pay.com.au
Last scanned July 24, 2026
A cookie scan of pay.com.au completed on July 24, 2026 found 36 cookies and 40 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 40 third-party requests from 21 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.
Consent behaviour grade
8 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Observed before consent
Cookies set before consent (36)
-
_fbpmarketing · Facebook -
_pin_unauthmarketing · Pinterest -
_rdt_uuidmarketing · Reddit -
_tt_enable_cookiemarketing · TikTok -
_ttpmarketing · TikTok -
_uetsidmarketing · Microsoft Ads -
_uetvidmarketing · Microsoft Ads -
visitor_id967653marketing · Pardot -
visitor_id967653-hashmarketing · Pardot -
_gaanalytics · Google Analytics -
_ga_GJ3XYFSFMSanalytics · Google Analytics -
_gcl_auanalytics · Google Analytics -
_hjSession_6677131analytics · Hotjar -
_hjSessionUser_6677131analytics · Hotjar -
__obrefunknown -
_pin_aemunknown -
_sfid_2451unknown -
_sfid_undefinedunknown -
_sn_aunknown -
_sn_munknown - and 16 more
Tracking requests before consent (29)
- Amplitude cdn.amplitude.com
- ContentSquare static.hotjar.com
- Fullstory edge.fullstory.com
- Google LLC www.googletagmanager.com
- Google LLC region1.analytics.google.com
- Kloudend ipapi.co
- Microsoft www.clarity.ms
- Optimizely Inc. logx.optimizely.com
- Optimizely Inc. cdn.optimizely.com
- Google LLC www.google.com
- Zendesk Inc. static.zdassets.com
- Drip Global sleeknotecustomerscripts.sleeknote.com
- and 17 more
Cookies
36
Third-party
0
Trackers
40
Vendors
21
Consent banner
None detected
Scans
1
What this setup is missing
- No consent management platform was detected.
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
! Needs attentionCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
40 requests detected from 21 vendors: Amplitude, ContentSquare, Fullstory, Google LLC, Kloudend...
Third-Party Trackers
40 requests detected from 21 vendors: Amplitude, ContentSquare, Fullstory, Google LLC, Kloudend...
Analytics
9
Marketing
14
Necessary
11
Functional
2
Other
4
| Vendor | Category | Type | Domain |
|---|---|---|---|
| Amplitude before consent Amplitude tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | cdn.amplitude.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | static.hotjar.com |
| Fullstory before consent Fullstory tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | edge.fullstory.com |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | region1.analytics.google.com |
| Kloudend before consent Kloudend tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | ipapi.co |
| Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | www.clarity.ms |
| Optimizely Inc. before consent Optimizely event logging | Analytics | pixel | logx.optimizely.com |
| Optimizely Inc. before consent Optimizely A/B testing | Analytics | script | cdn.optimizely.com |
| Google LLC before consent Google reCAPTCHA bot protection | Functional | script | www.google.com |
| Zendesk Inc. before consent Zendesk assets | Functional | script | static.zdassets.com |
| Drip Global before consent Drip Global tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | sleeknotecustomerscripts.sleeknote.com |
| LinkedIn Corporation before consent LinkedIn Insight Tag | Marketing | script | snap.licdn.com |
| LinkedIn Corporation before consent LinkedIn Ads tracking | Marketing | pixel | px.ads.linkedin.com |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| Meta Platforms, Inc. before consent Facebook tracking pixel | Marketing | pixel | www.facebook.com |
| Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) | Marketing | pixel | bat.bing.com |
| Optimizely before consent Optimizely tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | cdn3.optimizely.com |
| Pinterest Inc. before consent Pinterest conversion tag | Marketing | pixel | ct.pinterest.com |
| reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | www.redditstatic.com |
| reddit before consent reddit tracker domain (source: Disconnect.me, category: Social) | Marketing | pixel | alb.reddit.com |
| Salesforce before consent Salesforce tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | pi.pardot.com |
| TikTok before consent TikTok analytics pixel | Marketing | script | analytics.tiktok.com |
| X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Advertising) | Marketing | pixel | static.ads-twitter.com |
| X (Twitter) before consent Twitter tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | t.co |
| Automattic Automattic tracker domain (source: Disconnect.me, category: Content) | Necessary | script | i0.wp.com |
| Automattic Automattic tracker domain (source: Disconnect.me, category: Content) | Necessary | script | secure.gravatar.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.google.dk |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Pinterest Pinterest tracker domain (source: Disconnect.me, category: Content) | Necessary | script | s.pinimg.com |
| reddit reddit tracker domain (source: Disconnect.me, category: Content) | Necessary | script | pixel-config.reddit.com |
| Salesforce Salesforce tracker domain (source: Disconnect.me, category: Content) | Necessary | script | cdn.c360a.salesforce.com |
| Zendesk Zendesk tracker domain (source: Disconnect.me, category: Content) | Necessary | script | ekr.zdassets.com |
| Zendesk Zendesk tracker domain (source: Disconnect.me, category: Content) | Necessary | script | payrewards.zendesk.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | ad.doubleclick.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | pixel | adservice.google.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | www.googleadservices.com |
| The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | pixel | js.adsrvr.org |
Scan history
One completed scan: cookies and trackers from the scan on July 24, 2026.
Recent scans
| July 24, 2026 | 36 40 |
More Cookie Compliance Reviews
Email Protection | Cloudflare
thegeorgebluemountains.com.au
Amileka
amileka.com.au
Integrated Business & Financial Advisers | Kear...
kearneygroup.com.au
Additional Member Benefits - SRCP
srcp.org.au
Ovia Matte White 360mm Round Counter Top Basin ...
bathroomsalesdirect.com.au
Society for Mental Health Research
smhr.org.au
ANZ Ups Interest Rates on Variable Home Loans, ...
homeloanexperts.com.au
First Advantage Australia and New Zealand
fadv.com.au
Is pay.com.au your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.