penguin.co.nz
Last scanned July 23, 2026
A cookie scan of penguin.co.nz completed on July 23, 2026 found 9 cookies and 18 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 18 third-party requests from 8 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.
Consent behaviour grade
24 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
Trackers or cookies execute before the visitor consents, with no consent signals restraining them.
Observed before consent
Cookies set before consent (9)
-
_fbpmarketing · Facebook -
_gaanalytics · Google Analytics -
_ga_DK9D7G1HHTanalytics · Google Analytics -
_gat_UA-9012742-1analytics · Google Analytics -
_gcl_auanalytics · Google Analytics -
_gidanalytics · Google Analytics -
_hjSession_1430231analytics · Hotjar -
_hjSessionUser_1430231analytics · Hotjar -
__kla_idunknown
Tracking requests before consent (12)
- ContentSquare static.hotjar.com
- ContentSquare vc.hotjar.io
- Google LLC www.googletagmanager.com
- Google LLC region1.analytics.google.com
- Google LLC www.google.com
- Typeform SL embed.typeform.com
- Klaviyo Inc. static.klaviyo.com
- Meta Platforms, Inc. www.facebook.com
- Meta Platforms, Inc. connect.facebook.net
- Unbounce dacf675768e847cbaee5b9ee9d45ed9d.js.ubembed.com set a cookie
- Google LLC www.google-analytics.com
- Google LLC stats.g.doubleclick.net
Cookies
9
Third-party
0
Trackers
18
Vendors
8
Consent banner
None detected
Scans
1
What this setup is missing
- No consent management platform was detected.
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
! Needs attentionCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
18 requests detected from 8 vendors: ContentSquare, Google LLC, Typeform SL, Klaviyo Inc., Meta Platforms, Inc....
Third-Party Trackers
18 requests detected from 8 vendors: ContentSquare, Google LLC, Typeform SL, Klaviyo Inc., Meta Platforms, Inc....
Analytics
4
Marketing
4
Necessary
6
Functional
2
Other
2
| Vendor | Category | Type | Domain |
|---|---|---|---|
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | static.hotjar.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | vc.hotjar.io |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | region1.analytics.google.com |
| Google LLC before consent Google reCAPTCHA bot protection | Functional | script | www.google.com |
| Typeform SL before consent Typeform embedded form | Functional | iframe | embed.typeform.com |
| Klaviyo Inc. before consent Klaviyo email marketing | Marketing | script | static.klaviyo.com |
| Meta Platforms, Inc. before consent Facebook tracking pixel | Marketing | pixel | www.facebook.com |
| Meta Platforms, Inc. before consent Facebook SDK / Pixel | Marketing | script | connect.facebook.net |
| Unbounce before consent Unbounce tracker domain (source: Disconnect.me, category: Advertising) | Marketing | script | dacf675768e847cbaee5b9ee9d45ed9d.js.ubembed.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.gstatic.com |
| Google LLC Google tracker domain (source: Disconnect.me, category: Content) | Necessary | script | www.google.dk |
| Imgix Imgix tracker domain (source: Disconnect.me, category: Content) | Necessary | script | prh.imgix.net |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | www.google-analytics.com |
| Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Unknown | script | stats.g.doubleclick.net |
Scan history
One completed scan: cookies and trackers from the scan on July 23, 2026.
Recent scans
| July 23, 2026 | 9 18 |
More Cookie Compliance Reviews
One moment, please...
akicreative.nz
Psychotherapy - AUT Integrated Health
aih.aut.ac.nz
One moment, please...
agilitywithease.co.nz
Schedule alone time for greater self awareness ...
agentforchange.co.nz
CAME New Zealand | Gate Motors | Barriers | Ind...
adg.co.nz
Home - Niho Ora ki Manukau – AUT Oral Health ...
adc.aut.ac.nz
Access Matters Aotearoa
accessmatters.org.nz
BetZillo Casino AU: Play Pokies and Claim A$3,0...
accessalliance.org.nz
Is penguin.co.nz your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.