What does cms.gov track?
Before any consent, cms.gov loaded 6 tracking companies and set 9 advertising or analytics cookies.
That's more tracking companies than 83% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.cms.gov once and clicking nothing. How we scan
- Tracking companies
- 6
- Tracking cookies
- 9
- Third-party hosts
- 11
- Cookies in total
- 16
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
5 of the 6 companies it contacted before consent were analytics companies.
- YouTube2 requestsSocial media
www.youtube.com
- Qualtrics16 requestsAnalytics
gov1.siteintercept.qualtrics.com, zn4gdyqqnaoifyulj-cmsmacfedramp.gov1.siteintercept.qualtrics.com, zn77ecfujq2tt2srz-medicare.gov1.siteintercept.qualtrics.com, gov1.sr.qualtrics.com
- Google Analytics8 requestsAnalytics
www.googletagmanager.com, region1.google-analytics.com
- Tealium5 requestsAnalytics
tags.tiqcdn.com
- Adobe2 requestsAnalytics
cdn1.adoberesources.net, adobedc.demdex.net
- Digital Analytics Program (DAP)2 requestsAnalytics
dap.digitalgov.gov
Cookies set before consent
The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| __Secure-ROLLOUT_TOKEN | Advertising | youtube.com (third party) | 6 months |
| AMCV_0600459D5DBAF9400A495E7C%40AdobeOrg | Advertising | cms.gov | 13 months |
| demdex | Advertising | demdex.net (third party) | 6 months |
| VISITOR_INFO1_LIVE | Advertising | youtube.com (third party) | 6 months |
| VISITOR_PRIVACY_METADATA | Advertising | youtube.com (third party) | 6 months |
| _ga | Analytics | cms.gov | 13 months |
| _ga_CSLL4ZEK4L | Analytics | cms.gov | 13 months |
| QSI_HistorySession | Analytics | www.cms.gov | Session |
| QSI_ReplaySession_Info_ZN_77ecFuJq2Tt2Srz | Analytics | www.cms.gov | Session |
| cms_fpid | Unclassified | cms.gov | 13 months |
| CONSENTMGR | Unclassified | cms.gov | 13 months |
| kndctr_0600459D5DBAF9400A495E7C_AdobeOrg_cluster | Unclassified | cms.gov | Under a day |
| kndctr_0600459D5DBAF9400A495E7C_AdobeOrg… | Unclassified | cms.gov | 13 months |
| __Secure-YNID | Functional | youtube.com (third party) | 6 months |
| utag_main | Functional | cms.gov | 12 months |
| YSC | Functional | youtube.com (third party) | Session |
The page also wrote 3 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.