Does victoriassecret.mx use cookies?

victoriassecret.mx uses 19 cookies. No consent management platform was detected.

Does victoriassecret.mx use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on victoriassecret.mx. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does victoriassecret.mx use?

victoriassecret.mx loads 35 third-party requests from 9 vendors, including Cloudflare Inc., Google LLC, Microsoft, Meta Platforms, Inc., SAP.

How many marketing and analytics cookies does victoriassecret.mx set?

victoriassecret.mx sets 3 marketing and 3 analytics cookies, alongside 2 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

victoriassecret.mx

Item: victoriassecret.mx
Rating: 16
Author: Passiro

https://victoriassecret.mx

Last scanned July 19, 2026

A cookie scan of victoriassecret.mx conducted on July 19, 2026 found 19 cookies and 35 third-party tracking requests. No consent management platform was detected. Our check observed 35 third-party requests from 9 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.
Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Cookies

19 cookies detected: 2 necessary, 3 analytics, 3 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_ga before consent	.victoriassecret.mx	Analytics	Google Analytics	1.1 yr	–	–	1st
_ga_VTYHJBJNHP before consent	.victoriassecret.mx	Analytics	Google Analytics	1.1 yr	–	–	1st
_gcl_au before consent	.victoriassecret.mx	Analytics	Google Analytics	85 d	–	–	1st
_fbp before consent	.victoriassecret.mx	Marketing	Facebook	85 d	–	–	1st
_ttp before consent	.victoriassecret.mx	Marketing	TikTok	85 d	–	–	1st
_tt_enable_cookie before consent	.victoriassecret.mx	Marketing	TikTok	85 d	–	–	1st
cf_clearance	.victoriassecret.mx	Necessary	Cloudflare	360 d	✓	✓	1st
__cf_bm	.victoriassecret.mx	Necessary	Cloudflare	Expired	✓	✓	1st
checkout.vtex.com before consent	.www.victoriassecret.mx	Unknown	-	175 d	✓	✓	1st
gig_bootstrap_4_bG63vWHdJMTXodrsftSlxw before consent	.victoriassecret.mx	Unknown	-	360 d	✓	–	1st
ttcsid before consent	.victoriassecret.mx	Unknown	-	85 d	–	–	1st
ttcsid_CV7IE5RC77U74D388780 before consent	.victoriassecret.mx	Unknown	-	85 d	–	–	1st
vtex-search-anonymous before consent	.victoriassecret.mx	Unknown	-	360 d	–	–	1st
vtex-search-session before consent	.victoriassecret.mx	Unknown	-	Expired	–	–	1st
VtexRCMacIdv7 before consent	.victoriassecret.mx	Unknown	-	360 d	–	–	1st
VtexRCSessionIdv7 before consent	.victoriassecret.mx	Unknown	-	Expired	–	–	1st
VtexWorkspace before consent	www.victoriassecret.mx	Unknown	-	Expired	✓	–	1st
vtex_segment before consent	www.victoriassecret.mx	Unknown	-	Expired	✓	✓	1st
vtex_session before consent	www.victoriassecret.mx	Unknown	-	Expired	✓	✓	1st

Third-Party Trackers

35 requests detected from 9 vendors: Cloudflare Inc., Google LLC, Microsoft, Meta Platforms, Inc., SAP...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare Inc. before consent Cloudflare Web Analytics	Analytics	script	static.cloudflareinsights.com
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	region1.analytics.google.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Google LLC before consent Google Maps API	Functional	script	maps.googleapis.com
Google LLC before consent Google Ads	Marketing	script	www.google.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
SAP before consent SAP tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	cdn.scarabresearch.com
SAP before consent SAP tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	webchannel-content.eservice.emarsys.net
TikTok before consent TikTok analytics pixel	Marketing	script	analytics.tiktok.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	www.google.dk
SAP SAP tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdns.gigya.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Vtex Vtex tracker domain (source: Disconnect.me, category: Content)	Necessary	script	io.vtex.com.br
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	ad.doubleclick.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	www.googleadservices.com
Jewel ML before consent Jewel ML tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	rerender.jewelml.io