Skip to content
CookieTosser

What does dataprivacyframework.gov track?

Before any consent, dataprivacyframework.gov loaded 2 tracking companies and set 2 advertising or analytics cookies.

That's fewer tracking companies than most sites we scanned: 56% of the 2,450 sites we checked loaded more.

Scanned October 2, 2026 from Germany, loading dataprivacyframework.gov once and clicking nothing. How we scan

Tracking companies
2
Tracking cookies
2
Third-party hosts
10
Cookies in total
4

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

3 of the 8 companies it contacted before consent were content delivery companies.

Other third parties (content delivery, consent, functional, unclassified)

  • azurewebsites.net

    dpfapi.azurewebsites.net

    3 requestsUnclassified
  • Google

    fonts.gstatic.com, fonts.googleapis.com

    3 requestsFunctional
  • Microsoft

    res-1.cdn.office.net

    2 requestsFunctional
  • Microsoft Azure

    privacyshieldprod.blob.core.windows.net

    7 requestsContent delivery
  • Cloudflare

    cdnjs.cloudflare.com

    1 requestContent delivery
  • jQuery CDN

    code.jquery.com

    1 requestContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.

CookiePurposeSet byLasts
_gaAnalyticsdataprivacyframework.gov13 months
_ga_CSLL4ZEK4LAnalyticsdataprivacyframework.gov13 months
ARRAffinityFunctionaldataprivacyframework.govSession
ARRAffinitySameSiteFunctionaldataprivacyframework.govSession

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.