Skip to content
CookieTosser

What does au.com track?

Before any consent, au.com loaded 9 tracking companies and set 18 advertising or analytics cookies.

That's more tracking companies than 91% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.au.com once and clicking nothing. How we scan

Tracking companies
9
Tracking cookies
18
Third-party hosts
34
Cookies in total
27

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

4 of the 16 companies it contacted before consent were advertising companies.

  • Supership

    tg.socdm.com, sf.nazs.socdm.com, i.socdm.com, ssl.socdm.com

    14 requestsAdvertising
  • Google Ads

    ad.doubleclick.net, stats.g.doubleclick.net, www.google.de

    3 requestsAdvertising
  • D2C Inc

    pp.d2-apps.net, cdn.d2-apps.net

    3 requestsAdvertising
  • Yahoo Japan

    s.yimg.jp, b99.yahoo.co.jp

    2 requestsAdvertising
  • Meta

    connect.facebook.net, www.facebook.com

    3 requestsSocial media
  • YouTube

    www.youtube.com

    2 requestsSocial media
  • Google Analytics

    www.googletagmanager.com, www.google-analytics.com, region1.google-analytics.com, region1.analytics.google.com

    20 requestsAnalytics
  • Macromill

    img.macromill.com

    2 requestsAnalytics
  • Contentsquare

    t.contentsquare.net

    1 requestAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • nakanohito.jp

    cs.nakanohito.jp, bs.nakanohito.jp

    2 requestsUnclassified
  • kddi.com

    www.notice.kddi.com

    1 requestUnclassified
  • appspot.com

    metrics-ga.an.r.appspot.com

    1 requestUnclassified
  • Google

    fonts.gstatic.com, www.google.com, fonts.googleapis.com

    35 requestsFunctional
  • LivePerson

    lpcdn.lpsnmedia.net, accdn.lpsnmedia.net, ause1.v.liveperson.net, lptag.liveperson.net

    13 requestsFunctional
  • Apple

    static.cdn-apple.com

    1 requestFunctional
  • Cloudflare

    cdnjs.cloudflare.com

    1 requestContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.

CookiePurposeSet byLasts
__Secure-ROLLOUT_TOKENAdvertisingyoutube.com (third party)6 months
_fbpAdvertisingau.com3 months
_gcl_auAdvertisingau.com3 months
cAdvertisingimg.macromill.com (third party)12 months
VISITOR_INFO1_LIVEAdvertisingyoutube.com (third party)6 months
VISITOR_PRIVACY_METADATAAdvertisingyoutube.com (third party)6 months
_gaAnalyticsau.com13 months
_ga_8LW7DLSMNSAnalyticsau.com13 months
_ga_LQGLLT5T9SAnalyticsau.com13 months
_ga_NEDL1XGXY7Analyticsau.com13 months
_gat_abtasty95237486Analyticsau.comUnder a day
_gat_UA-39387335-246Analyticsau.comUnder a day
_gidAnalyticsau.com1 day
s_ccAnalyticsau.comSession
s_fidAnalyticsau.com13 months
s_ppnAnalyticsau.comUnder a day
s_ppvAnalyticsau.comSession
s_visitd_auAnalyticsau.com13 months
_yjsu_yjadUnclassifiedau.com12 months
envoyConsistentHashingUnclassifiedause1.v.liveperson.net (third party)12 months
LPSID-16820676Unclassifiedau.comSession
LPVIDUnclassifiedau.com12 months
s_nr_2Unclassifiedau.com4 months
s_ppvlUnclassifiedau.comSession
__Secure-YNIDFunctionalyoutube.com (third party)6 months
YSCFunctionalyoutube.com (third party)Session
affinityNecessarywww.au.comSession

The page also wrote 6 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.