Does thuma.co use cookies?

thuma.co uses 52 cookies. The site uses OneTrust as its consent management platform.

Does thuma.co use a cookie banner (CMP)?

Yes. thuma.co uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does thuma.co use?

thuma.co loads 381 third-party requests from 31 vendors, including ContentSquare, FunctionalSoftware, Google LLC, Microsoft, Shopify Inc..

How many marketing and analytics cookies does thuma.co set?

thuma.co sets 7 marketing and 3 analytics cookies, alongside 1 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

thuma.co

Item: thuma.co
Rating: 8
Author: Passiro

https://thuma.co

Last scanned July 20, 2026

A cookie scan of thuma.co conducted on July 20, 2026 found 52 cookies and 381 third-party tracking requests. The assessment covered 7 pages across 7 unique page templates. The site employs OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 381 third-party requests were detected from 31 vendors.

Claim & unlock

Third-party

Trackers

381

Vendors

Consent banner

OneTrust

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

52 cookies detected: 1 necessary, 3 analytics, 7 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.thuma.co	Analytics	Google Analytics	1.1 yr	–	–	1st
_ga_MFQR8SPE64 before consent	.thuma.co	Analytics	Google Analytics	1.1 yr	–	–	1st
_gcl_au before consent	.thuma.co	Analytics	Google Analytics	85 d	–	–	1st
cart before consent	www.thuma.co	Functional	E-commerce	25 d	✓	–	1st
_fbp before consent	.thuma.co	Marketing	Facebook	85 d	–	–	1st
_pin_unauth before consent	.thuma.co	Marketing	Pinterest	360 d	–	–	1st
_rdt_uuid before consent	.thuma.co	Marketing	Reddit	85 d	✓	–	1st
_scid before consent	.thuma.co	Marketing	Snapchat	1.1 yr	–	–	1st
_scid_r before consent	.thuma.co	Marketing	Snapchat	1.1 yr	–	–	1st
_ttp before consent	.thuma.co	Marketing	TikTok	85 d	–	–	1st
_tt_enable_cookie before consent	.thuma.co	Marketing	TikTok	85 d	–	–	1st
OptanonConsent	.www.thuma.co	Necessary	OneTrust	360 d	–	–	1st
ax_visitor before consent	.thuma.co	Unknown	-	360 d	–	–	1st
com.adsmeasurement.pubsuite.pubSuiteInstallId before consent	.thuma.co	Unknown	-	1.1 yr	–	–	1st
IR_13998 before consent	.thuma.co	Unknown	-	Session	✓	–	1st
IR_gbd before consent	.thuma.co	Unknown	-	Session	–	–	1st
ntaid before consent	www.thuma.co	Unknown	-	2 d	–	✓	1st
sa-user-id before consent	www.thuma.co	Unknown	-	360 d	✓	–	1st
sa-user-id-v2 before consent	www.thuma.co	Unknown	-	360 d	✓	–	1st
sa-user-id-v3 before consent	www.thuma.co	Unknown	-	360 d	✓	–	1st
sa-user-id-v4 before consent	www.thuma.co	Unknown	-	360 d	✓	–	1st
ssPageLoadID before consent	www.thuma.co	Unknown	-	Expired	–	✓	1st
ssSessionId before consent	.thuma.co	Unknown	-	Expired	✓	–	1st
ssSessionIdNamespace before consent	www.thuma.co	Unknown	-	Expired	–	✓	1st
ssUserId before consent	www.thuma.co	Unknown	-	Expired	–	✓	1st
ssUserId before consent	.thuma.co	Unknown	-	1.1 yr	✓	–	1st
ssViewedProducts before consent	.thuma.co	Unknown	-	1.1 yr	✓	–	1st
tatari-cookie-test before consent	www.thuma.co	Unknown	-	1.1 yr	–	–	1st
tatari-session-cookie before consent	.thuma.co	Unknown	-	1.1 yr	–	–	1st
ttcsid before consent	.thuma.co	Unknown	-	85 d	–	–	1st
ttcsid_C5O9ANN1VL43UL1PMEN0 before consent	.thuma.co	Unknown	-	85 d	–	–	1st
_axwrt before consent	.thuma.co	Unknown	-	360 d	–	–	1st
_axwrt_ts before consent	.thuma.co	Unknown	-	360 d	–	–	1st
_cdi2_id before consent	.thuma.co	Unknown	-	355 d	✓	–	1st
_cdi2_id_s before consent	.thuma.co	Unknown	-	355 d	✓	✓	1st
_cs_c before consent	.thuma.co	Unknown	-	1.1 yr	–	–	1st
_cs_id before consent	.thuma.co	Unknown	-	1.1 yr	–	–	1st
_cs_s before consent	.thuma.co	Unknown	-	Expired	–	–	1st
_Elevar-apex before consent	.thuma.co	Unknown	-	360 d	✓	–	1st
_hp2_id.2462581974 before consent	.thuma.co	Unknown	-	1.1 yr	✓	–	1st
_hp2_ses_props.2462581974 before consent	.thuma.co	Unknown	-	Expired	✓	–	1st
_shopify_s before consent	.thuma.co	Unknown	-	Expired	–	–	1st
_shopify_y before consent	.thuma.co	Unknown	-	355 d	–	–	1st
__kla_id before consent	www.thuma.co	Unknown	-	1.1 yr	–	–	1st
__obref before consent	.thuma.co	Unknown	-	360 d	✓	–	1st
__pdst before consent	www.thuma.co	Unknown	-	360 d	–	–	1st
__ps_did before consent	.thuma.co	Unknown	-	360 d	✓	–	1st
__ps_fva before consent	.thuma.co	Unknown	-	360 d	✓	–	1st
__ps_lu before consent	.thuma.co	Unknown	-	360 d	✓	–	1st
__ps_r before consent	.thuma.co	Unknown	-	360 d	✓	–	1st
__ps_slu before consent	.thuma.co	Unknown	-	Expired	✓	–	1st
__ps_sr before consent	.thuma.co	Unknown	-	Expired	✓	–	1st

Third-Party Trackers

381 requests detected from 31 vendors: ContentSquare, FunctionalSoftware, Google LLC, Microsoft, Shopify Inc....

Analytics

Marketing

203

Necessary

Functional

Other

Vendor	Category	Type	Domain
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	cdn.heapanalytics.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	t.contentsquare.net
FunctionalSoftware before consent FunctionalSoftware tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	o4509312392364032.ingest.us.sentry.io
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
AppLovin before consent AppLovin tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	s.axon.ai
AppLovin before consent AppLovin tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	res4.applovin.com
Audiense before consent Audiense tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	shopify-gtm-suite.getelevar.com
Claritas before consent Claritas tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	trkn.us
Comcast before consent Comcast tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	segment.prod.bidr.io
DoubleVerify before consent DoubleVerify tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	getrockerbox.com
Dstillery before consent Dstillery tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	action.dstillery.com
Dstillery before consent Dstillery tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	action.media6degrees.com
Google LLC before consent Google Ads	Marketing	script	www.google.com
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	utt.impactcdn.com
Impact before consent Impact tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	thuma.pxf.io
Klaviyo Inc. before consent Klaviyo email marketing	Marketing	script	static.klaviyo.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
PebblePost before consent PebblePost tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.pbbl.co
Pinterest Inc. before consent Pinterest conversion tag	Marketing	pixel	ct.pinterest.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	www.redditstatic.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social)	Marketing	pixel	alb.reddit.com
Snap before consent Snap tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sc-static.net
Snap before consent Snap tracker domain (source: Disconnect.me, category: Social)	Marketing	script	tr6.snapchat.com
Snap Inc. before consent Snapchat conversion tracking	Marketing	pixel	tr.snapchat.com
Spotify before consent Spotify tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	pixels.spotify.com
StackAdapt before consent StackAdapt tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	tags.srv.stackadapt.com
Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.taboola.com
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
Yotpo before consent Yotpo tracker domain (source: Disconnect.me, category: EmailAggressive)	Marketing	script	api-cdn.yotpo.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	xp2023-pix.s3.amazonaws.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d2hrivdxn8ekm8.cloudfront.net
Athos Commerce Athos Commerce tracker domain (source: Disconnect.me, category: Content)	Necessary	script	lxwp4j.a.searchspring.io
Cloudflare Inc. Cloudflare CDNJS	Necessary	script	cdnjs.cloudflare.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Pinterest Pinterest tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s.pinimg.com
reddit reddit tracker domain (source: Disconnect.me, category: Content)	Necessary	script	pixel-config.reddit.com
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
Spotify Spotify tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.pdst.fm
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	cm.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.googleadservices.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	stats.g.doubleclick.net
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
Tapad before consent Tapad tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pixel.tapad.com