Skip to main content
vpr.org

vpr.org

https://vpr.org

Last scanned July 24, 2026

A cookie scan of vpr.org conducted on July 24, 2026 found 13 cookies and 48 third-party tracking requests. No consent management platform was detected. Our check observed 48 third-party requests from 9 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Cookies

13

Third-party

13

Trackers

48

Vendors

9

Consent banner

None detected

Scans

1

What this setup is missing

  • No consent management platform was detected.
  • Google tags were observed, but Google Consent Mode v2 was not detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

Redirects HTTP to HTTPS

HSTS

Content Security Policy

Cookies

13 cookies detected: 0 necessary, 4 analytics, 2 marketing, 13 third-party

Total

13

Necessary

0

Functional

0

Analytics

4

Marketing

2

Unknown

7

13 third-party cookies detected

Third-party cookies require explicit user consent under GDPR/ePrivacy.

Filter by category
Name Domain Category Provider Expiry Secure HttpOnly Party
_ga before consent .vermontpublic.org Analytics Google Analytics 1.1 yr lifetime over 13 months 3rd
_ga_3H61MLD62F before consent .vermontpublic.org Analytics Google Analytics 1.1 yr lifetime over 13 months 3rd
_ga_XGZ99F1SED before consent .vermontpublic.org Analytics Google Analytics 1.1 yr lifetime over 13 months 3rd
_gcl_au before consent .vermontpublic.org Analytics Google Analytics 90 d 3rd
_fbp before consent .vermontpublic.org Marketing Facebook 90 d 3rd
_rdt_uuid before consent .vermontpublic.org Marketing Reddit 90 d 3rd
BSP_PLAYER_PREROLLUID before consent www.vermontpublic.org Unknown - Session 3rd
code_verifier before consent www.vermontpublic.org Unknown - Expired 3rd
_cb before consent .vermontpublic.org Unknown - 1.1 yr 3rd
_cb_svref before consent .vermontpublic.org Unknown - Expired 3rd
_chartbeat2 before consent .vermontpublic.org Unknown - 1.1 yr 3rd
_omappvp before consent www.vermontpublic.org Unknown - 1.1 yr lifetime over 13 months 3rd
_omappvs before consent www.vermontpublic.org Unknown - Expired 3rd

Browser storage set by the site

Name Domain Party
__storage_test__ set by a.omappapi.com/api.min.js:1:16888 https://www.vermontpublic.org 3rd before consent
__storage_test__ set by a.omappapi.com/api.min.js:1:16888 https://www.vermontpublic.org 3rd before consent
omVisitsFirst set by a.omappapi.com/api.min.js:1:27582 https://www.vermontpublic.org 3rd before consent
test set by npr.brightspotcdn.com/All.min.b574178186f8dca4ba5d7a5aa51a76a0.gz.js:2:1030970 https://www.vermontpublic.org 3rd before consent
test set by npr.brightspotcdn.com/All.min.b574178186f8dca4ba5d7a5aa51a76a0.gz.js:2:1030970 https://www.vermontpublic.org 3rd before consent
brightspot-persistent-player-state set by npr.brightspotcdn.com/All.min.b574178186f8dca4ba5d7a5aa51a76a0.gz.js:2:1018579 https://www.vermontpublic.org 3rd before consent
_cb_ls_test set by static.chartbeat.com/chartbeat.js:38:500 https://www.vermontpublic.org 3rd before consent
_cb set by static.chartbeat.com/chartbeat.js:39:86 https://www.vermontpublic.org 3rd before consent
_cb_expires set by static.chartbeat.com/chartbeat.js:39:101 https://www.vermontpublic.org 3rd before consent
_chartbeat2 set by static.chartbeat.com/chartbeat.js:39:86 https://www.vermontpublic.org 3rd before consent
_chartbeat2_expires set by static.chartbeat.com/chartbeat.js:39:101 https://www.vermontpublic.org 3rd before consent
_cb_svref set by static.chartbeat.com/chartbeat.js:39:86 https://www.vermontpublic.org 3rd before consent
_cb_svref_expires set by static.chartbeat.com/chartbeat.js:39:101 https://www.vermontpublic.org 3rd before consent
cntr_attr set by cdn01.basis.net/up.js https://www.vermontpublic.org 3rd before consent
_gcl_ls set by www.googletagmanager.com/js https://www.vermontpublic.org 3rd before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:186:242 https://www.vermontpublic.org 3rd before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:186:242 https://www.vermontpublic.org 3rd before consent

Third-Party Trackers

48 requests detected from 9 vendors: BasisTechnologies, Google, reddit, Retyp, Chartbeat...

Analytics

10

Marketing

6

Necessary

4

Functional

0

Other

0

Vendor Category Type Domain
BasisTechnologies before consent BasisTechnologies tracker domain (source: Disconnect.me, category: Advertising) Advertising script pixel-sync.sitescout.com
BasisTechnologies before consent BasisTechnologies tracker domain (source: Disconnect.me, category: Advertising) Advertising script cdn01.basis.net
Google before consent Google tracker domain (source: Disconnect.me, category: Advertising) Advertising script ep1.adtrafficquality.google
reddit before consent reddit tracker domain (source: Disconnect.me, category: Advertising) Advertising script www.redditstatic.com
Retyp before consent Retyp tracker domain (source: Disconnect.me, category: Advertising) Advertising script a.omappapi.com
Chartbeat before consent Chartbeat tracker domain (source: Disconnect.me, category: Analytics) Analytics script ping.chartbeat.net
Google before consent Google tracker domain (source: Disconnect.me, category: Analytics) Analytics script region1.analytics.google.com
Google LLC before consent Google Tag Manager Analytics script www.googletagmanager.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics) Analytics script www.clarity.ms
www.google.com before consent Analytics fetch www.google.com
Chartbeat before consent Chartbeat tracker domain (source: Disconnect.me, category: Content) Essential script static.chartbeat.com
Google before consent Google tracker domain (source: Disconnect.me, category: Content) Essential script www.google.dk
Google before consent Google tracker domain (source: Disconnect.me, category: Content) Essential script www.gstatic.com
Google before consent Google tracker domain (source: Disconnect.me, category: Content) Essential script jnn-pa.googleapis.com
Google before consent Google tracker domain (source: Disconnect.me, category: Content) Essential script i.ytimg.com
Google LLC before consent YouTube embedded video Marketing iframe www.youtube.com
Meta Platforms, Inc. before consent Facebook tracking pixel Marketing pixel www.facebook.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel Marketing script connect.facebook.net
Google LLC Google Fonts stylesheet Necessary script fonts.googleapis.com
Google LLC Google Fonts files Necessary script fonts.gstatic.com
Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Other script securepubads.g.doubleclick.net
Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Other script pagead2.googlesyndication.com
Google before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral) Other script region1.google-analytics.com
reddit before consent reddit tracker domain (source: Disconnect.me, category: Social) Social pixel alb.reddit.com

Scan history

One completed scan: cookies and trackers from the scan on July 24, 2026.

Recent scans

July 24, 2026 13 48

Is vpr.org your website?

Claim it to monitor your cookies and trackers, set up a consent banner with automatic script blocking, and keep your cookie policy up to date.