penboutique.com
Last scanned July 22, 2026
A cookie scan of penboutique.com performed on July 22, 2026 found 11 cookies and 21 third-party tracking requests. The assessment covered 3 pages across 3 unique page templates. No consent management platform was detected. Our check observed 21 third-party requests from 14 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.
Consent behaviour grade
24 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Observed before consent
Cookies set before consent (11)
-
cartfunctional · E-commerce -
cart_currencyfunctional · E-commerce -
wishlist_customer_idfunctional · E-commerce -
wishlist_idfunctional · E-commerce -
_shopify_essentialunknown -
bookmarkeditemsunknown -
localizationunknown -
wisepopsunknown -
wisepops_sessionunknown -
wisepops_visitorunknown -
wisepops_visitsunknown
Tracking requests before consent (7)
- HelpScout beacon-v2.helpscout.net
- Shopify Inc. monorail-edge.shopifysvc.com
- Klaviyo Inc. static.klaviyo.com
- Meta Platforms, Inc. connect.facebook.net
- Smile js.smile.io
- Wisepops wisepops.net
- Wisepops activity.wisepops.com
Cookies
11
Third-party
0
Trackers
21
Vendors
14
Consent banner
None detected
Scans
1
What this setup is missing
- No consent management platform was detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
! Needs attentionCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
21 requests detected from 14 vendors: HelpScout, Shopify Inc., Klaviyo Inc., Meta Platforms, Inc., Smile...
Third-Party Trackers
21 requests detected from 14 vendors: HelpScout, Shopify Inc., Klaviyo Inc., Meta Platforms, Inc., Smile...
Analytics
2
Marketing
5
Necessary
14
Functional
0
Other
0
| Vendor | Category | Type | Domain |
|---|---|---|---|
| HelpScout before consent HelpScout tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | beacon-v2.helpscout.net |
| Shopify Inc. before consent Shopify analytics | Analytics | pixel | monorail-edge.shopifysvc.com |
| Klaviyo Inc. before consent Klaviyo email marketing | Marketing | script | static.klaviyo.com |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| Smile before consent Smile tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | js.smile.io |
| Wisepops before consent Wisepops tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | wisepops.net |
| Wisepops before consent Wisepops tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | activity.wisepops.com |
| Amazon Amazon tracker domain (source: Disconnect.me, category: Content) | Necessary | script | navidium-static-assets.s3.amazonaws.com |
| Amazon Amazon tracker domain (source: Disconnect.me, category: Content) | Necessary | script | d1npnstlfekkfz.cloudfront.net |
| Cloudflare Inc. Cloudflare Turnstile / bot protection | Necessary | script | challenges.cloudflare.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | ajax.googleapis.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Sentry (Functional Software) Sentry browser SDK | Necessary | script | browser.sentry-cdn.com |
| Shopify Shopify tracker domain (source: Disconnect.me, category: Content) | Necessary | script | shop.app |
| Shopify Shopify tracker domain (source: Disconnect.me, category: Content) | Necessary | script | otlp-http-production.shopifysvc.com |
| Shopify Inc. Shopify platform | Necessary | script | cdn.shopify.com |
| Stamped Stamped tracker domain (source: Disconnect.me, category: Content) | Necessary | script | cdn1.stamped.io |
| Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content) | Necessary | script | cdn.jsdelivr.net |
| Wistia Wistia tracker domain (source: Disconnect.me, category: Content) | Necessary | script | fast.wistia.com |
Scan history
One completed scan: cookies and trackers from the scan on July 22, 2026.
Recent scans
| July 22, 2026 | 11 21 |
More Cookie Compliance Reviews
Over Aetrex – Aetrex Central Europe
aetrex-europe.com
Startup Trust & Compliance Timeline
aetos-data.com
Aetnawire
aetnawire.com
A&M Construction
aetmst.com
Ciclo “Empresa y digitalización” – AETICAL
aetical.com
Friction Reducers, Completion Fluids & Surfacta...
aetinnovation.com
Organizational Development – Aethos Consultin...
aethoscg.com
Aethon | Autonomous Mobile Robots
aethon.com
Is penboutique.com your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.