Skip to content
CookieTosser

What does change.org track?

Before any consent, change.org loaded 6 tracking companies and set 1 advertising or analytics cookie.

That's more tracking companies than 83% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.change.org once and clicking nothing. How we scan

Tracking companies
6
Tracking cookies
1
Third-party hosts
20
Cookies in total
10

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

4 of the 10 companies it contacted before consent were analytics companies.

  • Microsoft Advertising

    bat.bing.net, bat.bing.com

    5 requestsAdvertising
  • Google Ads

    pagead2.googlesyndication.com

    2 requestsAdvertising
  • Amplitude

    cdn.amplitude.com, gs.amplitude.com

    20 requestsAnalytics
  • Google Analytics

    www.googletagmanager.com, region1.google-analytics.com

    4 requestsAnalytics
  • New Relic

    bam.nr-data.net, js-agent.newrelic.com

    3 requestsAnalytics
  • Optimizely

    cdn-pci.optimizely.com

    1 requestAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • HUMAN Security (PerimeterX)

    collector-pxnslc0hv5.px-cloud.net, b.px-cdn.net, client.px-cloud.net, ift.px-cloud.net

    8 requestsFunctional
  • Stripe

    js.stripe.com, m.stripe.network, m.stripe.com

    6 requestsFunctional
  • Google

    fonts.gstatic.com, accounts.google.com

    3 requestsFunctional
  • Sentry

    o4507702880894976.ingest.us.sentry.io

    1 requestFunctional

Cookies set before consent

The longest-lived tracking cookie it set was optimizelyOptOut, from Optimizely, lasting about 13 months.

CookiePurposeSet byLasts
optimizelyOptOutAdvertisingchange.org13 months
__pxvidUnclassifiedchange.org12 months
_change_sessionUnclassifiedwww.change.org13 months
__stripe_midFunctionalwww.change.org12 months
__stripe_sidFunctionalwww.change.orgUnder a day
JSESSIONIDFunctionalnr-data.net (third party)Session
mFunctionalm.stripe.com (third party)13 months
_px3Necessarychange.orgUnder a day
_pxvidNecessarychange.org12 months
pxctsNecessarychange.orgSession

The page also wrote 7 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.