Does schuh.eu use cookies?

schuh.eu uses 12 cookies. The site uses OneTrust as its consent management platform.

Does schuh.eu use a cookie banner (CMP)?

Yes. schuh.eu uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does schuh.eu use?

schuh.eu loads 10 third-party requests from 7 vendors, including Cloudflare Inc., Google LLC, Microsoft, Salesforce, az416426.vo.msecnd.net.

How many marketing and analytics cookies does schuh.eu set?

schuh.eu sets 0 marketing and 0 analytics cookies, alongside 3 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

schuh.eu

Item: schuh.eu
Rating: 65
Author: Passiro

https://schuh.eu

Last scanned July 24, 2026

A cookie scan of schuh.eu performed on July 24, 2026 found 12 cookies and 10 third-party tracking requests. The assessment covered 3 pages across 3 unique page templates. The site relies on OneTrust as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 10 third-party requests were detected from 7 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

12 cookies detected: 3 necessary, 0 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cf_clearance	.schuh.eu	Necessary	Cloudflare	355 d	✓	✓	1st
OptanonConsent	.schuh.eu	Necessary	OneTrust	355 d	–	–	1st
__cf_bm	.schuh.eu	Necessary	Cloudflare	Expired	✓	✓	1st
ai_session before consent	.schuh.eu	Unknown	-	Expired	✓	–	1st
ai_user before consent	.schuh.eu	Unknown	-	355 d	✓	–	1st
schuhBasket before consent	.schuh.eu	Unknown	-	170 d	–	✓	1st
schuhGA before consent	.schuh.eu	Unknown	-	1.1 yr	–	✓	1st
schuhGeo before consent	.schuh.eu	Unknown	-	20 d	–	✓	1st
schuhGlobalSession before consent	.schuh.eu	Unknown	-	355 d	–	✓	1st
shopbox_control_flag before consent	.schuh.eu	Unknown	-	Session	–	–	1st
shopbox_control_group before consent	.schuh.eu	Unknown	-	Session	–	–	1st
shopbox_sb_suid before consent	.schuh.eu	Unknown	-	Expired	–	–	1st

Browser storage set by the site

Name	Domain	Party
Fri Jul 24 2026 15:47:01 GMT+0200 (Central European Summer Time) set by az416426.vo.msecnd.net/ai.0.js:1:9709	https://www.schuh.eu	1st	before consent
AI_sentBuffer set by az416426.vo.msecnd.net/ai.0.js:1:11981	https://www.schuh.eu	1st	before consent
AI_buffer set by az416426.vo.msecnd.net/ai.0.js:1:11981	https://www.schuh.eu	1st	before consent
Fri Jul 24 2026 15:47:01 GMT+0200 (Central European Summer Time) set by az416426.vo.msecnd.net/ai.0.js:1:9709	https://www.schuh.eu	1st	before consent
wishlist set by www.schuh.eu/schuhMaster.min.js	https://www.schuh.eu	1st	before consent
Fri Jul 24 2026 15:47:02 GMT+0200 (Central European Summer Time) set by az416426.vo.msecnd.net/ai.0.js:1:9709	https://www.schuh.eu	1st	before consent
v24DiscoverCache set by cdn.vee24.com/disco.min.js:1:4752	https://www.schuh.eu	1st	before consent
svelte-app-v0.1.304 set by app.shopbox.ai/sbmain.min.js:1:15688	https://www.schuh.eu	1st	before consent
sb_suid set by app.shopbox.ai/sbmain.min.js:1:13555	https://www.schuh.eu	1st	before consent
vee24.localStorageTest set by static.vee24.com/v24Embedded.js:1:127927	https://www.schuh.eu	1st	before consent
Fri Jul 24 2026 15:47:04 GMT+0200 (Central European Summer Time) set by az416426.vo.msecnd.net/ai.0.js:1:9709	https://www.schuh.eu	1st	before consent
Fri Jul 24 2026 15:47:04 GMT+0200 (Central European Summer Time) set by az416426.vo.msecnd.net/ai.0.js:1:9709	https://www.schuh.eu	1st	before consent
Fri Jul 24 2026 15:47:05 GMT+0200 (Central European Summer Time) set by az416426.vo.msecnd.net/ai.0.js:1:9709	https://www.schuh.eu	1st	before consent
AITR_OnError set by az416426.vo.msecnd.net/ai.0.js:1:11981	https://www.schuh.eu	1st	before consent

Third-Party Trackers

10 requests detected from 7 vendors: Cloudflare Inc., Google LLC, Microsoft, Salesforce, az416426.vo.msecnd.net...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	dc.services.visualstudio.com
Salesforce before consent Salesforce tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	500008661.collect.igodigital.com
az416426.vo.msecnd.net before consent	Marketing	script	az416426.vo.msecnd.net
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d2ob0iztsaxy5v.cloudfront.net
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	storage.googleapis.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	cdn-ukwest.onetrust.com