What does citi.com track?
Before any consent, citi.com loaded 9 tracking companies and set 13 advertising or analytics cookies.
That's more tracking companies than 91% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.citi.com once and clicking nothing. How we scan
- Tracking companies
- 9
- Tracking cookies
- 13
- Third-party hosts
- 36
- Cookies in total
- 53
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
7 of the 19 companies it contacted before consent were unclassified.
- LiveRamp4 requestsAdvertising
idsync.rlcdn.com, api.rlcdn.com, live.rezync.com, sr.rlcdn.com
- Zeta Global4 requestsAdvertising
people.api.zetaglobal.net, cdn.boomtrain.com, events.api.boomtrain.com
- Amazon Advertising2 requestsAdvertising
s.amazon-adsystem.com
- Google Ads1 requestAdvertising
ad.doubleclick.net
- Ensighten22 requestsAnalytics
nexus.ensighten.com, data.privacy.ensighten.com
- Qualtrics11 requestsAnalytics
siteintercept.qualtrics.com, zn3vi8kkuds0jjrfc-citifeedback.siteintercept.qualtrics.com
- Adobe8 requestsAnalytics
assets.adobedtm.com, dpm.demdex.net, adobedc.demdex.net, citi.demdex.net
- Google Analytics5 requestsAnalytics
www.googletagmanager.com
- Scorecard Research (Comscore)1 requestAnalytics
sb.scorecardresearch.com
Other third parties (content delivery, consent, functional, unclassified)
- gbqofs.com4 requestsUnclassified
cdn.gbqofs.com
- rfihub.com2 requestsUnclassified
recs-prod.rfihub.com, p.rfihub.com
- a79ab95c1589a13f8a4cab612bc71f9f7.com2 requestsUnclassified
1.a79ab95c1589a13f8a4cab612bc71f9f7.com
- b406929acabac9b095f124c81bdfcf57f.com2 requestsUnclassified
1.b406929acabac9b095f124c81bdfcf57f.com
- c81358859121583b7adf2ace89cb39f44.com2 requestsUnclassified
1.c81358859121583b7adf2ace89cb39f44.com
- tvpixel.com2 requestsUnclassified
c.tvpixel.com, p.tvpixel.com
- rfihub.net1 requestUnclassified
c1.rfihub.net
- Sourcepoint3 requestsConsent banner
launchpad-wrapper.privacymanager.io, launchpad.privacymanager.io, geo.privacymanager.io
- Google5 requestsFunctional
www.google.com
- LexisNexis Risk Solutions (ThreatMetrix)4 requestsFunctional
h.online-metrix.net, h64.online-metrix.net, 89oebq5kmhbyaptji4utgfwb3idolyli2ao53r6a110e3e9b375c232eam1.e.aa.online-metrix.net
Cookies set before consent
The longest-lived tracking cookie it set was ad-privacy, from Amazon Advertising, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _gcl_au | Advertising | citi.com | 3 months |
| ad-id | Advertising | amazon-adsystem.com (third party) | 9 months |
| ad-privacy | Advertising | amazon-adsystem.com (third party) | 13 months |
| AMCV_61834D9B5228A7430A490D45%40AdobeOrg | Advertising | citi.com | 13 months |
| AMCVS_61834D9B5228A7430A490D45%40AdobeOrg | Advertising | citi.com | Session |
| demdex | Advertising | demdex.net (third party) | 6 months |
| dpm | Advertising | dpm.demdex.net (third party) | 6 months |
| everest_g_v2 | Advertising | everesttech.net (third party) | 12 months |
| sd-session-id | Advertising | live.rezync.com (third party) | 6 months |
| zync-uuid | Advertising | rezync.com (third party) | 6 months |
| s_gpv | Analytics | www.citi.com | Session |
| s_nr30 | Analytics | www.citi.com | 30 days |
| sp | Analytics | tvpixel.com (third party) | 12 months |
| _bti | Unclassified | citi.com | 12 months |
| _bts | Unclassified | citi.com | Under a day |
| _cls_cfgver | Unclassified | prod.report.nacustomerexperience.citi.com | Session |
| _cls_s | Unclassified | prod.report.nacustomerexperience.citi.com | Session |
| _cls_s | Unclassified | citi.com | Session |
| _cls_v | Unclassified | prod.report.nacustomerexperience.citi.com | Session |
| _cls_v | Unclassified | citi.com | 13 months |
| _dpm_id.d03c | Unclassified | citi.com | 12 months |
| _dpm_ses.d03c | Unclassified | citi.com | Under a day |
| AKMTLTSID | Unclassified | citi.com | Session |
| bcsid | Unclassified | citi.com | Session |
| bmuid | Unclassified | citi.com | 12 months |
| CB_AOSDMPRF | Unclassified | www.citi.com | Session |
| CB_popsplit | Unclassified | citi.com | 12 months |
| cdContextId | Unclassified | citi.com | Session |
| cdSNum | Unclassified | citi.com | Under a day |
| citi_authorization | Unclassified | citi.com | Under a day |
| CITI_ENSIGHTEN_PRIVACY_BANNER_LOADED | Unclassified | citi.com | Session |
| CITI_privacy_cc_SYNC | Unclassified | citi.com | Session |
| CITI_SITE | Unclassified | citi.com | Session |
| CUUID | Unclassified | citi.com | 12 months |
| DBSkelLoad | Unclassified | citi.com | Session |
| experience | Unclassified | citi.com | Session |
| kndctr_61834D9B5228A7430A490D45_AdobeOrg_cluster | Unclassified | citi.com | Under a day |
| kndctr_61834D9B5228A7430A490D45_AdobeOrg… | Unclassified | citi.com | 13 months |
| precacheBAU | Unclassified | www.citi.com | 3 months |
| RFXPUID | Unclassified | citi.com | 14 days |
| ROUTEID | Unclassified | prod.report.nacustomerexperience.citi.com | Session |
| rto | Unclassified | prod.report.nacustomerexperience.citi.com | Session |
| rto | Unclassified | citi.com | Session |
| rud | Unclassified | rfihub.com (third party) | 13 months |
| ruds | Unclassified | rfihub.com (third party) | Session |
| tenantId | Unclassified | citi.com | Under a day |
| thx_guid | Unclassified | content22.online.citi.com | 13 months |
| tmx_guid | Unclassified | content22.online.citi.com | 13 months |
| tmx_sessionid | Unclassified | citi.com | Session |
| _abck | Functional | citi.com | 12 months |
| AWSALB | Functional | www.citi.com | 7 days |
| AWSALBCORS | Functional | www.citi.com | 7 days |
| bm_sz | Necessary | citi.com | Under a day |
The page also wrote 24 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.