnational.com use?

oldnational.com loads 59 third-party requests from 35 vendors, including ContentSquare, Dun & Bradstreet, Google LLC, Microsoft, Optimizely Inc..

How many marketing and analytics cookies does oldnational.com set?

oldnational.com sets 1 marketing and 10 analytics cookies, alongside 4 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

oldnational.com

Item: oldnational.com
Rating: 8
Author: Passiro

https://oldnational.com

Last scanned July 9, 2026

A cookie scan of oldnational.com completed on July 9, 2026 found 41 cookies and 59 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 59 third-party requests were detected from 35 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

41 cookies detected: 4 necessary, 10 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
nmstat before consent	.oldnational.com	Analytics	Siteimprove	1 yr	–	–	1st
optimizelyEndUserId before consent	.oldnational.com	Analytics	Optimizely	162 d	–	–	1st
_ga before consent	.oldnational.com	Analytics	Google Analytics	1 yr	–	–	1st
_gat_UA-4589355-9 before consent	.oldnational.com	Analytics	Google Analytics	Expired	–	–	1st
_ga_PGE7QPH73T before consent	.oldnational.com	Analytics	Google Analytics	347 d	–	–	1st
_ga_YBV7SVJBNF before consent	.oldnational.com	Analytics	Google Analytics	1 yr	–	–	1st
_gcl_au before consent	.oldnational.com	Analytics	Google Analytics	72 d	–	–	1st
_gid before consent	.oldnational.com	Analytics	Google Analytics	Expired	–	–	1st
_hjSessionUser_4959162 before consent	.oldnational.com	Analytics	Hotjar	347 d	✓	–	1st
_hjSession_4959162 before consent	.oldnational.com	Analytics	Hotjar	Expired	✓	–	1st
_fbp before consent	.oldnational.com	Marketing	Facebook	72 d	–	–	1st
ASP.NET_SessionId	www.oldnational.com	Necessary	ASP.NET	Session	✓	✓	1st
OptanonAlertBoxClosed	.www.oldnational.com	Necessary	OneTrust	347 d	–	–	1st
OptanonConsent	.www.oldnational.com	Necessary	OneTrust	347 d	–	–	1st
__cf_bm	.www.oldnational.com	Necessary	Cloudflare	Expired	✓	✓	1st
.EPiForm_BID before consent	www.oldnational.com	Unknown	-	72 d	✓	✓	1st
.EPiForm_VisitorIdentifier before consent	www.oldnational.com	Unknown	-	72 d	✓	✓	1st
ai_session before consent	www.oldnational.com	Unknown	-	Expired	✓	–	1st
ai_user before consent	www.oldnational.com	Unknown	-	347 d	✓	–	1st
ARRAffinity before consent	.www.oldnational.com	Unknown	-	Session	✓	✓	1st
ARRAffinitySameSite before consent	.www.oldnational.com	Unknown	-	Session	✓	✓	1st
optimizelySession before consent	.oldnational.com	Unknown	-	162 d	–	–	1st
sa-user-id before consent	www.oldnational.com	Unknown	-	347 d	✓	–	1st
sa-user-id-v2 before consent	www.oldnational.com	Unknown	-	347 d	✓	–	1st
sa-user-id-v3 before consent	www.oldnational.com	Unknown	-	347 d	✓	–	1st
sa-user-id-v4 before consent	www.oldnational.com	Unknown	-	347 d	✓	–	1st
smallbusinesschecking before consent	www.oldnational.com	Unknown	-	Expired	✓	–	1st
TiPMix before consent	.www.oldnational.com	Unknown	-	Expired	✓	✓	1st
x-ms-routing-name before consent	.www.oldnational.com	Unknown	-	Expired	✓	✓	1st
_bti before consent	.oldnational.com	Unknown	-	347 d	–	–	1st
_bts before consent	.oldnational.com	Unknown	-	Expired	–	–	1st
_omappvp before consent	www.oldnational.com	Unknown	-	1 yr	✓	–	1st
_omappvs before consent	www.oldnational.com	Unknown	-	Expired	✓	–	1st
__ncuid before consent	.oldnational.com	Unknown	-	347 d	–	–	1st
__ps_did before consent	.oldnational.com	Unknown	-	347 d	✓	–	1st
__ps_fva before consent	.oldnational.com	Unknown	-	347 d	✓	–	1st
__ps_lu before consent	.oldnational.com	Unknown	-	347 d	✓	–	1st
__ps_r before consent	.oldnational.com	Unknown	-	347 d	✓	–	1st
__ps_slu before consent	.oldnational.com	Unknown	-	Expired	✓	–	1st
__ps_sr before consent	.oldnational.com	Unknown	-	Expired	✓	–	1st
__RequestVerificationToken before consent	www.oldnational.com	Unknown	-	Session	✓	✓	1st

Third-Party Trackers

59 requests detected from 35 vendors: ContentSquare, Dun & Bradstreet, Google LLC, Microsoft, Optimizely Inc....

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
Dun & Bradstreet before consent Dun & Bradstreet tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	ps.eyeota.net
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	dc.services.visualstudio.com
Optimizely Inc. before consent Optimizely A/B testing	Analytics	script	cdn.optimizely.com
Optimizely Inc. before consent Optimizely event logging	Analytics	pixel	logx.optimizely.com
SiteImprove before consent SiteImprove tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	siteimproveanalytics.com
SiteImprove before consent SiteImprove tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	35881.global.siteimproveanalytics.io
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	x.bidswitch.net
IndexExchange before consent IndexExchange tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	dsum-sec.casalemedia.com
Innovid before consent Innovid tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	s-static.innovid.com
LinkedIn Corporation before consent LinkedIn Insight Tag	Marketing	script	snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking	Marketing	pixel	px.ads.linkedin.com
LiveRamp before consent LiveRamp tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	idsync.rlcdn.com
media.net before consent media.net tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	contextual.media.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	secure.adnxs.com
Nexxen before consent Nexxen tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	partners.tremorhub.com
Optimizely before consent Optimizely tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	dl.episerver.net
PubMatic before consent PubMatic tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	image2.pubmatic.com
Retyp before consent Retyp tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	a.omappapi.com
Salesforce before consent Salesforce tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	usermatch.krxd.net
StackAdapt before consent StackAdapt tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	tags.srv.stackadapt.com
Teads before consent Teads tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.teads.tv
TransUnion before consent TransUnion tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	aa.agkn.com
Unbounce before consent Unbounce tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	builder-assets.unbounce.com
Weborama before consent Weborama tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	wam.solution.weborama.fr
ZetaGlobal before consent ZetaGlobal tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.boomtrain.com
ZetaGlobal before consent ZetaGlobal tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	c1.rfihub.net
ZetaGlobal before consent ZetaGlobal tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	20844173p.rfihub.com
ZetaGlobal before consent ZetaGlobal tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	i.liadm.com
ZetaGlobal before consent ZetaGlobal tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	live.rezync.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d2v83son8kay5v.cloudfront.net
Brightcove Brightcove tracker domain (source: Disconnect.me, category: Content)	Necessary	script	players.brightcove.net
Brightcove Brightcove tracker domain (source: Disconnect.me, category: Content)	Necessary	script	edge.api.brightcove.com
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Microsoft Microsoft tracker domain (source: Disconnect.me, category: Content)	Necessary	script	js.monitor.azure.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Qualtrics Qualtrics tracker domain (source: Disconnect.me, category: Content)	Necessary	script	zn0gwzvoaupqcgtr8-oldnational.siteintercept.qualtrics.com
Yahoo! Yahoo! tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s.yimg.com
Yahoo! Yahoo! tracker domain (source: Disconnect.me, category: Content)	Necessary	script	sp.analytics.yahoo.com
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	dpm.demdex.net
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	sync-tm.everesttech.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	cm.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
OpenX before consent OpenX tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	us-u.openx.net
RoqAd before consent RoqAd tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	wt.rqtrk.eu
The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	match.adsrvr.org