Skip to content
CookieTosser

What does character.ai track?

Before any consent, character.ai loaded 5 tracking companies and set 4 advertising or analytics cookies.

That's more tracking companies than 78% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading character.ai once and clicking nothing. How we scan

Tracking companies
5
Tracking cookies
4
Third-party hosts
19
Cookies in total
10

Consent banner

The page loaded Google Funding Choices, a consent management platform. Everything below was recorded before anyone answered it. 5 tracking companies still loaded while it was unanswered.

Companies contacted before consent

2 of the 9 companies it contacted before consent were social media companies.

  • Google Ads

    securepubads.g.doubleclick.net, pagead2.googlesyndication.com

    4 requestsAdvertising
  • Reddit

    alb.reddit.com, www.redditstatic.com, pixel-config.reddit.com

    7 requestsSocial media
  • Meta

    connect.facebook.net, www.facebook.com

    3 requestsSocial media
  • Google Analytics

    www.googletagmanager.com

    2 requestsAnalytics
  • Cloudflare Web Analytics

    static.cloudflareinsights.com

    1 requestAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • characterai.io

    characterai.io

    2 requestsUnclassified
  • prodregistryv2.org

    prodregistryv2.org

    1 requestUnclassified
  • Google

    fundingchoicesmessages.google.com, www.gstatic.com, www.google.com, fonts.gstatic.com

    38 requestsFunctional
  • Sentry

    o4504695552606208.ingest.sentry.io

    3 requestsFunctional

Cookies set before consent

The longest-lived tracking cookie it set was FCCDCF, from Google, lasting about 13 months.

CookiePurposeSet byLasts
_fbpAdvertisingcharacter.ai3 months
_rdt_uuidAdvertisingcharacter.ai3 months
AMP_39bbdcaee6Analyticscharacter.ai12 months
FCCDCFAnalyticscharacter.ai13 months
__cfwaitingroom_caiUnclassifiedcharacter.aiUnder a day
deployment-hashUnclassifiedcharacter.aiUnder a day
deployment-targetUnclassifiedcharacter.aiUnder a day
web-next-authUnclassifiedcharacter.ai13 months
__cf_bmFunctionalcharacter.aiUnder a day
__cf_bmFunctionalcharacterai.io (third party)Under a day

The page also wrote 3 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.