Skip to main content
sephora.co.id

sephora.co.id

https://sephora.co.id

Last scanned July 23, 2026

A cookie scan of sephora.co.id conducted on July 23, 2026 found 29 cookies and 32 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 32 third-party requests from 14 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

29

Third-party

0

Trackers

32

Vendors

14

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

29 cookies detected: 2 necessary, 6 analytics, 1 marketing

Total

29

Necessary

2

Functional

2

Analytics

6

Marketing

1

Unknown

18

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent www.sephora.co.id Analytics Google Analytics Session 1st
_ga before consent .sephora.co.id Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_ga_6KSFTBFXP6 before consent .sephora.co.id Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_ga_M8KMETX52Z before consent .sephora.co.id Analytics Google Analytics 1.1 yr lifetime over 13 months 1st
_gcl_au before consent .sephora.co.id Analytics Google Analytics 87 d 1st
_gid before consent .sephora.co.id Analytics Google Analytics Expired 1st
language before consent www.sephora.co.id Functional Language 362 d 1st
locale before consent www.sephora.co.id Functional Language 362 d 1st
_fbp before consent .sephora.co.id Marketing Facebook 87 d 1st
bm_sz .sephora.co.id Necessary Akamai Expired 1st
_abck .sephora.co.id Necessary Akamai 362 d 1st
bm_lso before consent .www.sephora.co.id Unknown - 27 d 1st
bm_s before consent .sephora.co.id Unknown - 28 d 1st
bm_so before consent .sephora.co.id Unknown - Expired 1st
bm_ss before consent .sephora.co.id Unknown - Expired 1st
BVBRANDID before consent .sephora.co.id Unknown - 362 d 1st
BVBRANDSID before consent .sephora.co.id Unknown - Expired 1st
forterToken before consent .sephora.co.id Unknown - 1.1 yr lifetime over 13 months 1st
g_state before consent www.sephora.co.id Unknown - 177 d 1st
kameleoonVisitorCode before consent www.sephora.co.id Unknown - 362 d 1st
PIM-SESSION-ID before consent .sephora.co.id Unknown - Session 1st
RT before consent .sephora.co.id Unknown - 4 d 1st
sephRecId before consent www.sephora.co.id Unknown - 27 d 1st
sephSplitKey before consent www.sephora.co.id Unknown - 2 d 1st
sid before consent www.sephora.co.id Unknown - 1.1 yr lifetime over 13 months 1st
signed_in before consent www.sephora.co.id Unknown - Session 1st
user-bucket-id before consent www.sephora.co.id Unknown - Session 1st
x-platform before consent www.sephora.co.id Unknown - Session 1st
_luxola_session before consent www.sephora.co.id Unknown - Session 1st

Third-Party Trackers

32 requests detected from 14 vendors: Akamai, Google LLC, New Relic, SmartBear, Zendesk Inc....

Analytics

10

Marketing

5

Necessary

10

Functional

1

Other

6

Vendor Category Type Domain
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics) Analytics script s2.go-mpulse.net
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics) Analytics script 0217991d.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics) Analytics script 0217990f.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics) Analytics script 02179919.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics) Analytics script 02179916.akstat.io
Akamai before consent Akamai tracker domain (source: Disconnect.me, category: Analytics) Analytics script 02179915.akstat.io
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
New Relic before consent New Relic tracker domain (source: Disconnect.me, category: Analytics) Analytics script js-agent.newrelic.com
SmartBear before consent SmartBear tracker domain (source: Disconnect.me, category: Analytics) Analytics script sessions.bugsnag.com
Zendesk Inc. before consent Zendesk assets Functional script static.zdassets.com
Braze before consent Braze tracker domain (source: Disconnect.me, category: Advertising) Marketing script js.appboycdn.com
Kameleoon before consent Kameleoon tracker domain (source: Disconnect.me, category: Advertising) Marketing script sdk-config.kameleoon.eu
Kameleoon before consent Kameleoon tracker domain (source: Disconnect.me, category: Advertising) Marketing script eu-data.kameleoon.eu
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content) Necessary script d2o5idwacg3gyw.cloudfront.net
Bazaarvoice Bazaarvoice tracker domain (source: Disconnect.me, category: Content) Necessary script apps.bazaarvoice.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script storage.googleapis.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script www.google.dk
Google LLC Google tracker domain (source: Disconnect.me, category: Content) Necessary script ajax.googleapis.com
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
New Relic Inc. New Relic data beacon Necessary pixel bam.nr-data.net
Zendesk Zendesk tracker domain (source: Disconnect.me, category: Content) Necessary script ekr.zdassets.com
Zendesk Zendesk tracker domain (source: Disconnect.me, category: Content) Necessary script sephoraid.zendesk.com
Zendesk Zendesk tracker domain (source: Disconnect.me, category: Content) Necessary script widget-mediator.zopim.com
Forter before consent Forter tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script 2e4dea750f0d.cdn4.forter.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown script stats.g.doubleclick.net
The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Unknown pixel match.adsrvr.org

Scan history

One completed scan: cookies and trackers from the scan on July 23, 2026.

Recent scans

July 23, 2026 29 32

Is sephora.co.id your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.