Skip to content
CookieTosser

What does booking.com track?

Before any consent, booking.com loaded 1 tracking company and set 0 advertising or analytics cookies.

That's fewer tracking companies than most sites we scanned: 75% of the 2,450 sites we checked loaded more.

Scanned October 2, 2026 from Germany, loading www.booking.com/index.en-gb.html?aid=304142&label=gen173bo-10CAEoggI46AdIM1gDaDuIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAgKoAgG4Avn2_dUGwAIB0gIkYzA2ZTJkYjAtMTA2YS00MGE1LThlOTItZjc4NmNjZjk0MjI52AIB4AIB once and clicking nothing. How we scan

Tracking companies
1
Tracking cookies
0
Third-party hosts
8
Cookies in total
9

Consent banner

The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 1 tracking company still loaded while it was unanswered.

Companies contacted before consent

1 of the 4 companies it contacted before consent were advertising companies.

  • Google Ads

    pagead2.googlesyndication.com, ep1.adtrafficquality.google, c4a98f7584df42ca92e974a13364f350.safeframe.googlesyndication.com

    6 requestsAdvertising

Other third parties (content delivery, consent, functional, unclassified)

  • bstatic.com

    cf.bstatic.com, t-cf.bstatic.com

    116 requestsUnclassified
  • OneTrust

    cdn.cookielaw.org, geolocation.onetrust.com

    6 requestsConsent banner
  • AWS WAF

    d8c14d4960ca.5b2b76d5.eu-central-1.token.awswaf.com

    3 requestsFunctional

Cookies set before consent

CookiePurposeSet byLasts
bk_nav_searchUnclassifiedbooking.comUnder a day
bkngUnclassifiedbooking.com13 months
bkng_ap_sso_sessionUnclassifiedaccount.booking.com13 months
bkng_sso_authUnclassifiedbooking.com13 months
bkng_sso_sesUnclassifiedbooking.com13 months
bkng_sso_sessionUnclassifiedbooking.com13 months
pcm_consentUnclassifiedbooking.com12 months
OptanonConsentFunctionalwww.booking.com12 months
aws-waf-tokenNecessarybooking.com4 days

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.