What does aa.com track?
Before any consent, aa.com loaded 0 tracking companies and set 1 advertising or analytics cookie.
Scanned October 2, 2026 from Germany, loading www.aa.com once and clicking nothing. How we scan
- Tracking companies
- 0
- Tracking cookies
- 1
- Third-party hosts
- 1
- Cookies in total
- 23
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
None.
Other third parties (content delivery, consent, functional, unclassified)
- americanairlines.de1 requestUnclassified
www.americanairlines.de
Cookies set before consent
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| dtCookie | Analytics | aa.com | Session |
| aka_cr_code | Unclassified | aa.com | Session |
| aka_cr_code | Unclassified | www.aa.com | Session |
| aka_lc_code | Unclassified | aa.com | Session |
| aka_lc_code | Unclassified | www.aa.com | Session |
| aka_state_code | Unclassified | aa.com | Session |
| aka_state_code | Unclassified | www.aa.com | Session |
| akavpau_www_aafullsite | Unclassified | aa.com | Session |
| akavpau_www_aafullsite | Unclassified | www.aa.com | Session |
| akavpau_www_aahomepage | Unclassified | www.aa.com | Session |
| KROUTEID | Unclassified | www.aa.com | Session |
| ROUTEID | Unclassified | www.aa.com | Under a day |
| sessionLocale | Unclassified | www.aa.com | Session |
| UAC | Unclassified | www.aa.com | 13 months |
| _abck | Functional | aa.com | 12 months |
| AKA_A2 | Functional | aa.com | Under a day |
| JSESSIONID | Functional | www.aa.com | Session |
| bm_lso | Necessary | www.aa.com | 30 days |
| bm_s | Necessary | aa.com | 31 days |
| bm_sc | Necessary | aa.com | Under a day |
| bm_so | Necessary | aa.com | 1 day |
| bm_sz | Necessary | aa.com | Under a day |
| XSRF-TOKEN | Necessary | www.aa.com | Session |
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.