What does battle.net track?
Before any consent, battle.net loaded 1 tracking company and set 0 advertising or analytics cookies.
That's fewer tracking companies than most sites we scanned: 75% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading eu.shop.battle.net/en-gb?from=root#optLogin=true once and clicking nothing. How we scan
- Tracking companies
- 1
- Tracking cookies
- 0
- Third-party hosts
- 8
- Cookies in total
- 10
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 1 tracking company still loaded while it was unanswered.
Companies contacted before consent
1 of the 4 companies it contacted before consent were analytics companies.
- Google Analytics9 requestsAnalytics
region1.google-analytics.com, www.googletagmanager.com
Other third parties (content delivery, consent, functional, unclassified)
Cookies set before consent
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| __Secure-authjs.callback-url | Unclassified | eu.shop.battle.net | Session |
| __Secure-authjs.state | Unclassified | eu.shop.battle.net | Under a day |
| access_token | Unclassified | eu.shop.battle.net | Session |
| autoLoginChecked | Unclassified | eu.shop.battle.net | Under a day |
| autoLoginChecked-next | Unclassified | eu.shop.battle.net | Under a day |
| deviceTrackingId | Unclassified | battle.net | 13 months |
| SESSIONID | Unclassified | oauth.battle.net | Session |
| sessionTrackingId | Unclassified | battle.net | 1 day |
| OptanonConsent | Functional | battle.net | 12 months |
| XSRF-TOKEN | Necessary | eu.shop.battle.net | Session |
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.