What does aap.org track?
Before any consent, aap.org loaded 10 tracking companies and set 6 advertising or analytics cookies.
That's more tracking companies than 92% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.aap.org once and clicking nothing. How we scan
- Tracking companies
- 10
- Tracking cookies
- 6
- Third-party hosts
- 47
- Cookies in total
- 27
Consent banner
The page loaded Usercentrics, a consent management platform. Everything below was recorded before anyone answered it. 10 tracking companies still loaded while it was unanswered.
Companies contacted before consent
6 of the 21 companies it contacted before consent were unclassified.
- Google Ads14 requestsAdvertising
securepubads.g.doubleclick.net, ad.doubleclick.net, stats.g.doubleclick.net, www.google.de
- The Trade Desk5 requestsAdvertising
js.adsrvr.org, insight.adsrvr.org, match.adsrvr.org
- Microsoft Advertising4 requestsAdvertising
bat.bing.com, bat.bing.net
- ShareThis1 requestAdvertising
platform-api.sharethis.com
- Meta3 requestsSocial media
connect.facebook.net, www.facebook.com
- LinkedIn1 requestSocial media
snap.licdn.com
- Google Analytics13 requestsAnalytics
www.googletagmanager.com, region1.analytics.google.com, region1.google-analytics.com
- Microsoft Clarity8 requestsAnalytics
y.clarity.ms, www.clarity.ms, scripts.clarity.ms
- Cloudflare Web Analytics1 requestAnalytics
static.cloudflareinsights.com
- Adobe1 requestAnalytics
assets.adobedtm.com
Other third parties (content delivery, consent, functional, unclassified)
- luckyorange.com18 requestsUnclassified
tools.luckyorange.com, api-preview.luckyorange.com, settings.luckyorange.com
- hum.works4 requestsUnclassified
aap.hum.works
- magnetmail.net2 requestsUnclassified
tracking.magnetmail.net
- atlassian.net2 requestsUnclassified
adagetechnologies.atlassian.net
- kickfire.com2 requestsUnclassified
twin-iq.kickfire.com
- callrail.com1 requestUnclassified
cdn.callrail.com
- Usercentrics23 requestsConsent banner
web.cmp.usercentrics.eu, v1.api.service.cmp.usercentrics.eu, uct.service.usercentrics.eu, consent-api.service.consent.usercentrics.eu
- UserWay27 requestsFunctional
cdn.userway.org, api.userway.org, cdn77.api.userway.org
- Fundraise Up16 requestsFunctional
static.fundraiseup.com, cdn.fundraiseup.com, fndrsp.net
- Google9 requestsFunctional
www.google.com, adservice.google.com, ajax.googleapis.com, retail.googleapis.com
- Brightcove1 requestFunctional
players.brightcove.net
Cookies set before consent
The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _fbp | Advertising | aap.org | 3 months |
| _gcl_au | Advertising | aap.org | 3 months |
| _ga | Analytics | aap.org | 13 months |
| _ga_6QGLCJCPB2 | Analytics | aap.org | 13 months |
| _ga_FD9D3XZVQQ | Analytics | aap.org | 13 months |
| _ga_GMZCQS1K47 | Analytics | aap.org | 13 months |
| _rm_tk | Unclassified | magnetmail.net (third party) | 2 months |
| _rm_ts | Unclassified | magnetmail.net (third party) | Session |
| .AspNetCore.Session | Unclassified | www.aap.org | Session |
| aap-lb-cookie | Unclassified | www.aap.org | Session |
| atlassian.xsrf.token | Unclassified | adagetechnologies.atlassian.net (third party) | Session |
| calltrk_landing | Unclassified | aap.org | 6 months |
| calltrk_referrer | Unclassified | aap.org | 6 months |
| EPiServer_Commerce_AnonymousId | Unclassified | www.aap.org | 12 months |
| EPiStateMarker | Unclassified | www.aap.org | Session |
| fundraiseup_cid | Unclassified | aap.org | 13 months |
| fundraiseup_func | Unclassified | aap.org | Session |
| fundraiseup_stat | Unclassified | aap.org | Session |
| hum_aap_synced | Unclassified | aap.org | 13 months |
| hum_aap_visitor | Unclassified | aap.org | 13 months |
| lo-uid | Unclassified | aap.org | 13 months |
| lo-visits | Unclassified | aap.org | 13 months |
| __cf_bm | Functional | aap.org | Under a day |
| _cfuvid | Functional | aap.org | Session |
| AWSALBCORS | Functional | tracking.magnetmail.net (third party) | 7 days |
| cf_clearance | Functional | aap.org | 12 months |
| test_cookie | Functional | doubleclick.net (third party) | Under a day |
The page also wrote 22 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.