PRIVY by IDfy · Cookie Lab

Every kind of tracker, on one page.
Watch Privy find it and stop it.

This site deliberately embeds third-party services across every loading technique. Privy's scanner discovers their cookies; the banner blocks each one until you consent to its category. Each card shows whether the browser has contacted that vendor yet.

Necessary Functional Analytics Marketing

Marketing & social

Video, audio and social embeds that drop third-party advertising cookies.

YouTube
iframe sets VISITOR_INFO1_LIVE, YSC (3rd-party)
Vimeo
iframe sets vuid (3rd-party)
Spotify
iframe sets sp_t, sp_landing (3rd-party)
SoundCloud
iframe
Facebook Page plugin
iframe sets fr, datr (3rd-party)
X (Twitter)
static script widgets.js
Instagram
static script embed.js
TikTok
static script embed.js
Pinterest
static script pinit.js
Reddit
static script widgets.js
Google Ads (GPT)
static script sets __gads, __gpi
LinkedIn Insight
Fired by the GTM container, not by this page
via GTM pixel

Analytics

Measurement tools, loaded every way sites actually load them.

Google Tag Manager
Container GTM-KS3M7CSF
inline script loads the container
Google Analytics 4
Fired by GTM
via GTM sets _ga, _ga_*, _gcl_au
Microsoft Clarity
Session recording
dynamic script sets _clck, _clsk
Hotjar
Heatmaps, fired by GTM
via GTM sets _hjSession*

Functional

Features a visitor might want, which still set cookies.

Google Maps
iframe sets NID (3rd-party)

Necessary

These run before consent by design; the banner should leave them alone.

HubSpot forms
Forms loader
static script categorised Necessary by the scan
reCAPTCHA
exempt data-privy-consent="ignore"
Stripe.js
Payment fraud signals
static script sets __stripe_mid

First-party cookies

Cookies this site sets itself, only for the categories you have consented to.

Technique coverage

Every way a tag reaches a page, so each blocking path is exercised.

TechniqueExample on this page
Static <script src>Google Ads, X, Instagram, TikTok, Pinterest, Reddit, HubSpot, Stripe
Dynamic injection (el.src = …)Microsoft Clarity
Inline scriptGoogle Tag Manager loader
Container-fired (GTM)GA4, Hotjar, LinkedIn Insight
<iframe>YouTube, Vimeo, Spotify, SoundCloud, Facebook, Google Maps