Skip to content
CookieTosser

What does 123rf.com track?

Before any consent, 123rf.com loaded 7 tracking companies and set 18 advertising or analytics cookies.

That's more tracking companies than 86% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading de.123rf.com once and clicking nothing. How we scan

Tracking companies
7
Tracking cookies
18
Third-party hosts
23
Cookies in total
29

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

3 of the 9 companies it contacted before consent were social media companies.

  • Google Ads

    ad.doubleclick.net, 4645712.fls.doubleclick.net, googleads.g.doubleclick.net, stats.g.doubleclick.net

    7 requestsAdvertising
  • Microsoft Advertising

    bat.bing.com, bat.bing.net

    4 requestsAdvertising
  • TikTok

    analytics.tiktok.com, analytics-ipv6.tiktokw.us

    8 requestsSocial media
  • X (Twitter)

    t.co, analytics.twitter.com, static.ads-twitter.com

    5 requestsSocial media
  • Meta

    connect.facebook.net, www.facebook.com

    3 requestsSocial media
  • Google Analytics

    www.googletagmanager.com, www.google-analytics.com, region1.analytics.google.com

    8 requestsAnalytics
  • Microsoft Clarity

    y.clarity.ms, www.clarity.ms, scripts.clarity.ms

    4 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • Google

    www.google.com, adservice.google.com

    3 requestsFunctional
  • Google Cloud

    mpc2-prod-28-is5qnl632q-ue.a.run.app

    1 requestContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was guest_id, from X (Twitter), lasting about 13 months.

CookiePurposeSet byLasts
_fbpAdvertising123rf.com3 months
_gcl_auAdvertising123rf.com3 months
_tt_enable_cookieAdvertising123rf.com13 months
_ttpAdvertisingtiktok.com (third party)13 months
_ttpAdvertising123rf.com13 months
guest_idAdvertisingtwitter.com (third party)13 months
guest_id_adsAdvertisingtwitter.com (third party)13 months
guest_id_marketingAdvertisingtwitter.com (third party)13 months
IDEAdvertisingdoubleclick.net (third party)13 months
muc_adsAdvertisingt.co (third party)13 months
personalization_idAdvertisingtwitter.com (third party)13 months
ttcsidAdvertising123rf.com13 months
ttcsid_CDTM1G3C77U93DJGNEIGAdvertising123rf.com13 months
_gaAnalyticsde.123rf.com13 months
_gaAnalytics123rf.com13 months
_ga_Y8798Z0549Analytics123rf.com13 months
_gat_UA-154033-4Analyticsde.123rf.comUnder a day
_gidAnalyticsde.123rf.com1 day
_twpidUnclassified123rf.com13 months
_twsidUnclassified123rf.com13 months
agreed_cUnclassified123rf.com12 months
agreed_pUnclassified123rf.com12 months
agreed_tUnclassified123rf.com12 months
fvdataUnclassified123rf.com30 days
gcsUnclassified123rf.com13 months
global_langUnclassified123rf.com3 months
myregionUnclassified123rf.com14 days
__cf_bmFunctionaltwitter.com (third party)Under a day
__cf_bmFunctionalt.co (third party)Under a day

The page also wrote 5 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.