opal.so
Last scanned July 24, 2026
A cookie scan of opal.so performed on July 24, 2026 found 18 cookies and 28 third-party tracking requests. The assessment covered 9 pages across 9 unique page templates. No consent management platform was detected. Our check observed 28 third-party requests from 11 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.
Consent behaviour grade
16 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Observed before consent
Cookies set before consent (18)
-
_fbpmarketing · Facebook -
_tt_enable_cookiemarketing · TikTok -
_ttpmarketing · TikTok -
_gaanalytics · Google Analytics -
_ga_146XGTMLDXanalytics · Google Analytics -
_ga_PET6HVLPTDanalytics · Google Analytics -
_gat_gtag_UA_168845105_1analytics · Google Analytics -
_gcl_auanalytics · Google Analytics -
_gidanalytics · Google Analytics -
_hjSession_2622104analytics · Hotjar -
_hjSessionUser_2622104analytics · Hotjar -
__obrefunknown -
amp_d03bb0unknown -
ttcsidunknown -
ttcsid_CD40H63C77U9UGLCUHG0unknown -
__stripe_midnecessary · Stripe -
__stripe_sidnecessary · Stripe -
_cfuvidnecessary · Cloudflare
Tracking requests before consent (15)
- Amplitude cdn.amplitude.com
- ContentSquare static.hotjar.com
- ContentSquare vc.hotjar.io
- Google LLC www.googleoptimize.com
- Google LLC www.googletagmanager.com
- Google LLC region1.analytics.google.com
- Google LLC www.google.com set a cookie
- Typeform SL embed.typeform.com
- Google LLC www.youtube.com set a cookie
- Meta Platforms, Inc. connect.facebook.net
- Meta Platforms, Inc. www.facebook.com
- TikTok analytics.tiktok.com set a cookie
- and 3 more
Cookies
18
Third-party
18
Trackers
28
Vendors
11
Consent banner
None detected
Scans
1
What this setup is missing
- No consent management platform was detected.
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
! Needs attentionCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
28 requests detected from 11 vendors: Amplitude, ContentSquare, Google LLC, Typeform SL, Meta Platforms, Inc....
Third-Party Trackers
28 requests detected from 11 vendors: Amplitude, ContentSquare, Google LLC, Typeform SL, Meta Platforms, Inc....
Analytics
6
Marketing
4
Necessary
13
Functional
2
Other
3
| Vendor | Category | Type | Domain |
|---|---|---|---|
| Amplitude before consent Amplitude tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | cdn.amplitude.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | static.hotjar.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | vc.hotjar.io |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | www.googleoptimize.com |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | region1.analytics.google.com |
| Google LLC before consent Google reCAPTCHA bot protection | Functional | script | www.google.com |
| Typeform SL before consent Typeform embedded form | Functional | iframe | embed.typeform.com |
| Google LLC before consent YouTube embedded video | Marketing | iframe | www.youtube.com |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| Meta Platforms, Inc. before consent Facebook tracking pixel | Marketing | pixel | www.facebook.com |
| TikTok before consent TikTok analytics pixel | Marketing | script | analytics.tiktok.com |
| Amazon Amazon tracker domain (source: Disconnect.me, category: Content) | Necessary | script | d3e54v103j8qbb.cloudfront.net |
| Amazon Amazon tracker domain (source: Disconnect.me, category: Content) | Necessary | script | slater-app.s3.amazonaws.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.google.dk |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | i.ytimg.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | jnn-pa.googleapis.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | content-firebaseappcheck.googleapis.com |
| Stripe Stripe tracker domain (source: Disconnect.me, category: Content) | Necessary | script | r.stripe.com |
| Stripe Inc. Stripe payment processing | Necessary | script | js.stripe.com |
| Stripe Inc. Stripe fraud detection | Necessary | script | m.stripe.com |
| Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) | Necessary | script | cdn.jsdelivr.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | ad.doubleclick.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | www.google-analytics.com |
| Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive) | Unknown | script | m.stripe.network |
Scan history
One completed scan: cookies and trackers from the scan on July 24, 2026.
Recent scans
| July 24, 2026 | 18 28 |
More Cookie Compliance Reviews
OneStream vs BlackLine vs Nominal: APM Compared...
nominal.so
Guppy: The AI That Fights for Fans
guppy.so
[23호]. AI로 다 빨라진다더니, 돈 앞�...
maily.so
Aile Filmleri izle
hdfilmizle.so
Loops | Email Marketing Software for SaaS Teams
loops.so
What Curation Means to Professional Photographers
narrative.so
My Stepmother and Stepsisters Aren't Wicked Epi...
animeworld.so
La Newsletter de la boutique – La boutique SO
boutique.so
Is opal.so your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.