Does tombola.com use cookies?

tombola.com uses 5 cookies, 5 of which are set by third-party domains. The site uses OneTrust as its consent management platform.

Does tombola.com use a cookie banner (CMP)?

Yes. tombola.com uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 appears to be configured.

Which third-party trackers does tombola.com use?

tombola.com loads 8 third-party requests from 5 vendors, including Cloudflare Inc., Google LLC, Optimizely Inc., TrustPilot, OneTrust.

How many marketing and analytics cookies does tombola.com set?

tombola.com sets 0 marketing and 1 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

tombola.com

Item: tombola.com
Rating: 69
Author: Passiro

https://tombola.com

Last scanned July 21, 2026

A cookie scan of tombola.com conducted on July 21, 2026 found 5 cookies and 8 third-party tracking requests. The site relies on OneTrust as its consent management platform with Google Consent Mode v2; IAB TCF v2.3 was not observed. 8 third-party requests were detected from 5 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

What this setup is missing

Google Consent Mode v2 is present but does not default to denied for all storage types.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

5 cookies detected: 2 necessary, 1 analytics, 0 marketing, 5 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

5 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
optimizelyEndUserId before consent	.tombola.co.uk	Analytics	Optimizely	175 d	–	–	3rd
ASP.NET_SessionId	www.tombola.co.uk	Necessary	ASP.NET	Session	✓	✓	3rd
OptanonConsent	.tombola.co.uk	Necessary	OneTrust	359 d	–	–	3rd
TombolaGuid before consent	www.tombola.co.uk	Unknown	-	359 d	✓	✓	3rd
tombolausersession before consent	www.tombola.co.uk	Unknown	-	359 d	✓	✓	3rd

Third-Party Trackers

8 requests detected from 5 vendors: Cloudflare Inc., Google LLC, Optimizely Inc., TrustPilot, OneTrust

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Optimizely Inc. before consent Optimizely A/B testing	Analytics	script	cdn.optimizely.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
TrustPilot TrustPilot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	widget.trustpilot.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	cdn-ukwest.onetrust.com