Does vacationsbyrail.com use cookies?

vacationsbyrail.com uses 7 cookies, 7 of which are set by third-party domains. The site uses OneTrust as its consent management platform.

Does vacationsbyrail.com use a cookie banner (CMP)?

Yes. vacationsbyrail.com uses OneTrust as its consent management platform. IAB TCF v2.3 was not detected. Google Consent Mode v2 was not detected.

Which third-party trackers does vacationsbyrail.com use?

vacationsbyrail.com loads 5 third-party requests from 3 vendors, including Google LLC, Symplify, OneTrust.

How many marketing and analytics cookies does vacationsbyrail.com set?

vacationsbyrail.com sets 0 marketing and 0 analytics cookies, alongside 3 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

vacationsbyrail.com

Item: vacationsbyrail.com
Rating: 82
Author: Passiro

https://vacationsbyrail.com

Last scanned July 21, 2026

A cookie scan of vacationsbyrail.com performed on July 21, 2026 found 7 cookies and 5 third-party tracking requests. The assessment covered 5 pages across 5 unique page templates. The site uses OneTrust as its consent management platform. Neither IAB TCF v2.3 nor Google Consent Mode v2 was observed on our check. 5 third-party requests were detected from 3 vendors.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

OneTrust

Scans

What this setup is missing

Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

7 cookies detected: 3 necessary, 0 analytics, 0 marketing, 7 third-party

Total

Necessary

Functional

Analytics

Marketing

Unknown

7 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
OptanonConsent	.greatrail.com	Necessary	OneTrust	358 d	–	–	3rd
__cflb	www.greatrail.com	Necessary	Cloudflare	Expired	✓	✓	3rd
__cf_bm	.greatrail.com	Necessary	Cloudflare	Expired	✓	✓	3rd
guc before consent	www.greatrail.com	Unknown	-	83 d	✓	–	3rd
sg_cookies before consent	.greatrail.com	Unknown	-	83 d	–	–	3rd
sg_cs_object before consent	.greatrail.com	Unknown	-	Expired	–	–	3rd
tfSessionStart before consent	.greatrail.com	Unknown	-	Expired	✓	–	3rd

Third-Party Trackers

5 requests detected from 3 vendors: Google LLC, Symplify, OneTrust

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Symplify before consent Symplify tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn-sitegainer.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
OneTrust OneTrust tracker domain (source: Disconnect.me, category: ConsentManagers)	Unknown	script	geolocation.onetrust.com