Skip to main content
onlyfy.com

onlyfy.com

https://onlyfy.com

Last scanned July 24, 2026

A cookie scan of onlyfy.com conducted on July 24, 2026 found 9 cookies and 6 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. The site employs Usercentrics as its consent management platform with IAB TCF v2.3; Google Consent Mode v2 was not observed. 6 third-party requests were detected from 6 vendors.

Cookies

9

Third-party

3

Trackers

6

Vendors

6

Consent banner

Usercentrics

Scans

1

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

9 cookies detected: 1 necessary, 2 analytics, 1 marketing, 3 third-party

Total

9

Necessary

1

Functional

0

Analytics

2

Marketing

1

Unknown

5

3 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
ab.storage.deviceId.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a before consent .onlyfy.com Analytics AB Tasty 1.1 yr 1st
ab.storage.sessionId.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a before consent .onlyfy.com Analytics AB Tasty 1.1 yr 1st
visitor_id before consent .onlyfy.com Marketing Pardot 355 d 1st
XSRF-TOKEN privacy.xing.com Necessary CSRF Protection Expired 3rd
c_ before consent .xing.com Unknown - Expired 3rd
c_visitor_id before consent .onlyfy.com Unknown - Expired 1st
laravel_session before consent privacy.xing.com Unknown - Expired 3rd
nwtPrevPage before consent .onlyfy.com Unknown - Expired 1st
wp-wpml_current_language before consent onlyfy.com Unknown - Session 1st

Browser storage set by the site

Name Domain Party
ucData set by web.cmp.usercentrics.eu/WebSdk.lib.913abc72.js:4:11320 https://onlyfy.com 1st before consent
ucString set by web.cmp.usercentrics.eu/WebSdk.lib.913abc72.js:4:11209 https://onlyfy.com 1st before consent
ab.test set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:121:574 https://onlyfy.com 1st before consent
ab.storage.events.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.sessionId.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.messagingSessionStart.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.deviceId.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.serverConfig.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.device.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.sdk_metadata.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.session_id_for_cached_metadata.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.triggers.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.triggers.ts.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.triggerFireInstancesById.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.lastDisplayedTriggerTime.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent
ab.storage.lastDisplayedTriggerTimesById.728abc05-dcf8-4c8d-b3cd-bf8a166c6e1a set by stan.onlyfy.com/693423dc5d3cf0569e94f5ecac6feb598529d5fe.js:86:66 https://onlyfy.com 1st before consent

Third-Party Trackers

6 requests detected from 6 vendors: privacy.xing.com, sdk.fra-01.braze.eu, stan.xing.com, www.xing.com, Google LLC...

Analytics

0

Marketing

4

Necessary

2

Functional

0

Other

0

Vendor Category Type Domain
privacy.xing.com before consent Marketing iframe privacy.xing.com
sdk.fra-01.braze.eu before consent Marketing xhr sdk.fra-01.braze.eu
stan.xing.com before consent Marketing iframe stan.xing.com
www.xing.com before consent Marketing fetch www.xing.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.gstatic.com
Usercentrics GmbH Usercentrics consent management Necessary script app.usercentrics.eu

Scan history

One completed scan: cookies and trackers from the scan on July 24, 2026.

Recent scans

July 24, 2026 9 6

Is onlyfy.com your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.