What does bybit.com track?
Before any consent, bybit.com loaded 6 tracking companies and set 15 advertising or analytics cookies.
That's more tracking companies than 83% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.bybit.com/en once and clicking nothing. How we scan
- Tracking companies
- 6
- Tracking cookies
- 15
- Third-party hosts
- 25
- Cookies in total
- 41
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
5 of the 14 companies it contacted before consent were unclassified.
- TikTok7 requestsSocial media
analytics.tiktok.com, analytics-ipv6.tiktokw.us
- X (Twitter)5 requestsSocial media
t.co, analytics.twitter.com, static.ads-twitter.com
- LinkedIn4 requestsSocial media
snap.licdn.com, px.ads.linkedin.com
- Meta3 requestsSocial media
connect.facebook.net, www.facebook.com
- AppsFlyer11 requestsAnalytics
websdk.appsflyersdk.com, wa.onelink.me, wa.appsflyersdk.com
- Google Analytics1 requestAnalytics
www.googletagmanager.com
Other third parties (content delivery, consent, functional, unclassified)
- ffbbbdc6d3c353211fe2ba39c9f744cd.com24 requestsUnclassified
sc-datasink.ffbbbdc6d3c353211fe2ba39c9f744cd.com, monitor-frontend-collector.ffbbbdc6d3c353211fe2ba39c9f744cd.com
- ffe390afd658c19dcbf707e0597b846d.de5 requestsUnclassified
sc-abtest.ffe390afd658c19dcbf707e0597b846d.de, pup-resource.ffe390afd658c19dcbf707e0597b846d.de
- telegram.org5 requestsUnclassified
telegram.org, oauth.telegram.org
- turingfraud.net4 requestsUnclassified
www.turingfraud.net
- invalid1 requestUnclassified
invalid
- Google4 requestsFunctional
accounts.google.com, fonts.gstatic.com
- Apple1 requestFunctional
appleid.cdn-apple.com
- Google Cloud1 requestContent delivery
mpc-prod-27-s6uit34pua-uk.a.run.app
Cookies set before consent
The longest-lived tracking cookie it set was guest_id, from X (Twitter), lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _fbp | Advertising | bybit.com | 3 months |
| _tt_enable_cookie | Advertising | bybit.com | 13 months |
| _ttp | Advertising | tiktok.com (third party) | 13 months |
| _ttp | Advertising | bybit.com | 13 months |
| bcookie | Advertising | linkedin.com (third party) | 12 months |
| guest_id | Advertising | twitter.com (third party) | 13 months |
| guest_id_ads | Advertising | twitter.com (third party) | 13 months |
| guest_id_marketing | Advertising | twitter.com (third party) | 13 months |
| lidc | Advertising | linkedin.com (third party) | 1 day |
| muc_ads | Advertising | t.co (third party) | 13 months |
| personalization_id | Advertising | twitter.com (third party) | 13 months |
| ttcsid | Advertising | bybit.com | 13 months |
| ttcsid_CMEEMQRC77UBHLCRLFPG | Advertising | bybit.com | 13 months |
| af_id | Analytics | appsflyersdk.com (third party) | 13 months |
| af_id | Analytics | onelink.me (third party) | 13 months |
| _by_l_g_d | Unclassified | bybit.com | 4 months |
| _TDID_CK | Unclassified | www.bybit.com | Session |
| _twpid | Unclassified | bybit.com | 13 months |
| _twsid | Unclassified | bybit.com | 13 months |
| 4458fd8f95037d16 | Unclassified | www.bybit.com | Session |
| AF_SYNC | Unclassified | bybit.com | 7 days |
| afUserId | Unclassified | bybit.com | 13 months |
| cookies_uuid_report | Unclassified | www.bybit.com | 7 days |
| deviceId | Unclassified | bybit.com | 13 months |
| first_collect | Unclassified | www.bybit.com | 7 days |
| REG_REF_prod | Unclassified | bybit.com | 1 day |
| sajssdk_2015_cross_new_user | Unclassified | bybit.com | Under a day |
| sensorsdata2015jssdkcross | Unclassified | bybit.com | 12 months |
| stel_ssid | Unclassified | oauth.telegram.org (third party) | 12 months |
| trace_id_report | Unclassified | www.bybit.com | Under a day |
| trace_id_time | Unclassified | www.bybit.com | 7 days |
| __cf_bm | Functional | twitter.com (third party) | Under a day |
| __cf_bm | Functional | t.co (third party) | Under a day |
| __cf_bm | Functional | linkedin.com (third party) | Under a day |
| _abck | Functional | bybit.com | 12 months |
| ak_bmsc | Functional | bybit.com | Under a day |
| bm_sv | Functional | bybit.com | Under a day |
| g_state | Functional | www.bybit.com | 6 months |
| li_gc | Functional | linkedin.com (third party) | 6 months |
| bm_mi | Necessary | bybit.com | Under a day |
| bm_sz | Necessary | bybit.com | Under a day |
The page also wrote 43 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.