upway.co
Last scanned July 24, 2026
A cookie scan of upway.co performed on July 24, 2026 found 17 cookies and 236 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 236 third-party requests from 17 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.
Consent behaviour grade
8 / 100
This site set multiple tracking cookies before the visitor consented. Under ePrivacy Article 5(3), these require prior consent.
Automated point-in-time check of the scanned pages; not legal advice. How our check works.
Consent enforcement level
-
1
Nothing non-essential runs before consent is given. This is the strict reading of ePrivacy Article 5(3) and the strongest position.
-
2
Google tags load with storage defaulted to denied and send only cookieless pings before consent. Permitted in Google's model, but not the strict reading of Article 5(3).
-
3
Google Consent Mode v2 restrains Google tags, but other trackers or cookies were observed before consent.
-
4
Runs before consent This site
A consent banner is present but does not restrain tracking. Trackers and cookies run before the visitor consents.
Observed before consent
Cookies set before consent (17)
-
mp_66b68d3a7f8d18a100bbfd1debed0b7f_mixpanelanalytics · Mixpanel -
cart_currencyfunctional · E-commerce -
__obrefunknown -
_cs_cunknown -
_cs_idunknown -
_cs_sunknown -
_cs_s_ctxunknown -
_dd_sunknown -
_shopify_essentialunknown -
baMet_baEvsunknown -
baMet_visitunknown -
checkout_continuity_serviceunknown -
first_pla_callunknown -
localizationunknown -
storefront_urlunknown -
upway_abt-product_reviews_pdp_widgetunknown -
upway_visitor_idunknown
Tracking requests before consent (24)
- Awin static.shareasale.com
- Intuit mc.us20.list-manage.com set a cookie
- Intuit chimpstatic.com
- Intuit downloads.mailchimp.com
- Microsoft bat.bing.com
- MNTN dx.mountain.com set a cookie
- ContentSquare t.contentsquare.net
- Google LLC www.googletagmanager.com
- Mixpanel api-eu.mixpanel.com
- Affirm cdn1.affirm.com set a cookie
- Amazon d1um8515vdn9kb.cloudfront.net
- Google upway-public.storage.googleapis.com
- and 12 more
Cookies
17
Third-party
0
Trackers
236
Vendors
17
Consent banner
None detected
Scans
1
What this setup is missing
- Consent signals (IAB TCF) were detected, but the consent platform was not recognized.
- Google tags were observed, but Google Consent Mode v2 was not detected.
Compliance by audience
European Union
✗ Not metGDPR + ePrivacy · Prior consent (opt-in)
United Kingdom
✗ Not metUK GDPR + PECR · Consent-based
United States
✓ Meets this modelCCPA/CPRA + state laws · Notice & opt-out
Canada
! Needs attentionPIPEDA + Québec Law 25 · Consent-based
Brazil
! Needs attentionLGPD · Consent-based
Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.
Third-Party Trackers
236 requests detected from 17 vendors: Awin, Intuit, Microsoft, MNTN, ContentSquare...
Third-Party Trackers
236 requests detected from 17 vendors: Awin, Intuit, Microsoft, MNTN, ContentSquare...
Analytics
27
Marketing
34
Necessary
27
Functional
0
Other
0
| Vendor | Category | Type | Domain |
|---|---|---|---|
| Awin before consent Awin tracker domain (source: Disconnect.me, category: Advertising) | Advertising | script | static.shareasale.com |
| Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) | Advertising | script | mc.us20.list-manage.com |
| Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) | Advertising | script | chimpstatic.com |
| Intuit before consent Intuit tracker domain (source: Disconnect.me, category: Advertising) | Advertising | script | downloads.mailchimp.com |
| Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Advertising) | Advertising | pixel | bat.bing.com |
| MNTN before consent MNTN tracker domain (source: Disconnect.me, category: Advertising) | Advertising | script | dx.mountain.com |
| ContentSquare before consent ContentSquare tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | t.contentsquare.net |
| Google LLC before consent Google Tag Manager | Analytics | script | www.googletagmanager.com |
| Mixpanel before consent Mixpanel tracker domain (source: Disconnect.me, category: Analytics) | Analytics | script | api-eu.mixpanel.com |
| Affirm before consent Affirm tracker domain (source: Disconnect.me, category: Content) | Essential | script | cdn1.affirm.com |
| Amazon before consent Amazon tracker domain (source: Disconnect.me, category: Content) | Essential | script | d1um8515vdn9kb.cloudfront.net |
| Google before consent Google tracker domain (source: Disconnect.me, category: Content) | Essential | script | upway-public.storage.googleapis.com |
| Google before consent Google tracker domain (source: Disconnect.me, category: Content) | Essential | script | i.ytimg.com |
| Google before consent Google tracker domain (source: Disconnect.me, category: Content) | Essential | script | www.gstatic.com |
| Gorgias before consent Gorgias tracker domain (source: Disconnect.me, category: Content) | Essential | script | config.gorgias.chat |
| Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) | Essential | script | shop.app |
| Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content) | Essential | script | otlp-http-production.shopifysvc.com |
| TrustPilot before consent TrustPilot tracker domain (source: Disconnect.me, category: Content) | Essential | script | widget.trustpilot.com |
| Google LLC before consent YouTube embedded video | Marketing | iframe | www.youtube.com |
| Klaviyo Inc. before consent Klaviyo email marketing | Marketing | script | static.klaviyo.com |
| LinkedIn Corporation before consent LinkedIn Insight Tag | Marketing | script | snap.licdn.com |
| LinkedIn Corporation before consent LinkedIn Ads tracking | Marketing | pixel | px.ads.linkedin.com |
| Cloudflare Inc. Cloudflare CDNJS | Necessary | script | cdnjs.cloudflare.com |
| Google LLC Google Fonts stylesheet | Necessary | script | fonts.googleapis.com |
| Google LLC Google Fonts files | Necessary | script | fonts.gstatic.com |
| Shopify Inc. Shopify platform | Necessary | script | cdn.shopify.com |
| Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Other | script | pagead2.googlesyndication.com |
| Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) | Other | script | googleads.g.doubleclick.net |
Scan history
One completed scan: cookies and trackers from the scan on July 24, 2026.
Recent scans
| July 24, 2026 | 17 236 |
More Cookie Compliance Reviews
The Design Dream Company
designdream.co
UE.co is now DMS Insurance
ue.co
Convenios con Argentina - Universidad de Invest...
udi.edu.co
Become our Distributor
lofree.co
doserverless.co | 526: Invalid SSL certificate
doserverless.co
KeepCart Customer Reviews
keepcart.co
How to Write a Business Plan: 10 Easy Steps + E...
upmetrics.co
xCheck — Marketing Automation for Airlines
xcheck.co
Is upway.co your website?
Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.