Does statebags.com use cookies?

statebags.com uses 19 cookies. No consent management platform was detected.

Does statebags.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on statebags.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does statebags.com use?

statebags.com loads 228 third-party requests from 20 vendors, including Hextom, Infillion, Microsoft, MNTN, Partnerize.

How many marketing and analytics cookies does statebags.com set?

statebags.com sets 0 marketing and 6 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

statebags.com

Item: statebags.com
Rating: 8
Author: Passiro

https://statebags.com

Last scanned July 24, 2026

A cookie scan of statebags.com performed on July 24, 2026 found 19 cookies and 228 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 228 third-party requests from 20 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

228

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

19 cookies detected: 0 necessary, 6 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.statebags.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_5EXBY99YGG before consent	.statebags.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_ga_WH18CRMVH9 before consent	.statebags.com	Analytics	Google Analytics	1.1 yr lifetime over 13 months	–	–	1st
_gcl_au before consent	.statebags.com	Analytics	Google Analytics	90 d	–	–	1st
_hjSessionUser_3663953 before consent	.statebags.com	Analytics	Hotjar	365 d	✓	–	1st
_hjSession_3663953 before consent	.statebags.com	Analytics	Hotjar	Expired	✓	–	1st
cart before consent	statebags.com	Functional	E-commerce	31 d	–	–	1st
cart_currency before consent	statebags.com	Functional	E-commerce	14 d	–	–	1st
grid_layout_l before consent	statebags.com	Unknown	-	7 d	–	–	1st
ig-fv before consent	.statebags.com	Unknown	-	365 d	–	–	1st
ig-id before consent	.statebags.com	Unknown	-	365 d	–	–	1st
ig-location before consent	statebags.com	Unknown	-	Expired	✓	–	1st
ig-pv before consent	.statebags.com	Unknown	-	365 d	–	–	1st
ig-vars before consent	.statebags.com	Unknown	-	365 d	–	–	1st
localization before consent	statebags.com	Unknown	-	365 d	–	–	1st
solve.data_processing_permissions before consent	statebags.com	Unknown	-	Expired	–	–	1st
_shg_session_id before consent	statebags.com	Unknown	-	Expired	✓	–	1st
_shg_user_id before consent	statebags.com	Unknown	-	1.1 yr lifetime over 13 months	✓	–	1st
_shopify_essential before consent	statebags.com	Unknown	-	365 d	✓	✓	1st

Third-Party Trackers

228 requests detected from 20 vendors: Hextom, Infillion, Microsoft, MNTN, Partnerize...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Hextom before consent Hextom tracker domain (source: Disconnect.me, category: Advertising)	Advertising	script	qab.hextom.com
Infillion before consent Infillion tracker domain (source: Disconnect.me, category: Advertising)	Advertising	script	p.alocdn.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Advertising	pixel	bat.bing.com
MNTN before consent MNTN tracker domain (source: Disconnect.me, category: Advertising)	Advertising	script	dx.mountain.com
Partnerize before consent Partnerize tracker domain (source: Disconnect.me, category: Advertising)	Advertising	script	container.pepperjam.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive)	Advertising	script	cdn-loyalty.yotpo.com
Cloudflare before consent Cloudflare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	cloudflareinsights.com
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o10734.ingest.sentry.io
Google before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
SmartBear before consent SmartBear tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	sessions.bugsnag.com
Google before consent Google tracker domain (source: Disconnect.me, category: Content)	Essential	script	www.google.dk
Google before consent Google tracker domain (source: Disconnect.me, category: Content)	Essential	script	www.gstatic.com
Gorgias before consent Gorgias tracker domain (source: Disconnect.me, category: Content)	Essential	script	config.gorgias.chat
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Essential	script	shop.app
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Essential	script	otlp-http-production.shopifysvc.com
Vimeo before consent Vimeo tracker domain (source: Disconnect.me, category: Content)	Essential	script	f.vimeocdn.com
Vimeo before consent Vimeo tracker domain (source: Disconnect.me, category: Content)	Essential	iframe	arclight.vimeo.com
Volentio JSD before consent Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Essential	script	cdn.jsdelivr.net
Google LLC before consent Google reCAPTCHA bot protection	Functional	script	www.google.com
Vimeo Inc. before consent Vimeo video embed	Functional	iframe	player.vimeo.com
Klaviyo Inc. before consent Klaviyo email marketing	Marketing	script	static.klaviyo.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Other	script	region1.google-analytics.com
Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Other	script	ad.doubleclick.net