What does allstate.com track?
Before any consent, allstate.com loaded 2 tracking companies and set 6 advertising or analytics cookies.
That's fewer tracking companies than most sites we scanned: 56% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading www.allstate.com once and clicking nothing. How we scan
- Tracking companies
- 2
- Tracking cookies
- 6
- Third-party hosts
- 15
- Cookies in total
- 24
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 2 tracking companies still loaded while it was unanswered.
Companies contacted before consent
2 of the 6 companies it contacted before consent were analytics companies.
- Adobe11 requestsAnalytics
allstate.tt.omtrdc.net, assets.adobedtm.com, dpm.demdex.net
- Google Analytics1 requestAnalytics
www.googletagmanager.com
Other third parties (content delivery, consent, functional, unclassified)
- browser-intake-datadoghq.com14 requestsUnclassified
browser-intake-datadoghq.com
- milestoneinternet.com2 requestsUnclassified
schema.milestoneinternet.com
- OneTrust7 requestsConsent banner
cdn.cookielaw.org, geolocation.onetrust.com
- Akamai7 requestsContent delivery
s.go-mpulse.net, c.go-mpulse.net, 0217991c.akstat.io, trial-eum-clientnsv4-s.akamaihd.net
Cookies set before consent
The longest-lived tracking cookie it set was AMCV_97021C8B53295DF30A490D4D%40AdobeOrg, from Adobe, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| AMCV_97021C8B53295DF30A490D4D%40AdobeOrg | Advertising | allstate.com | 13 months |
| AMCVS_97021C8B53295DF30A490D4D%40AdobeOrg | Advertising | allstate.com | Session |
| demdex | Advertising | demdex.net (third party) | 6 months |
| mbox | Advertising | allstate.com | 13 months |
| s_ecid | Advertising | allstate.com | 13 months |
| s_pers | Analytics | allstate.com | 30 days |
| _dd_s_v2 | Unclassified | www.allstate.com | 12 months |
| commercesxa#lang | Unclassified | www.allstate.com | Session |
| CP-PROD-PD-S-SESSION-ID | Unclassified | allstate.com | Session |
| last_touch_mc | Unclassified | allstate.com | 1 day |
| s_sess | Unclassified | allstate.com | Session |
| sxa_site | Unclassified | www.allstate.com | Session |
| wcme_geo | Unclassified | www.allstate.com | Session |
| WCME.1515 | Unclassified | www.allstate.com | Session |
| WCME.1515 | Unclassified | resources.allstate.com | Session |
| __cf_bm | Functional | delivery.contenthub.allstate.com | Under a day |
| _abck | Functional | allstate.com | 12 months |
| AKA_A2 | Functional | allstate.com | Under a day |
| ASP.NET_SessionId | Functional | www.allstate.com | Session |
| at_check | Functional | allstate.com | Session |
| BIGipServereacs-cdn-443-pool | Functional | www.allstate.com | Session |
| OptanonConsent | Functional | allstate.com | 12 months |
| RT | Functional | allstate.com | 7 days |
| bm_sz | Necessary | allstate.com | Under a day |
The page also wrote 10 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.