Does undercanvas.com use cookies?

undercanvas.com uses 26 cookies, 6 of which are set by third-party domains. No consent management platform was detected.

Does undercanvas.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on undercanvas.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does undercanvas.com use?

undercanvas.com loads 51 third-party requests from 32 vendors, including comScore, ContentSquare, Crazy Egg, Google LLC, Microsoft.

How many marketing and analytics cookies does undercanvas.com set?

undercanvas.com sets 6 marketing and 9 analytics cookies, alongside 6 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

undercanvas.com

Item: undercanvas.com
Rating: 8
Author: Passiro

https://undercanvas.com

Last scanned July 21, 2026

A cookie scan of undercanvas.com performed on July 21, 2026 found 26 cookies and 51 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 51 third-party requests from 32 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

26 cookies detected: 6 necessary, 9 analytics, 6 marketing, 6 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

6 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.undercanvas.com	Analytics	Google Analytics	1.1 yr	✓	–	1st
_ga before consent	.ulumresorts.com	Analytics	Google Analytics	1.1 yr	–	–	3rd
_ga_3R7K470E7H before consent	.undercanvas.com	Analytics	Google Analytics	1.1 yr	✓	–	1st
_ga_J6M2WP6RRZ before consent	.ulumresorts.com	Analytics	Google Analytics	1.1 yr	–	–	3rd
_gcl_au before consent	.undercanvas.com	Analytics	Google Analytics	84 d	–	–	1st
_gcl_au before consent	.ulumresorts.com	Analytics	Google Analytics	84 d	–	–	3rd
_gid before consent	.undercanvas.com	Analytics	Google Analytics	Expired	✓	–	1st
_hjSessionUser_1326028 before consent	.undercanvas.com	Analytics	Hotjar	359 d	✓	–	1st
_hjSession_1326028 before consent	.undercanvas.com	Analytics	Hotjar	Expired	✓	–	1st
_dc_gtm_UA-70988919-1 before consent	.undercanvas.com	Marketing	Google Tag Manager	Expired	✓	–	1st
_fbp before consent	.undercanvas.com	Marketing	Facebook	84 d	–	–	1st
_fbp before consent	.ulumresorts.com	Marketing	Facebook	84 d	–	–	3rd
_pin_unauth before consent	.undercanvas.com	Marketing	Pinterest	359 d	–	–	1st
_ttp before consent	.undercanvas.com	Marketing	TikTok	84 d	–	–	1st
_tt_enable_cookie before consent	.undercanvas.com	Marketing	TikTok	84 d	–	–	1st
cf_clearance	.undercanvas.com	Necessary	Cloudflare	359 d	✓	✓	1st
OptanonConsent	.ulumresorts.com	Necessary	OneTrust	359 d	–	–	3rd
OptanonConsent	.undercanvas.com	Necessary	OneTrust	359 d	–	–	1st
__cf_bm	.undercanvas.com	Necessary	Cloudflare	Expired	✓	✓	1st
__cf_bm	.www.undercanvas.com	Necessary	Cloudflare	Expired	✓	✓	1st
__cf_bm	.www.ulumresorts.com	Necessary	Cloudflare	Expired	✓	✓	3rd
FPGSID before consent	.undercanvas.com	Unknown	-	Expired	✓	–	1st
FPID before consent	.undercanvas.com	Unknown	-	1.1 yr	✓	✓	1st
FPLC before consent	.undercanvas.com	Unknown	-	Expired	✓	–	1st
ttcsid before consent	.undercanvas.com	Unknown	-	84 d	–	–	1st
ttcsid_D4F1RHJC77UD6NKPB23G before consent	.undercanvas.com	Unknown	-	84 d	–	–	1st

Third-Party Trackers

51 requests detected from 32 vendors: comScore, ContentSquare, Crazy Egg, Google LLC, Microsoft...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
comScore before consent comScore tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	sb.scorecardresearch.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	static.hotjar.com
ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	vc.hotjar.io
Crazy Egg before consent Crazy Egg tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	script.crazyegg.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Vimeo Inc. before consent Vimeo video embed	Functional	iframe	player.vimeo.com
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	s.amazon-adsystem.com
Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	www.imdb.com
Ascent360 before consent Ascent360 tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	files.ascent360.com
CHEQ before consent CHEQ tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	nexus.ensighten.com
Cint before consent Cint tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	usersync.samplicio.us
Comcast before consent Comcast tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	user-sync.fwmrm.net
Criteo before consent Criteo tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	x.bidswitch.net
GeniusMonkey before consent GeniusMonkey tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	pm.geniusmonkey.com
Google LLC before consent YouTube embedded video	Marketing	iframe	www.youtube.com
InMarket before consent InMarket tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	lciapi.ninthdecimal.com
iSpot before consent iSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	pi.ispot.tv
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	ib.adnxs.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising)	Marketing	pixel	bat.bing.com
Nielsen before consent Nielsen tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	loadus.exelator.com
Pinterest Inc. before consent Pinterest conversion tag	Marketing	pixel	ct.pinterest.com
Samba.tv before consent Samba.tv tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	ads.samba.tv
SearchForce before consent SearchForce tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	uipglob.semasio.net
Taboola before consent Taboola tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	sync.taboola.com
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
TransUnion before consent TransUnion tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	aa.agkn.com
WPP before consent WPP tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	odr.mookie1.com
Zeotap before consent Zeotap tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	spl.zeotap.com
Amazon Amazon tracker domain (source: Disconnect.me, category: Content)	Necessary	script	d1eoo1tco6rr5e.cloudfront.net
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	maps.gstatic.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	i.ytimg.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	places.googleapis.com
OneTrust LLC OneTrust consent management	Necessary	script	cdn.cookielaw.org
Pinterest Pinterest tracker domain (source: Disconnect.me, category: Content)	Necessary	script	s.pinimg.com
Vimeo Vimeo tracker domain (source: Disconnect.me, category: Content)	Necessary	script	download-video-ak.vimeocdn.com
Adobe before consent Adobe tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	dpm.demdex.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	cm.g.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.google-analytics.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	googleads.g.doubleclick.net
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com
OpenX before consent OpenX tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	us-u.openx.net
The Trade Desk before consent The Trade Desk tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	pixel	insight.adsrvr.org