Does shoestring.be use cookies?

shoestring.be uses 21 cookies, 21 of which are set by third-party domains. No consent management platform was detected.

Does shoestring.be use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on shoestring.be. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does shoestring.be use?

shoestring.be loads 31 third-party requests from 17 vendors, including analytics-ipv6.tiktokw.us, bgmin.cdn.billygrace.com, config1.veinteractive.com, ContentSquare, GetSiteControl.

How many marketing and analytics cookies does shoestring.be set?

shoestring.be sets 5 marketing and 8 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

shoestring.be

Item: shoestring.be
Rating: 8
Author: Passiro

https://shoestring.be

Last scanned July 26, 2026

A cookie scan of shoestring.be completed on July 26, 2026 found 21 cookies and 31 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 31 third-party requests from 17 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✗

Content Security Policy

✗

Cookies

21 cookies detected: 0 necessary, 8 analytics, 5 marketing, 21 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

21 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
FPID before consent	.shoestring.nl	Analytics	Google Analytics	1.1 yr lifetime over 13 months	✓	✓	3rd
FPLC before consent	.shoestring.nl	Analytics	Google Analytics	Expired	✓	–	3rd
_ga before consent	.shoestring.nl	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	3rd
_ga_B5Z5FYMYQD before consent	.shoestring.nl	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	3rd
_ga_Y550605GY3 before consent	.shoestring.nl	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	3rd
_gcl_au before consent	.shoestring.nl	Analytics	Google Analytics	89 d	–	–	3rd
_hjSessionUser_322686 before consent	.shoestring.nl	Analytics	Hotjar	364 d	✓	–	3rd
_hjSession_322686 before consent	.shoestring.nl	Analytics	Hotjar	Expired	✓	–	3rd
ARRAffinity before consent	.shoestring.nl	Functional	Azure / Microsoft	Session	✓	✓	3rd
ARRAffinitySameSite before consent	.shoestring.nl	Functional	Azure / Microsoft	Session	✓	✓	3rd
FPGSID before consent	.shoestring.nl	Functional	Google	Expired	✓	–	3rd
ttcsid before consent	.shoestring.nl	Marketing	TikTok	89 d	–	–	3rd
ttcsid_CH154MBC77U442B6TPU0 before consent	.shoestring.nl	Marketing	TikTok	89 d	–	–	3rd
_pin_unauth before consent	.shoestring.nl	Marketing	Pinterest	364 d	–	–	3rd
_ttp before consent	.shoestring.nl	Marketing	TikTok	89 d	–	–	3rd
_tt_enable_cookie before consent	.shoestring.nl	Marketing	TikTok	89 d	–	–	3rd
gtm_session_start before consent	shoestring.nl	Unknown	-	Expired	–	–	3rd
ps_rvm_PYY5 before consent	.shoestring.nl	Unknown	-	364 d	✓	–	3rd
__BillyPix_session_id before consent	.shoestring.nl	Unknown	-	Session	✓	–	3rd
__BillyPix_sid before consent	.shoestring.nl	Unknown	-	182 d	✓	–	3rd
__BillyPix_uid before consent	.shoestring.nl	Unknown	-	182 d	✓	–	3rd

Browser storage set by the site

Name	Domain	Party
ecommerceResetDone set by shoestring.nl/app.js	https://shoestring.nl	3rd	before consent
_gcl_ls set by www.googletagmanager.com/gtm.js	https://shoestring.nl	3rd	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242	https://shoestring.nl	3rd	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242	https://shoestring.nl	3rd	before consent
tt_sessionId set by analytics.tiktok.com/main.MTkwNzNhYjk5OQ.js:1:100651	https://shoestring.nl	3rd	before consent
tt_appInfo set by analytics.tiktok.com/main.MTkwNzNhYjk5OQ.js:1:100651	https://shoestring.nl	3rd	before consent
tt_pixel_session_index set by analytics.tiktok.com/main.MTkwNzNhYjk5OQ.js:1:103502	https://shoestring.nl	3rd	before consent
_hjLocalStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217238	https://shoestring.nl	3rd	before consent
_hjSessionStorageTest set by script.hotjar.com/modules.b3c3d2ffe9c422f77646.js:2:217463	https://shoestring.nl	3rd	before consent
is_eu set by s.pinimg.com/main.aba11588.js:1:74630	https://shoestring.nl	3rd	before consent
_gu set by st.getsitecontrol.com/runtime.2.11.2c70f83.js:2:311559	https://shoestring.nl	3rd	before consent
_gw set by st.getsitecontrol.com/runtime.2.11.2c70f83.js:2:311559	https://shoestring.nl	3rd	before consent
_gs set by st.getsitecontrol.com/runtime.2.11.2c70f83.js:2:311559	https://shoestring.nl	3rd	before consent
tt_pixel_is_enrich_ipv6_triggered_by_enrich_am set by analytics.tiktok.com/main.MTkwNzNhYjk5OQ.js:1:366558	https://shoestring.nl	3rd	before consent
__sak set by maps.googleapis.com/js	https://shoestring.nl	3rd	before consent

Third-Party Trackers

31 requests detected from 17 vendors: analytics-ipv6.tiktokw.us, bgmin.cdn.billygrace.com, config1.veinteractive.com, ContentSquare, GetSiteControl...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
analytics-ipv6.tiktokw.us before consent	Analytics	other	analytics-ipv6.tiktokw.us
bgmin.cdn.billygrace.com before consent	Analytics	script	bgmin.cdn.billygrace.com
config1.veinteractive.com before consent	Analytics	script	config1.veinteractive.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
GetSiteControl before consent GetSiteControl tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	widgets.getsitecontrol.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
image.providesupport.com before consent	Analytics	xhr	image.providesupport.com
Pinterest before consent Pinterest tracker domain (source: Disconnect.me, category: Content)	Analytics	script	s.pinimg.com
www.google.com before consent	Analytics	fetch	www.google.com
Adobe Fonts before consent Adobe Fonts (Typekit): web font delivery	Functional	script	use.typekit.net
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	static.criteo.net
Google LLC before consent YouTube embedded video	Marketing	iframe	www.youtube.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Pinterest Inc. before consent Pinterest conversion tag	Marketing	pixel	ct.pinterest.com
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
Cybot A/S (Cookiebot) Cookiebot consent management	Necessary	script	consent.cookiebot.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	jnn-pa.googleapis.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	widget.trustpilot.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	adservice.google.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net
UserCentrics UserCentrics tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	consentcdn.cookiebot.com