Every kind of tracker, on one page. Watch Privy find it and stop it.
This site deliberately embeds third-party services across every loading technique. Privy's scanner
discovers their cookies; the banner blocks each one until you consent to its category. Each card shows
whether the browser has contacted that vendor yet.
Necessary
Functional
Analytics
Marketing
Marketing & social
Video, audio and social embeds that drop third-party advertising cookies.
YouTube
VIDEO
iframe sets VISITOR_INFO1_LIVE, YSC (3rd-party)
Vimeo
iframe sets vuid (3rd-party)
Spotify
iframe sets sp_t, sp_landing (3rd-party)
Facebook Page plugin
iframe sets fr, datr (3rd-party)
X (Twitter)
static script widgets.js
Instagram
static script embed.js
TikTok
static script embed.js
Pinterest
static script pinit.js
Reddit
static script widgets.js
Google Ads (GPT)
static script sets __gads, __gpi
LinkedIn Insight
Fired by the GTM container, not by this page
via GTM pixel
Analytics
Measurement tools, loaded every way sites actually load them.
Google Tag Manager
Container GTM-KS3M7CSF
inline script loads the container
Google Analytics 4
Fired by GTM
via GTM sets _ga, _ga_*, _gcl_au
Microsoft Clarity
Session recording
dynamic script sets _clck, _clsk
Hotjar
Heatmaps, fired by GTM
via GTM sets _hjSession*
Functional
Features a visitor might want, which still set cookies.
Google Maps
iframe sets NID (3rd-party)
Necessary
These run before consent by design; the banner should leave them alone.
HubSpot forms
Forms loader
static script categorised Necessary by the scan
reCAPTCHA
exempt data-privy-consent="ignore"
Stripe.js
Payment fraud signals
static script sets __stripe_mid
First-party cookies
Cookies this site sets itself, only for the categories you have consented to.
Technique coverage
Every way a tag reaches a page, so each blocking path is exercised.
Technique Example on this page
Static <script src> Google Ads, X, Instagram, TikTok, Pinterest, Reddit, HubSpot, Stripe
Dynamic injection (el.src = …) Microsoft Clarity
Inline script Google Tag Manager loader
Container-fired (GTM) GA4, Hotjar, LinkedIn Insight
<iframe>YouTube, Vimeo, Spotify, SoundCloud, Facebook, Google Maps
Live cookie log
First-party cookies as they appear. Third-party cookies are invisible to page scripts; the card notes say which
ones to look for in DevTools.