What does cmu.edu track?
Before any consent, cmu.edu loaded 6 tracking companies and set 14 advertising or analytics cookies.
That's more tracking companies than 83% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.cmu.edu once and clicking nothing. How we scan
- Tracking companies
- 6
- Tracking cookies
- 14
- Third-party hosts
- 28
- Cookies in total
- 22
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 6 tracking companies still loaded while it was unanswered.
Companies contacted before consent
3 of the 12 companies it contacted before consent were analytics companies.
- Google Ads14 requestsAdvertising
googleads.g.doubleclick.net, www.google.de, www.googleadservices.com, static.doubleclick.net
- Microsoft Advertising1 requestAdvertising
c.bing.com
- YouTube18 requestsSocial media
www.youtube.com, i.ytimg.com
- Adobe20 requestsAnalytics
use.typekit.net, p.typekit.net
- Microsoft Clarity7 requestsAnalytics
t.clarity.ms, c.clarity.ms, www.clarity.ms, scripts.clarity.ms
- Google Analytics6 requestsAnalytics
www.googletagmanager.com, region1.analytics.google.com
Other third parties (content delivery, consent, functional, unclassified)
- usersnap.com1 requestUnclassified
widget.usersnap.com
- OneTrust12 requestsConsent banner
cdn.cookielaw.org, geolocation.onetrust.com
- Google15 requestsFunctional
www.google.com, fonts.gstatic.com, cse.google.com, clients1.google.com
- ipify1 requestFunctional
api.ipify.org
- unpkg2 requestsContent delivery
unpkg.com
- Cloudflare1 requestContent delivery
cdnjs.cloudflare.com
Cookies set before consent
The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| __Secure-ROLLOUT_TOKEN | Advertising | youtube.com (third party) | 6 months |
| _gcl_au | Advertising | cmu.edu | 3 months |
| ANONCHK | Advertising | c.clarity.ms (third party) | Under a day |
| MR | Advertising | c.bing.com (third party) | 7 days |
| MR | Advertising | c.clarity.ms (third party) | 7 days |
| MUID | Advertising | bing.com (third party) | 13 months |
| MUID | Advertising | clarity.ms (third party) | 13 months |
| VISITOR_INFO1_LIVE | Advertising | youtube.com (third party) | 6 months |
| VISITOR_PRIVACY_METADATA | Advertising | youtube.com (third party) | 6 months |
| _clck | Analytics | cmu.edu | 12 months |
| _clsk | Analytics | cmu.edu | 1 day |
| _ga | Analytics | cmu.edu | 13 months |
| _ga_1XQYSMEBVE | Analytics | cmu.edu | 13 months |
| SM | Analytics | c.clarity.ms (third party) | Session |
| ipCheckCompleted | Unclassified | www.cmu.edu | Under a day |
| __Secure-YNID | Functional | youtube.com (third party) | 6 months |
| AWSALB | Functional | events.cmu.edu | 7 days |
| AWSALBCORS | Functional | events.cmu.edu | 7 days |
| OptanonConsent | Functional | cmu.edu | 12 months |
| SRM_B | Functional | c.bing.com (third party) | 13 months |
| test_cookie | Functional | doubleclick.net (third party) | Under a day |
| YSC | Functional | youtube.com (third party) | Session |
The page also wrote 1 key to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.