What does box.com track?
Before any consent, box.com loaded 8 tracking companies and set 15 advertising or analytics cookies.
That's more tracking companies than 89% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.box.com/en-gb/home?url_redirect=direct once and clicking nothing. How we scan
- Tracking companies
- 8
- Tracking cookies
- 15
- Third-party hosts
- 27
- Cookies in total
- 38
Consent banner
The page loaded TrustArc, a consent management platform. Everything below was recorded before anyone answered it. 8 tracking companies still loaded while it was unanswered.
Companies contacted before consent
6 of the 12 companies it contacted before consent were analytics companies.
- Xandr (Microsoft)1 requestAdvertising
secure.adnxs.com
- TechTarget1 requestAdvertising
ibc-flow.techtarget.com
- Adobe23 requestsAnalytics
assets.adobedtm.com, dpm.demdex.net, munchkin.marketo.net, box.demdex.net
- 6sense20 requestsAnalytics
b.6sc.co, j.6sc.co, c.6sc.co, epsilon.6sense.com
- Segment7 requestsAnalytics
cdn.segment.com, api.segment.io
- New Relic6 requestsAnalytics
bam.nr-data.net, js-agent.newrelic.com
- Google Analytics1 requestAnalytics
www.googletagmanager.com
- Cloudflare Web Analytics1 requestAnalytics
static.cloudflareinsights.com
Other third parties (content delivery, consent, functional, unclassified)
Cookies set before consent
The longest-lived tracking cookie it set was _mkto_trk, from OneTrust, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _mkto_trk | Advertising | box.com | 13 months |
| 6suuid | Advertising | 6sc.co (third party) | 13 months |
| AMCV_B9B28F7954BD76240A4C98BC%40AdobeOrg | Advertising | box.com | 13 months |
| AMCVS_B9B28F7954BD76240A4C98BC%40AdobeOrg | Advertising | box.com | Session |
| demdex | Advertising | demdex.net (third party) | 6 months |
| dpm | Advertising | dpm.demdex.net (third party) | 6 months |
| everest_g_v2 | Advertising | everesttech.net (third party) | 12 months |
| mbox | Advertising | box.com | 13 months |
| s_ecid | Advertising | box.com | Session |
| boxinc!mboxPC | Analytics | boxinc.tt.omtrdc.net (third party) | 13 months |
| boxinc!mboxSession | Analytics | boxinc.tt.omtrdc.net (third party) | Under a day |
| s_cc | Analytics | box.com | Session |
| s_nr30 | Analytics | box.com | 30 days |
| s_plt | Analytics | box.com | Session |
| s_tslv | Analytics | box.com | 13 months |
| __q_state_QJy1YqZaG8LUA72E | Unclassified | www.box.com | 13 months |
| _an_uid | Unclassified | www.box.com | 7 days |
| _gd_session | Unclassified | www.box.com | Under a day |
| _gd_svisitor | Unclassified | www.box.com | 13 months |
| _gd_visitor | Unclassified | www.box.com | 13 months |
| _uc_current_session | Unclassified | box.com | Under a day |
| _uc_initial_landing_page | Unclassified | box.com | Session |
| _uc_referrer | Unclassified | box.com | Session |
| _uc_visits | Unclassified | box.com | Session |
| adobeVisitID | Unclassified | www.box.com | Session |
| box_marketing | Unclassified | box.com | 12 months |
| box_visitor_id | Unclassified | box.com | 12 months |
| external_referrer | Unclassified | box.com | 7 days |
| gpv_pageName | Unclassified | box.com | Under a day |
| gpv_pageURL | Unclassified | box.com | Under a day |
| s_depth | Unclassified | box.com | Session |
| s_dur | Unclassified | box.com | Under a day |
| s_inv | Unclassified | box.com | Under a day |
| __cf_bm | Functional | box.com | Under a day |
| at_check | Functional | box.com | Session |
| cf_clearance | Functional | box.com | 12 months |
| notice_behavior | Necessary | box.com | Session |
| TAsessionID | Necessary | box.com | Under a day |
The page also wrote 13 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.