Skip to content
CookieTosser

What does customer.io track?

Before any consent, customer.io loaded 2 tracking companies and set 1 advertising or analytics cookie.

That's fewer tracking companies than most sites we scanned: 56% of the 2,450 sites we checked loaded more.

Scanned October 2, 2026 from Germany, loading customer.io once and clicking nothing. How we scan

Tracking companies
2
Tracking cookies
1
Third-party hosts
7
Cookies in total
5

Consent banner

The page loaded Cookiebot, a consent management platform. Everything below was recorded before anyone answered it. 2 tracking companies still loaded while it was unanswered.

Companies contacted before consent

1 of the 5 companies it contacted before consent were advertising companies.

  • Google Ads

    pagead2.googlesyndication.com

    2 requestsAdvertising
  • Google Analytics

    www.googletagmanager.com, region1.google-analytics.com

    6 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • gist.build

    consumer.cloud.gist.build

    1 requestUnclassified
  • Cookiebot

    consent.cookiebot.com, consentcdn.cookiebot.com

    4 requestsConsent banner
  • Sanity

    cdn.sanity.io

    13 requestsContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was ajs_anonymous_id, from Trustpilot, lasting about 12 months.

CookiePurposeSet byLasts
ajs_anonymous_idAnalyticscustomer.io12 months
_cio_marketing_analyticsUnclassifiedcustomer.io13 months
anonymous_idUnclassifiedcustomer.io30 days
cio_u_idUnclassifiedcustomer.io13 months
embed_urlUnclassifiedcustomer.io30 days

The page also wrote 15 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.